Heh, heh... Okay... I see this doesn't work for local mail (LMAIL)... so, remove the "ESMTP " twice... I've attached this to a text file to help.
===== BEGIN ===== if (/\[XMail [^\]]+Server\]/) { if (/^from (\S+) (?:\((${IP_ADDRESS})[^\)]*\) )?by (\S+) (?:\([^\)]*\) )?with \[XMail [^\]]+Server\] id <([^>]+)> for(?: <[^>]*> | )from (<[^>]*>)?;/) { $helo = $1; $ip = $2; $by = $3; $id = $4; $envfrom = $5; goto enough; } } ===== END ===== ------------------------------------------------------------ Jason J Ellingson Technical Consultant 615.301.1682 : nashville 612.605.1132 : minneapolis www.ellingson.com [EMAIL PROTECTED] -- Attached file included as plaintext by Ecartis -- -- File: xmail-sa.txt if (/\[XMail [^\]]+Server\]/) { if (/^from (\S+) (?:\((${IP_ADDRESS})[^\)]*\) )?by (\S+) (?:\([^\)]*\) )?with \[XMail [^\]]+Server\] id <([^>]+)> for(?: <[^>]*> | )from (<[^>]*>)?;/) { $helo = $1; $ip = $2; $by = $3; $id = $4; $envfrom = $5; goto enough; } } - To unsubscribe from this list: send the line "unsubscribe xmail" in the body of a message to [EMAIL PROTECTED] For general help: send the line "help" in the body of a message to [EMAIL PROTECTED]