On Thu, 16 May 2019, Pedro David Marco wrote:
Hi!
I have a Recived like this:
Received: from pafkiet.edu.pk (email.pafkiet.edu.pk [203.170.75.90]) by ....
I want a rule to match the beginning of a Received:
A rule like this works ok:
header MY_RULE Received =~ /.*from pafkiet.edu.pk/
and in debug mode it shows:
MY_RULE ======> got hit: "from pafkiet.edu.pk"
BUT if i add the ^ anchor to the rule then it does not work...
header MY_RULE Received =~ /^from pafkiet.edu.pk/
Why???
Add this for analysis purposes:
header __ALL_RCVD Received =~ /.*/
tflags __ALL_RCVD multiple
Then you can look in the hits log and see exactly what the full header
strings are.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
...the good of having the government prohibited from doing harm
far outweighs the harm of having it obstructed from doing good.
-- Mike@mike-istan
-----------------------------------------------------------------------
777 days since the first commercial re-flight of an orbital booster (SpaceX)
