On Thu, 25 Mar 2004, Charles Gregory wrote: > header FAKHELO Received =~ /hwcn.org \(.*[(?!199\.212\.94\.[0-9]+).*]\)/i > > (where 199.212.94.? is our class C for the negative look-ahead)
Good in theory, but look-ahead has to be a fixed-length string, so you can't have [0-9]+ in there. Also you need to backslash the outer set of square brackets. I think header FAKHELO Received =~ /hwcn.org \(.*\[(?!199\.212\.94\.)[0-9]+.*\]\)/i might do it.
