On Fri, 2008-03-21 at 16:56, John Hardin wrote:
> On Fri, 21 Mar 2008, Martin Gregorie wrote:
>
> > header MG_LINK2 Content-Disposition =~ /filename\=\"as\.zip\"/
>
> I sincerely doubt SA treats MIME body part headers as message headers,
> though I would be pleasantly surprised to hear otherwise.
>
> Try a rawbody rule.
>
I pared the rule down to
rawbody MG_LINK2 /as.zip/
in an attempt to see if it was my shonky regex that was the problem, but
it still won't match the attachment's header:
------=_NextPart_000_0006_01C88A12.18317D00
Content-Type: application/zip; name="as.zip"
Content-Transfer-Encoding: base64
Content-Disposition: attachment; filename="as.zip"
Martin
