I don't see anything wrong there, Scott.
When I run it through The Regex Coach, I did have to remove the spaces
at the end of the line in your email and then it did work. So, make sure
there is no whitespace at the end of the line in your test file? Make
sure the filter file really is running and not being END'ed before that
line is encountered?
Andrew.
From: Scott Fisher [mailto:sfis...@farmprogress.com]
Sent: Wednesday, November 16, 2011 9:49 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] PCRE help
Subject: [Possible SPAM]=?KOI8-U?B?y8/OxqbExc7DpsrOpiDVx8/EyQ==?=
I am trying to catch the a spam with above subject listed with the below
line:
ANYWHERE 25 PCRE
(?i:((charset|content|lang)=.{0,2}koi8-(r|t|u|ru))|(=\?koi8-(r|t|u|ru)\?
[bq]\?))
Can anyone see what I'm doing wrong?
Scott Fisher | IT Director
FARM PROGRESS COMPANIES | 255 38th Avenue, Suite P | St. Charles, IL
60174-5410
630/462-2323 | Fax 630/462-2957 | sfis...@farmprogress.com
mailto:sfis...@farmprogress.com
www.FarmProgress.com http://www.farmprogress.com/
This email message, including any attachments, is for the sole use of
the intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the
sender by reply email and destroy all copies of the original message.
Although Farm Progress Companies has taken reasonable precautions to
ensure no viruses are present in this email, the company cannot accept
responsibility for any loss or damage arising from the use of this email
or attachments.
--- This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and type
unsubscribe Declude.JunkMail. The archives can be found at
http://www.mail-archive.com.
This message (and any associated files) may contain confidential, proprietary
and/or privileged material and access to these materials by anyone other than
the intended recipient is unauthorized. Unauthorized recipients are required to
maintain confidentiality. Any review, retransmission, dissemination or other
use of these materials by persons or entities other than the intended recipient
is prohibited and may be unlawful. If you have received this message in error,
please notify us immediately and destroy the original.
Ce message et tout document qui y est eventuellement joint peuvent contenir de
l'information confidentielle ou exclusive. L'acces a cette information par
quiconque autre que le destinataire designe en est donc interdit. Les personnes
ou les entites non autorisees doivent respecter la confidentialite de cette
information. La lecture, la retransmission, la communication ou toute autre
utilisation de cette information par une personne ou une entite non autorisee
est strictement interdite. Si vous avez recu ce message par erreur, veuillez
nous en aviser immediatement et le detruire.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
Outlook.jpgimage001.gif
