Hello, Suppose I've mail header:
Reply-To: exam...@gmail.com From:"=?utf-8?B?TmF1am9zIMSubW9uxJdz?=" prek...@mydomain.lt To: "info.klaipeda" someem...@other.com Subject: ?utf-8?B?IDIwMjAgbWV0xbMgxK9zdGVpZ3RvcyDEr21vbsSXcyAtIHPEhXJhxaFhcw==?= Message-ID: 4def65c03e65ac47882d4d653c201084@192.168.43.63 I want to test "From:" line in header is matching my domain. My regex is: (From|FROM):.*.*@mydomain.com <.*@mydomain%0246%03com> I've tested this regular expression in perl and it shows no match with this data, but MailLog analyzer shows match in *BombHeader RE:* filter. Why this regex is matching in ASSP ? My aim is to block forged sender in mail from text in header part(not sender address). For example, when mail sender address is not from mydomain.com, but mail from label shows some text and forged my domain email user address. Or is DoNoSpoofing and DoNoSpoofing4From covers detects such senders ? Best regards, Kestokas
_______________________________________________ Assp-user mailing list Assp-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-user
