Fwd: Fwd: match illegal IP in body : resolved

[Tom Kinghorn]

Hi List. A little bit more research and a lunch break brought about the solution. Sorry for the unnecessary post. the solution was to negate the valid IP lookup on a body test. regards Tom -------- Original Message -------- Subject: Fwd: match illegal IP in body Date: Tue, 14 Feb 2012 12:16:53 +0200 From: Tom Kinghorn <thomas.kingh...@gmail.com> To: users@spamassassin.apache.org Good morning List. We have been receiving alot of Phishing mails with content similar to below in the body   <snip>account from IP 764.111.45.678 </snip> as can be seen, the IP is invalid. Does anyone have a regex to match Illegal IP addresses? I apologize, but my knowledge of regex is very limited. thanks Tom