On 8/28/2014 10:12 AM, Kevin A. McGrail wrote:
On 8/28/2014 10:05 AM, Axb wrote:
On 08/28/2014 03:45 PM, Rejaine Monteiro wrote:
body MYRULE /deputado|presidente/i
body MYRULE /(?:deputado|presidente)/i
Technically, Alex's rule is faster but not technically different.
The ?: tells th
On 8/28/2014 10:05 AM, Axb wrote:
On 08/28/2014 03:45 PM, Rejaine Monteiro wrote:
body MYRULE /deputado|presidente/i
body MYRULE /(?:deputado|presidente)/i
Technically, Alex's rule is faster but not technically different.
The ?: tells the regexp not to store any matches in $1, $2, et
On 08/28/2014 03:45 PM, Rejaine Monteiro wrote:
body MYRULE /deputado|presidente/i
body MYRULE /(?:deputado|presidente)/i
In this example, I need to catch emails containing the word 'deputado'
or 'presidente' in the message body. So..
body MYRULE /deputado|presidente/i
score MYRULE5.0
I did a test with a saved email that does _NOT_ contain any of the above
expressions and he got the message.
spamc -R
Richard Ozer wrote:
> Greetings,
>
> We've been getting quite a bit of spam with the following header:
>
> Message-ID: <[EMAIL PROTECTED]>
> From: David Samuels <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: New Job! -2UigK
> Date: Wed, 15 Oct 2008 13:16:03 +
>
> I've been trying to
Greetings,
We've been getting quite a bit of spam with the following header:
Message-ID: <[EMAIL PROTECTED]>
From: David Samuels <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: New Job! -2UigK
Date: Wed, 15 Oct 2008 13:16:03 +
I've been trying to write a rule that looks at the From: li
On Sun, Nov 07, 2004 at 10:04:58AM +0100, Francesco Potorti` wrote:
> >ewww! $name="foo.com";
> >
> >congrats, you just FPed. :)
>
> No, I didn't :-)
>
> You missed the meta rule:
> meta ms_executable (__h_exename_q && !__b_exename_q)
Ok, that one didn't FP, fine. :P
I just don'
>> full __h_exename_q
>> /\bname=("?).+?\.(?:bas|bat|cmd|com|cpl|exe|js|jse|msi|mst|pcd|pif|reg|scr|sct|vb|vbe|vbs|wsc|wsf|wsh|xsl)\1[[:blank:]]*(?:;|$)/mi
>> rawbody __b_exename_q
>> /\bname=("?).+?\.(?:bas|bat|cmd|com|cpl|exe|js|jse|msi|mst|pcd|pif|reg|scr|sct|vb|vbe|vbs|
On Sun, Nov 07, 2004 at 01:45:51AM +0100, Francesco Potorti` wrote:
> full __h_exename_q
> /\bname=("?).+?\.(?:bas|bat|cmd|com|cpl|exe|js|jse|msi|mst|pcd|pif|reg|scr|sct|vb|vbe|vbs|wsc|wsf|wsh|xsl)\1[[:blank:]]*(?:;|$)/mi
> rawbody __b_exename_q
> /\bname=("?).+?\.(?:bas|ba
full __h_exename_q
/\bname=("?).+?\.(?:bas|bat|cmd|com|cpl|exe|js|jse|msi|mst|pcd|pif|reg|scr|sct|vb|vbe|vbs|wsc|wsf|wsh|xsl)\1[[:blank:]]*(?:;|$)/mi
rawbody __b_exename_q
/\bname=("?).+?\.(?:bas|bat|cmd|com|cpl|exe|js|jse|msi|mst|pcd|pif|reg|scr|sct|vb|vbe|vbs|wsc|wsf|wsh|
10 matches
Mail list logo
