On 17/10/2003 at 11:08:53, Tom Baker|Netsmith Inc wrote: > or if i'm not mistaken regexp/pcre files are scanned top to bottom looking > for a match. > move the jp filter line to the very bottom. > then place something like this just above it > /\.groups\.yahoo\.com/ OK
> thus any message with groups.yahoo.com in the header will skip the jp > filter, but it will apply to everything else so it keeps "some" > effectiveness. Make sure you understand the limited scope of that OK - it OK's the particular header line which matches the regexp, not the entire message. If you have a message with headers like: From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: evil blocked stuff And a header_checks.regexp of: /[EMAIL PROTECTED]/ OK /evil blocked stuff/ REJECT Then the message _will_ be rejected - the Subject header matches the REJECT line and not the OK line. The fact that the To header matches the OK line is irrelevant, because it's not being rejected based on the To header. Or as the docs put it, "A rule ending in OK affects only the header being matched. The next header may still result in a REJECT match, causing the mail still to be rejected." I have found uses for OK, like letting one particular attachment past all our EXE-blocking filters. I don't think it can be used to avoid blocking on the Content-Type header for specific domains though. Cheers, Evan
