"Concordio M. Pajayat, Jr." <[EMAIL PROTECTED]> writes: > I notice that I am receiving SPAM emails that has a certain characteristic > on the headers. Here are some of the headers on my filters file: > > headers 'Abuse-Tracking: <WTI5dWNHRnFRSEJwYkc1bGRDNWpiMjA9>' drop > headers 'Abuse-Tracking: <Y0dsc2JtVjBRSEJwYkc1bGRDNWpiMjA9>' drop > headers 'ABC-Tracking: <cGlsbmV0QHBpbG5ldC5jb20=>' drop > headers 'Abuse2-Tracking: <Y29ucGFqQHBpbG5ldC5jb20=>' drop > headers 'Nex-Tracking: <Y29ucGFqQHBpbG5ldC5jb20=>' drop > headers 'ABC-Tracking: <Y29ucGFqQHBpbG5ldC5jb20=>' drop > headers 'Kel-Tracking: <Y29ucGFqQHBpbG5ldC5jb20=>' drop > headers 'Kew-Tracking: <Y29ucGFqQHBpbG5ldC5jb20=>' drop > headers 'Hel-Tracking: <cGlsbmV0QHBpbG5ldC5jb20=>' drop > headers 'Hel-Tracking: <Y29ucGFqQHBpbG5ldC5jb20=>' drop > headers 'Bel-Tracking: <cGlsbmV0QHBpbG5ldC5jb20=>' drop > headers 'Bel-Tracking: <Y29ucGFqQHBpbG5ldC5jb20=>' drop > > How do I block these perky SPAM emails using the following keyword on the > headers: > > JwYkc1bGRDNWpiMjA9 > QHBpbG5ldC5jb20= or QHBpbG5ldC5jb20 > > What is the proper syntax to use? I do appreciate any inputs or suggestions.
headers '.+-Tracking:\s*<.+(QHBpbG5ldC5jb20=|JwYkc1bGRDNWpiMjA9)>' drop should match each one of the headers you listed above. Tim _____________________________________________ tmda-users mailing list ([EMAIL PROTECTED]) http://tmda.net/lists/listinfo/tmda-users
