all, With SA 2.20, I was using a rawbody test to check for KLEZ mime signatures
the rule was rawbody KLEZ /TVqQAAMAAAAEAAAA/ describe KLEZ possible klez infection with SA 2.41 I switched from "rawbody" to "full" as per the manpage. Now it doesn't work. The messages never get flagged. Does full not really mean full? It seems to not be checking inside the attachment text-- something it implied was done in the docs. What have I done wrong? -Ian ------------------------------------------------------- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
