| Main Archive Page > Month Archives > spamassassin-users archives |
Re: One-line URI body spam
From: Alex <mysqlstudent_at_nospam>Date: Fri Oct 21 2011 - 15:08:00 GMT
To: users@spamassassin.apache.org
Hi,
>> > body __BODY_URI m{https?://.{1,50}$}
>>
>> That will match any email that ends with http:// followed by 1 to 50
>> characters of anythings, including spaces and other stuff not part of the
>> url. "$" is not "I want stuff to stop matching here." It's the end.
>> Either of the line, or of the email, depending on how SA handles newlines.
>
> Depends on the type of rule. (And the type of RE modifiers.) The
> obscure, old-school definition of a paragraph in this case. See my
> previous post.
>
> And, again, for the URI matching case, the uri rule is the one to go for
> anyway, ensuring the RE to be applied to URIs only.
>
>
>> Some quick untested thoughts:
>>
>> body __LONG_BODY /.{151}/
>> describe __LONG_BODY Has a body of more than 150 characters
> ^^^^
>
> Has a *paragraph* of more than 150 chars. Again, see my previous post.
>
> These three very short paragraphs sum up to more than 150 chars.
>
> However, that __LONG_BODY body rule would not match on these three
> paragraphs alone, only the other stuff.
guenther, thanks for spending the time to help with this. Back to the
books to learn more about REs.
Thanks,
Alex