Re: matching headers/body of rfc822 attachment

Matus UHLAR - fantomas wrote:
>> On Thu, 8 Dec 2011, Matus UHLAR - fantomas wrote:
>>
>>>> If you're trying to match on RFC822 attached emails, you'll need to
>>>> use the "mimeheader" rule type,
>>>
>>> I am afraid this does not apply to Received: headers.
>
> On 08.12.11 06:26, John Hardin wrote:
>> It shouldn't apply to any of the headers in the attached message.
>> mimeheader is for the MIME headers in the message part, not for the
>> _contents_ of the attachment.
>
> ok, which rule allows me to search headers of attached message? because
> as I stated before, header, body, rawbody, full - none seems to match...

Seconded - if you can't match headers in an attached message with body,
rawbody, or mimeheader... what *are* you supposed to use to match on
those attached-message headers?

FWIW, in 3.3.2, mimeheader *does* match at least some message headers in
an attached message; I've got several rules that have been in
production for a while that work just fine - assuming the MTA was kind
enough to properly attach the rejected message, anyway.

-kgd

• This message: [ Message body ]
• Next message: Jeff Chan: "Re: URIBL_PH_SURBL"
• Previous message: Axb: "Re: matching headers/body of rfc822 attachment"
• In reply to: Matus UHLAR - fantomas: "Re: matching headers/body of rfc822 attachment"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]