On Mon, 2 Oct 2017, Benny Pedersen wrote:
John Hardin skrev den 2017-10-02 21:07:
How about:
header __FROM_QUOTES From =~ /"/
header __FROM_MAYBE_SPOOF From:name =~ /\w@\w/
meta __FROM_SPOOF __FROM_MAYBE_SPOOF && !__FROM_QUOTES
(warning: totally untested)
+1
i can only see one problem with it, that is that email adresses is
caSeinsensitive, and you test casEsensitive
Where? \w is not case-sensitive.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Homeland Security: Specializing in Tactical Band-aids
for Strategic Problems. -- Eric K. in Bruce Schneier's blog
-----------------------------------------------------------------------
186 days since the first commercial re-flight of an orbital booster (SpaceX)
