Right, you can make an entire word optional by "grouping" it (enclosing it
in parentheses) and marking the group as optional by tacking a question
mark on the end. In your case (a single character) it is better to use
one of the other examples where you mark either a character class that
only matc
> did you mean:
> rawbody W98_UNSUBSCRIBE4 /prefer not to(?: )?see/i
> Better yet:
> rawbody W98_UNSUBSCRIBE4 /prefer not to[ ]?see/i
> or even:
> rawbody W98_UNSUBSCRIBE4 /prefer not to ?see/i
Ah, didn't know I needed a trailing ? after the set of parentheses, I
thought the syntax was only
Frederic Tarasevicius
Internet Information Services, Inc.
http://www.i-is.com/
810-794-4400
mailto:[EMAIL PROTECTED]
Hello,
Try this:
rawbody W98_UNSUBSCRIBE4 /prefer not to ?see/i
? means 0 or 1 of the previous
So the previous space can appear 0 or 1 times ;)
ian douglas wrote:
> My rul
On Thu, Nov 20, 2003 at 12:42:25PM -0800, ian douglas wrote:
> My rule definition:
>
> rawbody W98_UNSUBSCRIBE4 /prefer not to(?: ) see/i
>
rawbody W98_UNSUBSCRIBE4 /prefer not to ?see/i
--
Scott LambertKC5MLE Unix SysAdmin
[EMAIL PROTECTED]
> rawbody W98_UNSUBSCRIBE4 /prefer not to(?: ) see/i
>
>
> I want this to catch "prefer not to see" and "prefer not tosee" but the
> (?: ) doesn't seem to catch whether the space exists or not.
rawbody W98_UNSUBSCRIBE4 /prefer not to ?see/i
You simply want an optional space...
...guenther
My rule definition:
rawbody W98_UNSUBSCRIBE4 /prefer not to(?: ) see/i
I want this to catch "prefer not to see" and "prefer not tosee" but the
(?: ) doesn't seem to catch whether the space exists or not.
Spam message contains:
If you'd prefer not tosee subsequent offers:
I searched through
Ian,
did you mean:
rawbody W98_UNSUBSCRIBE4 /prefer not to(?: )?see/i
Better yet:
rawbody W98_UNSUBSCRIBE4 /prefer not to[ ]?see/i
or even:
rawbody W98_UNSUBSCRIBE4 /prefer not to ?see/i
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases:
http://www.sandgn
