> -----Original Message-----
> From: Jonathan Vanasco [mailto:[EMAIL PROTECTED]
> Sent: Thursday, June 19, 2003 3:42 PM
> To: [EMAIL PROTECTED]
> Cc: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] As seen on ...
>
>
>
> On Thursday, June 19, 2003, at 01:00 PM, Pierre Bacquet wrote:
> > * some high scores when there are too many HTML comments (with
> > meaningless
> > contents) or very long ones made of consecutive chars without any
> > space.
>
> having any html comments at all pretty much signifies spam
>
> do spamassassin rules work once per message, or are the cumulative?
>
> because i'd like to see a filter that gives each instance of <! a
> point/fraction of a point
>
Custom ones are not cumulative. However, jmason just posted to my question,
one could try:
rawbody MY_TEST /<!.{0,40}<!.{0,40}<!.{0,40}<!.{0,40}<!/is
That will match 5 <! with a max of 40 chars between each. Might try this
myself but reduce it to maybe 3. Just to see what kinds of hits I get.
What does the 's', in /is do anyway? I never used it.
Oh and Tony, I'm using 2.43 :p
Chris Santerre
System Admin
"You should never, never doubt what nobody is sure about."- Willy Wonka
-------------------------------------------------------
This SF.Net email is sponsored by: INetU
Attention Web Developers & Consultants: Become An INetU Hosting Partner.
Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commission!
INetU Dedicated Managed Hosting http://www.inetu.net/partner/index.php
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
