Bram Mertens <[EMAIL PROTECTED]> writes: > From: Bram Mertens <[EMAIL PROTECTED]> > Subject: Re: how do I write a regex that looks for 'X' 'NOT Y' 'Z' > To: perl beginners-digest mailing list <[EMAIL PROTECTED]> > Date: Tue, 30 Mar 2004 18:27:58 +0200 > Message-Id: <[EMAIL PROTECTED]> > > On Tue, 2004-03-30 at 17:37, Harry Putnam wrote: > [...] >> You may get some REALLY inventive regex here... I have before. >> But I think you're working too hard and should resort to >> spamassassins own tools. This can be done with a push/pull technique. >> >> Investigate spamassassins `meta' handle. (In place of the more normal >> `header' handle) > [...] > > Thanks, but I should have mentioned that I'm NOT testing the from > header. I'm trying to catch messages that look like bounced messages > from me but that don't include my correct e-mail-info. > > I already have a rule that does what you suggested, it looks like: > header M8RAM_FAKE_FROM From =~ > /(?<!(?:^Bram\sMertens\s)|(?:^Mertens\sBram\s))<my_e-mail-address>/ > score M8RAM_FAKE_FROM 1.0 > describe M8RAM_FAKE_FROM From contains my address but I didn't send this!
Is there some reason you can't use the same technique for body? -- To unsubscribe, e-mail: [EMAIL PROTECTED] For additional commands, e-mail: [EMAIL PROTECTED] <http://learn.perl.org/> <http://learn.perl.org/first-response>