* [EMAIL PROTECTED] <[EMAIL PROTECTED]> [2003-09-18 18:51]:
> Alex,
> I tried and tested you idea and no it doesn't work. This is still the
> simplest answer I have
> (?i)(.* cum .*|cum|cum .*|.* cum)
> Thanks
> Malcolm
Hi Malcom,
while my other mail suggest quoting: (?i).*\\bcum\\b.*
I guess this won't work.
while:
#!/usr/bin/perl
my $var = '(?i).*\\bcum\\b.*';
my $string = "swallow my cum now";
print "match quoted\n" if $string =~ /^$var$/;
print "match literal\n" if $string =~ /^(?i).*\bcum\b.*$/;
prints:
match quoted
match literal
it does not work with Q-S 1.20rc1. So I enabled debugging and played
around. It seems that my original is working (at least with this version
of Q-S):
(?i).*\bcum\b.* Virus-Subject: Test Subject for cum
I tested with:
$ telnet pcluther 25
Trying 146.140.xx.xx...
Connected to pcluther.
Escape character is '^]'.
220 pcluther.xxx.xxx.xxx ESMTP
ehlo me
250-pcluther.xxx.xxx.xxx
250-STARTTLS
250-AUTH LOGIN CRAM-MD5 PLAIN
250-AUTH=LOGIN CRAM-MD5 PLAIN
250-PIPELINING
250-8BITMIME
250 SIZE 50000000
mail from: [EMAIL PROTECTED]
250 ok
rcpt to: [EMAIL PROTECTED]
250 ok
data
354 go ahead
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Content-Type: text/xxx
Subject: swallow my cum now
test
.
250 ok 1063968428 qp 1795
and got
19/09/2003 12:47:00:1795: scanloop: scanner=perlscan_scanner,plain_text_msg=0
19/09/2003 12:47:00:1795: p_s: starting scan of directory
"/var/spool/qmailscan/pcluther10639684204551795"...
19/09/2003 12:47:00:1795: p_s: '102:(?i).*\bcum\b.*' = 'Virus-subject' = 'Test
Subject for cum'
19/09/2003 12:47:00:1795: p_s: type is a header!
19/09/2003 12:47:00:1795: p_s: checking for objects containing subject:
(?i).*\bcum\b.*
19/09/2003 12:47:00:1795: p_s: something to block! (Test Subject for cum)
The Content-Type is needed as Q-S skips scanning if text/plain
A bit confused now
Alex
--
Alex Pleiner
zeitform Internet Dienste Fraunhoferstrasse 5
64283 Darmstadt, Germany
http://www.zeitform.de Tel.: +49 (0)6151 155-635
mailto:[EMAIL PROTECTED] Fax: +49 (0)6151 155-634
GnuPG/PGP Key-ID: 0x613C21EA
-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general
