I have a rule to find any 'a href' followed by an 'img src' later in the message, but I am getting nothing, which baffles me (and I am not a regex newbie).
You might not be a regex newbie, but you aren't escaping spaces and special chars and you are putting funny things next to eachother that didn't ought to be there.
Get hold of "pcretest" and test regexps and pcre stuff:
1152 [root:billy.demon.nl] /etc/postfix/maps # pcretest PCRE version 4.1 12-Mar-2003
re> /a\ href=.*img\ src=/
data> a href=fafafaafdcacaimg src=
0: a href=fafafaafdcacaimg src=
data> a href="http://www.fynance3.biz/mka/m2c.php?man=st4vp">Read about it<WOW>he<YW>re<br><img src="http://www.fynance3.biz/p.gif
0: a href="http://www.fynance3.biz/mka/m2c.php?man=st4vp">Read about it<WOW>he<YW>re<br><img src=
Best,
Tony
-- Tony Earnshaw
I love the music of Wagner. The only sound that pleases me more is that of a cat outside my 9th floor window, trying to cling to the glass with its claws.
http://j-walk.com/blog/docs/conference.htm http://www.billy.demon.nl Mail: [EMAIL PROTECTED]
------------------------------------------------------- This SF.Net email sponsored by: Parasoft Error proof Web apps, automate testing & more. Download & eval WebKing and get a free book. www.parasoft.com/bulletproofapps _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk