I think the difference is between body and rawbody rule:
rawbody: If there's encoding like quoted-printable or base64, the text
parts are decoded, but you still get all the HTML tags and such.
body: If they exist, also html parts are decoded, so you just get the
plain text content.
So it de
Hi,
I'm having a problem with emails with short body text and a link to
malware that automatically downloads when the link is clicked. What's
the difference between the short body tests, besides the actual
character lengths:
72_active.cf
body__KAM_BODY_LENGTH_LT_128eval:check_
