Am 2008-06-29 10:55:19, schrieb thadcoco: > I just tried, but it doesn't work either. Recall that the nasty IP is > wrapped as part of an attachment. I need to be able to scan the entire raw > message with either SA or I suppose procmail.
Don't be to complicate and EGREP the BODY for it:
:0B
* Received: .*89.83.98.193
/dev/null
and this is definitivly faster then spamassassin. or you can use:
BODY=`formail -I ""`
:0
* ? echo -e "${BODY}" |egrep --file=/path/to/your/regexp.file
/dev/null
where you can put ANY arbitary RegExp pattern in the file and the body
will be EGREPed for it. If it MATCH, egrep return TRUE and the messages
filtered in the special folder /dev/null
Thanks, Greetings and nice Day/Evening
Michelle Konzack
Systemadministrator
24V Electronic Engineer
Tamay Dogan Network
Debian GNU/Linux Consultant
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
##################### Debian GNU/Linux Consultant #####################
Michelle Konzack Apt. 917 ICQ #328449886
+49/177/9351947 50, rue de Soultz MSN LinuxMichi
+33/6/61925193 67100 Strasbourg/France IRC #Debian (irc.icq.com)
signature.pgp
Description: Digital signature
