On Fri, 21 May 2010, John Horne wrote:
Hello,
Can you tell it's Friday afternoon? What should be a simple problem
always seems to become a nightmare on Friday afternoons! :-)
Using SA 3.3.1 I have the following simple rule:
body LOCAL_JH /userid:\s*\n/i
which should look for 'userid:', any number of spaces and then a NL
character (that is, there is nothing following the spaces on the same
line).
If I send a message containing:
some text<NL>
userid: <NL>
some more text
The "body" rule processing collapses that paragraph into a single string,
otherwise it would be easy for spammers to avoid most string matching by
inserting line breaks.
Try this:
rawbody LOCAL_JH /userid:\s*$/i
{untested, and caffiene levels are low, so no promises}
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Vista "security improvements" consist of attempting to shift blame
onto the user when things go wrong.
-----------------------------------------------------------------------
Today: the 6th anniversary of SpaceshipOne winning the X-prize
