On 2021-04-23 01:37 PM, Henrik K wrote:
On Fri, Apr 23, 2021 at 01:03:33PM -0400, Steve Dondley wrote:
I'm looking at KAM.cf. There is this rule:
body __KAM_WEB2 /INDIA based
IT|indian.based.website|certified.it.company/i
I'm wondering if there is a good reason why a singe period is used
instead
of something like \s+ which would catch multiple spaces whereas a
singe
period doesn't.
It would make no difference, because body is normalized from
consecutive
spaces into single spaces.
https://cwiki.apache.org/confluence/display/SPAMASSASSIN/WritingRulesAdvanced
Makes sense. And thanks for the link. I was looking for some king of
guidance on writing rules. Google didn't help much.