Thanks all. I'm test driving the below-listed rule and it seems to be
good and fast as you suggest. I'm a bit jittery on the multi-line rules right now due to an "incident" with what I thought was a brilliant RE that ended up gumming up our system really bad a few weeks back. Thanks again. Jonathan. Ruben Cardenal wrote: That doesn't kill performance, sorry. I get average times of 0.1-0.3 seconds/mail using that rule (and a lot of other ones) while the cpu lives happily. In several servers. You don't need a plugin for that.Ruben-----Mensaje original----- De: Matt Kettler [mailto:[EMAIL PROTECTED]] Enviado el: viernes, 10 de marzo de 2006 21:57 Para: Ruben Cardenal CC: users@spamassassin.apache.org Asunto: Re: SA rule for userid in subject? Ruben Cardenal wrote:Hi, Loren answered that a month ago. Is in the archives. You may use: header RULE_NAME ALL =~ /\nTo: ([EMAIL PROTECTED]).+\nSubject:\s*Fw:.{0,30}\s*\1\b/iThat covers "Fw: userid" and "Fw: (some word[s]) userid".True, but that's using () and \1, which is exactly what Jonathan said he did not want to use. So you can do it that way, but you'll suffer the performance penalty of a multi-line regex with backreferences. The only *efficient* way to do it is to write a plugin. |