Toen wij multimedia-fan(_at_)myrealbox(_dot_)com kietelden, kwam er dit uit:
Ruud H.G. van Tol:
To MATCH the last Received-header [...]
:0
* 1^1 ^Received:.*\[\/[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
{ IP = $MATCH }
You reminded me of how I forgot that point that was discussed earlier
here when I asked how can detect the first header.
If by 'first' you mean 'oldest', the quoted recipe can be used.
There is a lot of room for improvement, like limiting
each number to be in the range of 0-255 (or 0-254),
and maybe allow formats like 001,
and require a closing ]-bracket.
You can find many examples of those in the archives.
The Received-headers are normally grouped together. A loose
Received-header further below in the headers is often a
fake one (spam).
--
Grtz, Ruud
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail