Timothy J Luoma wrote:
->
->
-> Ok, most of the spam I am getting has these lines as the *first* lines of
-> the message.
->
-> SO I would like to match this iff it comes after one blank line at the top
-> of the message:
->
->
-> Authenticated sender is
-> Subject:
-> Mime-Version: 1.0
-> Content-Type: text/plain; charset="us-ascii"
-> Content-Transfer-Encoding: 7bit
->
-> but I am having trouble making it work, here's what I have tried:
->
-> :0 B
-> * ^Authenticated sender is
-> * ^Subject:
-> * ^Mime-Version: 1\.0
-> * ^Content-Type: text\/plain\; charset="us-ascii"
^ ^
I would make a guess that you'd need to quote the quotes (?) such as:
* ^Content-Type: text\/plain\; charset=\"us-ascii\"
-> * ^Content-Transfer-Encoding: 7bit
-> | formail -A"X-SpamChecker: 5-fold-spam-match"
->
-> Clues appreciated
LOGFILE output would be helpful... I mean saying it doesn't work
is kinda vague :^>
However, as is, your recipe doesn't match an email with those lines as the
first ones in the body, but any email with those lines *anywhere* in the
body. I'm sure your aware of that, and don't mind the potential (however
slight) for false positives.
Lates!
--
Tim <bodysurf(_at_)pobox(_dot_)com>
mailto:bodysurf(_at_)pobox(_dot_)com
Finger bodysurf(_at_)pobox(_dot_)com for my PGP public key (Bits 1024/KeyID
09DA5C49)
PGP Key FingerPrint (09/03/94): 4C97 F1FA 7055 6891 49D1 ADF2 DD63 0C15
-------------------=> Please PGP encrypt your email <=--------------------