Comments inline... > > > > This is a resubmission of a question that I have been trying > to sort out > for about a week now. I am trying to tag messages that have more than > 10 random words in the message body of an incoming e-mail I am running > the following > *snip* > > This is the .cf rule file > > > > rawbody RANDOMWORD_10 > /(?:\b(?!(?:from|even|more|were|with)\b)[a-z]{4,12}\s+){10}/ > > describe RANDOMWORD_10 string of 10+ random words > > score RANDOMWORD_10 0.5 >
*snip* Rule ok. We have beem working on this bayes poison detection as well. They recently threw us a curveball. Punctuations. > > Below is an exert from my sendmail logs that shows an email > that has got > through > > > 09881 <<< edging hayes catapult leavenworth font angus pumice > > 09881 <<< tenable rockford aggressor coffee plaza swarm > louise testicle > condemna The reason why is that you are using rawbody. So your rule has to match on a single line. This isn't hat you received. Try using a body rule. --Chris ------------------------------------------------------- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering advanced branching capabilities and atomic changes on 50+ platforms. Free Eval! http://www.perforce.com/perforce/loadprog.html _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk