Re: [SAtalk] Re: FROM_AND_TO_SAME Rule does not seem to work

2003-11-13 Thread Gerhardt, Scott
--On Thursday, November 13, 2003 11:57 AM -0500 Lukreme <[EMAIL PROTECTED]> wrote: > Note that __NOT_CAMI_IP contains a negative operator and contains a > regex matching all of my "legit" IP networks (pared down here for > readability). "legit" meaning "yours"? Yes, meaning all IP networks that m

[SAtalk] Re: FROM_AND_TO_SAME Rule does not seem to work

2003-11-13 Thread Lukreme
On 12 Nov 2003, at 13:09, Gerhardt, Scott wrote:   ## Forged CAMI Header   header   __CLAIMS_FROM_CAMI    From  =~   /[EMAIL PROTECTED]/i   header   __NOT_CAMI_IP Received  !~   /\[206\.252\.197\.\d+\]/   meta FORGED_CAMI_RCVD  (__CLAIMS_FROM_CAMI && __NOT_CAMI_IP)   describe F