Regex to block Sobig

[Marcelo Medici <gaucho@ericps.crc.uiuc.edu>]

i am trying to filter, using procmail, the offending subjects created in
email by the sobig worm. i am using this recipe:

:0 D
* ^Subject:.(R(E|e): )?(R(E|e): )?(Thank
you\!)|(Details)|(My.Details)|(Approved)|(Your.application)|(Wicked.screensaver)|(That.movie)$
/dev/null

i am purposely using case sensitivity to try and be very limiting ith what
subjects i filter.

however even though i am using start and finish anchors ^$, this regex
still filters out an email which has

 Details about procmail

as its subject line. can someone with strong regex skills help me out?

Thank you.


-
To unsubscribe, send email to majordomo@luci.org with
"unsubscribe luci-discuss" in the body.