looking for clue, checking for recorded ip address

Hi,

I guess i'm just overlooking a thing here, but can someone explain why
this does not work?

  QUAD = "([1-9]|[1-9][0-9]|1[0-9][0-9]|2([0-4][0-9]|5[0-5]))"
  IP = "${QUAD}\.${QUAD}\.${QUAD}\.${QUAD}"

  :0
  * ! ^Received: \(from
  * ! ^Received: from.*${IP}
  [action: One of the servers did not record senders IP address.]

I want to test for Received lines without an (valid) IP adress.

Thankx in advance, -Rejo.

-- 
= Rejo Zenger  <rejo(_at_)sisterray(_dot_)xs4all(_dot_)nl>                      
 PGP: see headers
= Too much to fit in this .sig:  http://mediaport.org/~sister (and my_urls.html)
--------------------------------------------------------------------------------
  Destroy a spamhaus! http://www.xs4all.nl/~sister/mirror/sengir/spam_sites.html