On Sunday 08 April 2007, John D. Hardin wrote:
>On Sun, 8 Apr 2007, Gene Heskett wrote:
>> Greetings;
>>
>> trigger phrases of the ip address, presented in the form of
>>
>> * ^X-Originating-IP: "from \[xxx\.xxx\.xxx\.xxx\]"
>>
>> don't seem to be working.
>>
>> Is my syntax for the use of the '\' escape wrong?
>
>No, but I question the quotes - are they actually present in the
>header you are trying to match? If not, why are they there?
>
Humm, because the examples I saw that used the FQDN form of an address all 
worked quite well?  A list of about 10 of those managed to trigger 
and /dev/null about 100 messages I didn't want to see just in the past 
week, and has hit as high as 350 a few weeks back.  But those triggers 
are in the form of

* ^Received: "from xyz\.abc\.def\.com" & etc.

>--
> John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
> [EMAIL PROTECTED]    FALaholic #11174     pgpk -a [EMAIL PROTECTED]
> key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
>-----------------------------------------------------------------------
>  Windows Vista: Windows ME for the XP generation.
>-----------------------------------------------------------------------
> 5 days until Thomas Jefferson's 264th Birthday



-- 
Cheers, Gene
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
Why would anyone want to be called "Later"?

Reply via email to