On Tue, 18 Sep 2018 08:20:38 +0100 Marisa Clardy wrote: > Hello, > > How I'd do it is with this regex: > > /^(apache(\r|\n)+)+$/s
Owing to the way the normalized body is stored, this kind of thing won't work with body rules - that's what the thread is about. It can work with rawbody rules, but they have problems of their own. > The 's' flag would be necessary here. It wouldn't since there's no '.' in the rule. > Technically there should always be a single \r\n at the end of the > line, That's required during an SMTP transaction, but emails are usually converted to native format before being stored. Most SpamAssassin rules operate on derived data stored with native line endings.