On 11 June 1998, Timothy J Luoma
<luomat+Lists/Unix/procmail(_at_)luomat(_dot_)peak(_dot_)org> wrote:
Ok, most of the spam I am getting has these lines as the *first* lines
of the message.
SO I would like to match this iff it comes after one blank line at the
top of the message:
Authenticated sender is
Subject:
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"
Content-Transfer-Encoding: 7bit
but I am having trouble making it work, here's what I have tried:
:0 B
* ^Authenticated sender is
* ^Subject:
* ^Mime-Version: 1\.0
* ^Content-Type: text\/plain\; charset="us-ascii"
* ^Content-Transfer-Encoding: 7bit
| formail -A"X-SpamChecker: 5-fold-spam-match"
Clues appreciated
On 11 June 1998, David W. Tamkin <dattier(_at_)wwa(_dot_)com> wrote:
Escaping the semicolon, while unnecessary, is harmless, but escaping
the slash turns it into the extraction mark. You're now asking for
[newline]Content-Type: textplain; charset="us-ascii"
and trying to extract from "plain" onward. But that condition
doesn't match at all, because the actual text is "text/plain", not
"textplain".
Don't escape the slash.
Hmm, apart from that, since you say the lines are always in this
order, you might also try merging them in a big multiline pattern.
Regards,
Liviu
--
Dr. Liviu Daia e-mail: daia(_at_)stoilow(_dot_)imar(_dot_)ro
Institute of Mathematics web page: http://www.imar.ro/~daia
of the Romanian Academy PGP key: finger
daia(_at_)stoilow(_dot_)imar(_dot_)ro