procmail
[Top] [All Lists]

Re: Problem with matching From .net.com and others

1998-01-07 08:25:17
On Tue, 6 Jan 1998  21:57:18 +0200, Era Eriksson wrote:
On Tue, 6 Jan 1998 09:08:20 -0500, Laurence Michaels
<lmichael+procmail(_at_)esun19(_dot_)gdc(_dot_)com> wrote:
I'm trying to match on email From something like any one of the
following:
someone(_at_)test(_dot_)net(_dot_)com
someone(_at_)test(_dot_)com(_dot_)com
someone(_at_)test(_dot_)com(_dot_)gdc(_dot_)com
someone(_at_)test(_dot_)com(_dot_)esun19(_dot_)gdc(_dot_)com

<Snip mind-reading... Well done!>
Looks like what I want is probably the
    FROM=`formail -rtzxTo:`
    :0
    * ... other conditions
    * 100^1 FROM ?? \.(net|com|edu)\.([-a-zA-Z0-9]*\.)?com
    action
(Note: I modified the last parenthesized expression from
(.*\.) to ([-a-zA-Z0-9]*\.) as suggested.)

Though I will be using '-r...' instead of '-rt...',
since this particular line is going in one of my
'detect suspiciously spammish messages' filters,
and I can't trust any apammer to use valid headers.
I'm hoping that this line will detect certain types of
obviously invalid addresses.  False positives aren't
usually a problem, since I filter based on the body
of the message if it seems suspicious.

I have switched over to using
* 100^1 ^From.*\.(net|com|edu)[A-Za-z.]*\.com
This will probably work.

This would match anything(_at_)ix(_dot_)netcom(_dot_)com, is that your 
intention?
                            ^^^^   ^^^^
Err... No... I mistyped.  Meant to say
* 100^1 ^From.*\.(net|com|edu)\.[A-Za-z0-9]*\.com
                              ^^       ^^^

Thanks for the help,
Laurence
-- 
Advertising email will not be accepted,
and is not solicited.

<Prev in Thread] Current Thread [Next in Thread>