Bryan Farrish had these conditions:
| * ^To:.*bryan|radio|via.net|adsong
| * ^Subject:.*unsub|radio|newslet|publi|cancel|remove
and doesn't understand how a message with this head passed them both:
| From 02283346(_at_)aol(_dot_)comSun Dec 28 09:01:54 1997
| >From bryanf Sat Dec 27 22:08:35 1997
| Received: from saturn.web2000.net (saturn.web2000.net [206.31.112.8]) by
mustang.via.net (8.6.9/8.6.9) with ESMTP id WAA16900 for
<radio-media(_at_)adsong(_dot_)com>; Sat, 27 Dec 1997 22:08:33 -0800
| From: 02283346(_at_)aol(_dot_)com
| X-Authentication-Warning: saturn.web2000.net: ascend-1-34.web2000.net
[206.31.113.34] didn't use HELO protocol
| Received: from aol.com by aol.com (8.8.5/8.6.5) with SMTP id GAA08768 for
<ro455h73(_at_)aol(_dot_)com>; Sun, 28 Dec 1997 00:35:13 -0600 (EST)
| Date: Sun, 28 Dec 97 00:35:13 EST
| To: ro455h73(_at_)aol(_dot_)com
| Subject: AD: * * * E-Mail Special * * *
| Message-ID: <199712272654FAA6058(_at_)aol(_dot_)com>
| Reply-To: ro455h73(_at_)aol(_dot_)com
| X-UIDL: 51612845976435845789245681384597
| Comments: Authenticated sender is <ro455h73(_at_)aol(_dot_)com>
My guess is that Bryan meant to write this:
* ^To:.*(bryan|radio|via\.net|adsong)
* ^Subject:.*(unsub|radio|newslet|publi|cancel|remove)
because what he wrote is equivalent to this:
* (^To:.*bryan|radio|via.net|adsong)
* (^Subject:.*unsub|radio|newslet|publi|cancel|remove)
Note that the string "radio" anywhere in the head can make a message pass
both conditions, and the topmost Received: line has that string.