On Mon, 29 Jun 2015, [email protected] wrote:
Untested:
* ^Received: .*from [^ ]*\.in\.net[ ]
* ^From: .*\.in\.net[>$]
* ^Return-Path: .*\.in\.net>
* ^Message-ID: .*\.in\.net>
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
---------------------------------------------------
John:
How about this one-liner then? They do move the handles around a lot.
:0:
* ^Received: .*from [^ ]*\.in\.net[ ]|* ^From: .*\.in\.net[>$]|* ^Return-Path:
.*\.in\.net>|* ^Message-ID: .*\.in\.net>
$SPAM
The asterisks at the beginning of the line are Procmail stuff that's not
part of the RE.
The combined version would be something like:
* ^(Received|From|Return-Path|Message-ID):[ ].*\.in\.net[> ]
Note that the [ ] is a space and a tab, not a bunch of spaces.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[email protected] FALaholic #11174 pgpk -a [email protected]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Democrats '61: Ask not what your country can do for you,
ask what you can do for your country.
Democrats '07: Ask not what your country can do for you,
demand it!
-----------------------------------------------------------------------
5 days until the 239th anniversary of the Declaration of Independence
