On (18/10/03 20:17), David Crane wrote: > On Tuesday 14 October 2003 06:56 am, Clive Menzies wrote: > > I was finding it virtually impossible to work because of the > > volume of these MS Swen virus emails. So I installed mailfilter > > (woody) and fetchmail, set up my mailfilterrc as per the attached > > sample and invoke mailfilter from fetchmail using > > preconnect="mailfilter". > > Using mailfilter is great for deleting these damn 150K e-mails > at the POP3 server, avoiding the modem download time. > > I started with Clive's .mailfilterrc, and have been adding to it when > another Swen slips through. The most important change was to > change the From to (FROM|From). Plus a few other addresses. > > Here are my deny lines, which you could add into Clive's full > .mailfilterrc file. > > DENY=^(From|FROM):.*Customer Bulletin > DENY=^(From|FROM):.*(Inet|Internet) (Mail|Email|Service|System|Message).* > DENY=^(From|FROM):.*Security Department > DENY=^(From|FROM):.*(Email|Mail|Net|Message|Network) (Delivery|Service).* > DENY=^(From|FROM):.*microsoft (network|internet).* (service|system).* > DENY=^(From|FROM):.*Technical (Assistance|Support).* Thanks for the update David.
I notice that you removed the Escape Character "\" and when I did a global search and replace: %s / From/\(From\|FROM\)/g gvim also removed my "\"s. Can anyone explain to me why? Is it that mailfilter uses different syntax. I'm trying to get my head around Regex but find this a bit confusing. Regards Clive -- http://www.clivemenzies.co.uk strategies for business -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
