On 2 Jan 2007 at 23:04, Fritz Borgstedt wrote: > This Received header is a 100% spam header and very often used. > > Received: from 65.254.254.56 (HELO mail.aade.com) > by a-h-p.de with esmtp (SNT-XJE5 .,2;5) > id +;*U3T-NQ<*0:-.A > for [EMAIL PROTECTED]; Tue, 2 Jan 2007 18:09:42 +0180 > > > I tried to catch it by: > > Received{1,60}by (.{3,20}) with esmtp.{1,30}for.{1,[EMAIL PROTECTED] > > Better ideas?
Not really. '.' after Received was a typo? but it still fails (on my regex checker) on the $1. It doesn't recognise it as first group reference and the whole selection fails. Take it out and it matches up to the @ paul ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user