Hello Alan,
Am 2004-11-24 21:23:08, schrieb Alan Clifford:
On Wed, 24 Nov 2004, Michelle Konzack wrote:
MK> | Received: from [192.168.0.210]
(67-137-116-114.dsl2.brv.mn.frontiernet.net [67.137.116.114])
MK> | by relay04.roc.ny.frontiernet.net (Postfix) with ESMTP id
0C15710265;
MK> | Wed, 24 Nov 2004 15:59:31 +0000 (UTC)
A match on the last two.
I know, but why does
------------------------------------------------------------------------
:0 H
* ^Received: from.*\[.*\](.*$)+Received:.*\[222+\.[0-9]+\.[0-9]+\.[0-9]+
ATTENTION/Blocked_Kornet/
------------------------------------------------------------------------
work on the second "Received:" header but not
------------------------------------------------------------------------
:0 cH
* ^Received: from.*\[.*\](.*$)+Received:.*(dsl|pool.)
ATTENTION/Blocked_ADSL/
------------------------------------------------------------------------
I have taken this lines from the "procmail-spamhaus" recipe and
------------------------------------------------------------------------
########## first IP ##########
:0 H
* Received:.*\[\/[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
{
...
########## second IP ##########
:0 H
* Received: from.*\[.*\](.*$)+Received:.*\[\/[0-9]+\.[0-9]+\.[0-9]+\.[0-9]+
{
...
------------------------------------------------------------------------
works on the second "Received: " header too. I do not understand this...
Greetings
Michelle
--
Linux-User #280138 with the Linux Counter, http://counter.li.org/
Michelle Konzack Apt. 917 ICQ #328449886
50, rue de Soultz MSM LinuxMichi
0033/3/88452356 67100 Strasbourg/France IRC #Debian (irc.icq.com)
signature.pgp
Description: Digital signature
____________________________________________________________
procmail mailing list Procmail homepage: http://www.procmail.org/
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail