Can anyone tell me how this rule:

mimeheader T_YOUR_ORDER_VIRUS_L Subject =~ /(?:Incoming|Information|Twitter)? ?(?:Message|Ticket)? \#\d+/


would fire on a message in which the only instance of a # is in the main message header Subject:


Subject: Vuugo Newsletter #3 December 24, 2010 Boxing Day


?

Unless my eyes are playing tricks on me, none of the words in that rule even appear in that Subject line...

(Not to mention, IIRC mimeheader shouldn't match the main message headers, ever; it's only supposed to match MIME part headers.)

-kgd

Reply via email to