Christopher Eykamp said:
> At 09:58 AM 6/16/2003 -0400, Chris Santerre wrote:
> >This isn't a request, more an open discussion.
> >
> >Would it be good to program a default counter function in SA so that users
> >may custom write rules using it. IE a simple function call in SA called
> >'counter' instead of header. Then you simply feed it a regex and give it a
> >minimum.
> >
> >counter MY_TEST <br> ,5
> >
> >this would mean if the term <br> is found in the rawbody at least 5 times,
> >then it is a hit.
> >(OH, and I have no clue how to program this!)
> >
> >Thoughts?
>
>
>
>
> You could write a similar rule like this:
>
>
> rawbody MY_TEST /<br>.*<br>.*<br>.*<br>.*<br>/is
this is somethign to watch out for -- .* will cause massive slowdowns
on large messages. Better to do
rawbody MY_TEST /<br>.{0,40}<br>.{0,40}<br>.{0,40}<br>.{0,40}<br>/is
it'd still be slow though ;)
-------------------------------------------------------
This SF.NET email is sponsored by: eBay
Great deals on office technology -- on eBay now! Click here:
http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
