Chris wrote: > [EMAIL PROTECTED] wrote: > >> jdow wrote: >> >> Since you're feeling pedantic... >> >>> ===8<--- This set of rules nails it cold. >>> header JD_SIMPLE_EBAY_SPOOFa From =~ /(\"|\.|\b)ebay(\"|\.|\b)/i >>> >> >> An exactly equivalent expression is: >> From =~ /\bebay\b/i >> This also has the added advantage of not populating $1 and $2. >> > Matthew, > > @ebay.com matches that doesn't it?
Yup, it sure does, but that's OK. The intent was to detect email messages where: 1) From matches /\bebay\b/i 2) From DOES NOT MATCH /[EMAIL PROTECTED]/i The fact that "@ebay." matches /bebay\b/ is irrelevant. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer
