On Thu, 1 Dec 2011, Sergio wrote:

I want to check for specific subject size, thanks.

Let's keep the discussion on-list so others may benefit.

Larger than:

header  __SUBJ_GT_100   Subject =~ /.{101}/

Smaller than or equal to:

header  __SUBJ_LE_100   Subject =~ /^.{0,100}$/

Sergio

On Thu, Dec 1, 2011 at 3:41 PM, John Hardin <jhar...@impsec.org> wrote:

On Thu, 1 Dec 2011, Sergio wrote:

 is there a way to check the size of a subject on a rule?

Do you want to know if it's larger than or smaller than some specific
size, or do you want to know about how many characters are in it?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Any time law enforcement becomes a revenue center, the system
  becomes corrupt.
-----------------------------------------------------------------------
 14 days until Bill of Rights day

Reply via email to