On Fri, 30 Apr 2021, Henrik K wrote:


Please note the large changeset and have a try.  I've been tweaking it all
week, should be good for general use.


On Fri, Apr 30, 2021 at 06:17:51PM -0000, [email protected] wrote:
Author: hege
Date: Fri Apr 30 18:17:51 2021
New Revision: 1889337

URL: http://svn.apache.org/viewvc?rev=1889337&view=rev
Log:
- Improved internal header address (From/To/Cc) parser, now also handles
  multiple addresses.  Optional support for external Email::Address::XS
  parser, which can handle nested comments and other oddities.


Ooo...

While you're digging around in that maybe this would be something that could naturally fall out of it:

For a long time I've been wishing for some rule RE syntax where we could interpolate the recipient email address into rules without writing a FULL rule that tries to match it in the headers and then in the body - for example, the recent google storage URI with recipient's email address phishing rule I added which uses a very loose generic email format match would benefit from an explicit match on the recipient email address.

Generating a RE fragment that would match on any of the extracted to/cc header email addresses would probably be fairly easy as part of this. But how would we incorporate that fragment in rules?


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]                         pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Activism is a way for useless people to feel important,
  even if the consequences of their activism are counterproductive
  for those they claim to be helping and damaging
  to the fabric of society as a whole.               -- Thomas Sowell
-----------------------------------------------------------------------
 Tomorrow: May Day - Remember 110 million people murdered by Communism

Reply via email to