On Tue, Dec 04, 2001 at 04:23:58PM -0600, Richard Garand wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I was just trying to use procmail to filter the new goner virus (I already > have a system that removes .scr attachments, but I want to get this > working...). I started with the recipe > > :0 > * ^.*:.*"gone.scr" > /var/spool/infectedmail > > which didn't match, and then I reduced it to > > :0 > * "gone.scr" > /var/spool/infectedmail > > but this still doesn't match anything (sending an empty gone.scr to myself). > I tried manually egreping the message (I saw a mention of procmail passing > the recipe string to egrep in the manpage), and the second one matched two > lines, so why doesn't procmail match at least the second rule? > - --
Because the default flag is H, which means egrepping the header, so :0 is the same that :0H. If you want to match strings in attachments you have to use something like: :0 B * gone.scr /var/spool/infectedmail warek -- Arkadiusz Wójtowicz Internet Designers S.A. tel. (071) 35 00 445 wew. 45 http://www.id.pl, e-mail: [EMAIL PROTECTED]
msg02069/pgp00000.pgp
Description: PGP signature
