On Fri, 2011-01-07 at 16:24 -0500, Kris Deugau wrote:
> Can anyone tell me how this rule:
> 
> mimeheader T_YOUR_ORDER_VIRUS_L      Subject =~ 
> /(?:Incoming|Information|Twitter)? ?(?:Message|Ticket)? \#\d+/

I was about to mention the same as Daniel already did -- everything
before the second space is essentially non-existent, because all parts
before it are optional.

> would fire on a message in which the only instance of a # is in the main 
> message header Subject:


> (Not to mention, IIRC mimeheader shouldn't match the main message 
> headers, ever;  it's only supposed to match MIME part headers.)

So why are you only pasting that header then, rather than uploading the
full, raw message somewhere for us to have a look at?


-- 
char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Reply via email to