procmail
[Top] [All Lists]

Re: 'nuther msgid pattern?

2003-02-04 11:11:43
fleet(_at_)teachout(_dot_)org wrote:

egrep -i "message-id: [<][0-9]{10}[(_dot_)][0-9]{4}[(_at_)]" file(s)

gives me no false hits.  The terminal @ appears to be necessary.  All
the msgid strings begin with 104??? The second part (just before the
@) can be four or five digits.  This also got hits in an old spam
folder (Aug 02).

Hits nothing at all on my current spam (or good mail).  But okay; it
might be useful as another footprint of a spam engine emanating phonied
M-ID's.


Is there a way to say "4 or 5 digits"?  Something like [$N[$N]]@ maybe?

That's what the question mark does in a regular expression.

        $N?

means "zero or one $Ns".

-- 
dman


_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail