On Mon, 2014-08-11 at 15:48 -0400, Karl Johnson wrote: > Is there any rule to score an email with only 1 URL and very few text? > It could trigger only text formatted email because they usually aren't > in HTML.
Identify very short (raw)bodies. rawbody __RB_GT_200 /^.{201}/s meta __RB_LE_200 !__RB_GT_200 Chain together with the stock __HAS_URI sub-test. meta SHORT_BODY_WITH_URI __RB_LE_200 && __HAS_URI I have discussed and explained the rule to identify short messages a few times already. Please search your preferred archive [1] for the rule's name, to find the complete threads. [1] List of archives: http://wiki.apache.org/spamassassin/MailingLists -- char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}