On Mon, 7 Feb 2022, Greg Troxel wrote:

and then I got a reply back with the content he was trying to send etc.
But, it had:

        *  2.5 CONTENT_AFTER_HTML More content after HTML close tag

but one was only text/plain and I could see nothing wrong.   reading
72_active.cf I found:

 rawbody    __CONTENT_AFTER_HTML        /<\/htnl>\s*[a-z0-9]/i
which fires on a text/plain part that discusses html formatting!

Ah, I'll see if I can add something to that so it only fires when there's an actual HTML body part. Thanks for the report.

Pity there's not an "htmlbody" rule type...


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org                         pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  USMC Rules of Gunfighting #2: Anything worth shooting
  is worth shooting twice. Ammo is cheap. Your life is expensive.
-----------------------------------------------------------------------
 5 days until Abraham Lincoln's and Charles Darwin's 213th Birthdays

Reply via email to