/^Received\: from \[(\d+\.\d+\.\d+\.\d+)\] by mail\.abcd\.de.*$/i && $1 ne '111.222.333.444'