Don't know. This meta rule seems to work fine for me. Perhaps one of __X, __Y or Z is defined another rule. SA wouldn't warn you on it. Try changing their names to something longer and unique.
> On 8/3/05, Sven Riedel <[EMAIL PROTECTED]> wrote: > > > > > > Hi, > > > > > On Wed, Aug 03, 2005 at 08:18:16AM +0200, Sven Riedel wrote: > > > > header __X Content-Type =~ /^(message|multipart)/i > > > > rawbody __Y /\S/ > > > > meta Z ( !X && !Y ) > > > > > > > > and yet the rule triggers for me. Doing a > > > > > Of course. __X != X ... :) > > > > D'oh. That was an error in writing this mail though, not in > > the rules. :) > > > > So the real meta rule acutally _is_ (!__X && !__Y) > > > > Regs, > > Sven > > > > > > -- Ilan Aisic Registered Linux User 8124 http://counter.li.org
