On Fri, 2011-01-07 at 16:24 -0500, Kris Deugau wrote:
> Can anyone tell me how this rule:
>
> mimeheader T_YOUR_ORDER_VIRUS_L Subject =~
> /(?:Incoming|Information|Twitter)? ?(?:Message|Ticket)? \#\d+/
I was about to mention the same as Daniel already did -- everything
before the second space is essentially non-existent, because all parts
before it are optional.
> would fire on a message in which the only instance of a # is in the main
> message header Subject:
> (Not to mention, IIRC mimeheader shouldn't match the main message
> headers, ever; it's only supposed to match MIME part headers.)
So why are you only pasting that header then, rather than uploading the
full, raw message somewhere for us to have a look at?
--
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}