From mboxrd@z Thu Jan 1 00:00:00 1970 X-Msuck: nntp://news.gmane.io/gmane.emacs.gnus.general/15248 Path: main.gmane.org!not-for-mail From: Jack Twilley Newsgroups: gmane.emacs.gnus.general Subject: Spam dodged my fancy split! Date: Mon, 01 Jun 1998 18:59:16 GMT Organization: SunSITE Denmark (sunsite.auc.dk) Sender: owner-ding@hpc.uh.edu Message-ID: Reply-To: jmt+usenet@nycap.rr.com NNTP-Posting-Host: coloc-standby.netfonds.no X-Trace: main.gmane.org 1035154315 21059 80.91.224.250 (20 Oct 2002 22:51:55 GMT) X-Complaints-To: usenet@main.gmane.org NNTP-Posting-Date: Sun, 20 Oct 2002 22:51:55 +0000 (UTC) Return-Path: Original-Received: from gwyn.tux.org (gwyn.tux.org [207.96.122.8]) by altair.xemacs.org (8.8.8/8.8.8) with ESMTP id MAA25999 for ; Mon, 1 Jun 1998 12:08:30 -0700 Original-Received: from sina.hpc.uh.edu (root@Sina.HPC.UH.EDU [129.7.3.5]) by gwyn.tux.org (8.8.8/8.8.8) with ESMTP id PAA02552 for ; Mon, 1 Jun 1998 15:04:55 -0400 Original-Received: from sina.hpc.uh.edu (lists@Sina.HPC.UH.EDU [129.7.3.5]) by sina.hpc.uh.edu (8.7.3/8.7.3) with ESMTP id OAH14843; Mon, 1 Jun 1998 14:01:18 -0500 (CDT) Original-Received: by sina.hpc.uh.edu (TLB v0.09a (1.20 tibbs 1996/10/09 22:03:07)); Mon, 01 Jun 1998 14:00:17 -0500 (CDT) Original-Received: from claymore.vcinet.com (claymore.vcinet.com [208.205.12.23]) by sina.hpc.uh.edu (8.7.3/8.7.3) with SMTP id OAA14828 for ; Mon, 1 Jun 1998 14:00:04 -0500 (CDT) Original-Received: (qmail 6417 invoked by uid 504); 1 Jun 1998 18:59:21 -0000 Original-Received: (qmail 6414 invoked from network); 1 Jun 1998 18:59:20 -0000 Original-Received: from sunsite.auc.dk (130.225.51.30) by claymore.vcinet.com with SMTP; 1 Jun 1998 18:59:20 -0000 Original-Received: (qmail 22401 invoked by uid 509); 1 Jun 1998 18:59:17 -0000 Original-To: ding@gnus.org Original-Path: not-for-mail Original-Newsgroups: emacs.ding X-Newsreader: Gnus v5.6.9/Emacs 20.2 X-Attribution: Jack X-PGP-Key: 0xFDE742F9 X-PGP-Fingerprint: 8F 6C 15 D4 AE 28 B8 39 B2 58 3F 8C 32 27 44 D5 Original-Lines: 41 Original-NNTP-Posting-Host: dt01q0n13.nycap.rr.com Original-NNTP-Posting-Date: Mon, 01 Jun 1998 20:59:16 MET DST Precedence: list X-Majordomo: 1.94.jlt7 Xref: main.gmane.org gmane.emacs.gnus.general:15248 X-Report-Spam: http://spam.gmane.org/gmane.emacs.gnus.general:15248 Some spam got past my filter, which was specifically designed to filter out this kind of spam, and in fact was cribbed from the docs. Here's the relevant snippet of my .gnus file. --begin .gnus snippet-- nnmail-split-fancy '(| ("gnus-warning" "duplication of messages" "duplicate") (to "jmt+usenet@nycap.rr.com" (| ("subject" "re:.*" "misc") ("references" ".*@.*" "misc") "spam")) ("from" mail (| ("subject" "warn.*" "mail.warning") "misc")) "misc") nnmail-split-methods 'nnmail-split-fancy --end .gnus snippet-- Here's the headers of the evil message. --begin spam headers-- From: Pandit Paul Kaloti Subject: ARE YOU HAPPY To: Date: Mon, 1 Jun 1998 03:42:07 -0400 (EDT) X-From-Line: yourstars@cheerful.com Mon Jun 1 03:42:07 1998 Received: from STAR1 (spc-isp-van-uas-05-4.sprint.ca [209.103.0.205]) by mail-atm.nycap.rr.com (8.8.7/8.8.8) with SMTP id DAA14174 for ; Mon, 1 Jun 1998 03:42:07 -0400 (EDT) Message-Id: <419.435947.02835266 yourstars@cheerful.com> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Type: text/plain; charset="us-ascii" X-UIDL: d4b38dcaeac10379057851daef333041 Lines: 67 Xref: dt01q0n13.nycap.rr.com misc:89 --end spam headers-- Since the message was sent to "jmt+usenet@nycap.rr.com", the "Subject" field doesn't match the regexp, and the "References" field doesn't exist, I'd expect this to be sent to "spam". Why wasn't it? Jack. .