Re: SA rawbody rule problem

2005-08-30 Thread Loren Wilton
> The problem is that if I have an email with an attachment, its possible > the xxx part crops up from an encoded file. If I run the email through > perl program with the same regex it doesn't pick it out, but SA seems > to. [source email] (full) -> decoding -> [decoded email] (rawbody) ->

Re: SA rawbody rule problem

2005-08-30 Thread Matt Kettler
David Benigni wrote: > Hello, > > I'm having some problems with a rule. I'm filtering based on > particular words (yeah, its not good to do that) and its catching things > that I don't think it should. I can't seem to find the problem. Here > is the rule: > > rawbody BADWORD_RULE_1 /\b(?:xxx|

SA rawbody rule problem

2005-08-30 Thread David Benigni
Hello, I'm having some problems with a rule. I'm filtering based on particular words (yeah, its not good to do that) and its catching things that I don't think it should. I can't seem to find the problem. Here is the rule: rawbody BADWORD_RULE_1 /\b(?:xxx|porn)\b/i describe BADWORD_RULE_1 Una