I want to write a rule that can match file names for attachments that
always have one or two lower case characters and a lower case .zip
extension, i.e. the file name in this line:

Content-Disposition: attachment; filename="as.zip"

I've tried using the following regex in "body" and "rawbody" rules:

        /\"([a-z]|[a-z][a-z])\.zip\"/

I've also tried:

header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/

None of these will fire on a captured test message, though another rule:

        body MG_LINK1 /link.*attached details/i

is working correctly. I've read the wiki entry on rule writing, but I'm
obviously missing something. Pointers to what I'm doing wrong will be
much appreciated.


Martin



Reply via email to