|
That is correct. Something else must be broken in
your setup. Try running SA with --lint and see if you get
complaints. Maybe if you downloaded rules recently you had a transfer
error and something got broken. The html_has_msg line will hit if the body
contains even one character of any type. If you are seeing test, this rule
should have seen it too.
Loren
----- Original Message -----
Sent: Tuesday, August 10, 2004 8:48
AM
Subject: RE: SARE_HTML_NO_BODY
question
The follow line appears in file. Is this correct?
body
__SARE_HTML_HAS_MSG /./
Do
you also have this rule __SARE_HTML_HAS_MSG
?
IF you don't have
this rule, then this other rule will always hit.
This is rule is hitting on every email. I would assume looking at the
describe line, that the body of the email would have to be empty . I have
since lowered the score to .5. My question is what is this rule supposed to
match?
meta
SARE_HTML_NO_BODY (
!__SARE_HTML_HAS_MSG )
describe
SARE_HTML_NO_BODY Message is
empty
score
SARE_HTML_NO_BODY
0.5
#counts
SARE_HTML_NO_BODY 728s/2h of 85079
corpus (62484s/22595h RM) 06/07/04
#max
SARE_HTML_NO_BODY 942s/2h of 89684
corpus (67687s/21997h RM) 05/23/04
#counts
SARE_HTML_NO_BODY 1s/0h of 32534
corpus (9287s/23247h JH) 05/19/04
#counts
SARE_HTML_NO_BODY 0s/8h of 6944
corpus (3188s/3756h CT) 05/19/04
Thanks
Bryan
-------------------------------------------------
This email
transmission and any documents, files or previous
email messages
attached to it may contain information that is
confidential or legally
privileged. If you are not the intended
recipient, you are hereby
notified that any disclosure, copying,
printing, distributing or use of
this transmission is strictly
prohibited. If you have received this
transmission in error,
please immediately notify the sender by
telephone or return
email and delete the original transmission and its
attachments
without reading or saving in any manner.
The
Evangelical Lutheran Good Samaritan
Society.
---------------------------------------------------------
|
