On Wed, Jan 14, 2004 at 06:10:56PM -0500, Matt Kettler wrote:
> At 05:46 PM 1/14/2004, Scott Lambert wrote:
> >I would like to be able to match the forged HELO then use it in a
> >variable for the two X-AntiAbuse lines. Possible?
>
> meta rules allow you to do boolean and or arithmetic match-ups...
>
>
> ie: meta LOCAL_DRUGS_DIET_PAIN (__LOCAL_DRUGS_DIET &&
> __LOCAL_DRUGS_PAIN)
Yeah, I know. I have tens of meta rules like that, and tens more using
arithmetic.
(I think )?I (need|want) to be able to grab the actual text from the
recieved line and look for a match on that text in the X-AntiAbuse line.
Something like:
header LOCAL_FORGED_RCVD_IN_X_AA X-AntiAbuse =~ /$match_from_non_escaped_parenthesis{
Recieved =~ /from (.*) \(hostname? \[IP\]\)/ }/
but only if the (.*) value is forged (ie. doesn't match hostname or IP).
I don't have any idea what syntax would properly be able to support such
a construct. It probably needs to be an eval rule.
--
Scott Lambert KC5MLE Unix SysAdmin
[EMAIL PROTECTED]
-------------------------------------------------------
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms.
Free Eval! http://www.perforce.com/perforce/loadprog.html
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
