On Tue, Jun 14, 2005 at 02:32:11PM +0200, Nicki de Wet wrote: > body LOCAL_OBFUS_SPAN /<SPAN style\=3D"DISPLAY: none">/i > > The email below does not match this rule, although I don't know why. Does SA > stop executing tests after a certain point, or when certain tests are > positive?
Body rules are run against the decoded + rendered (ie: no HTML markup) text of the message. If you're specifically looking for HTML markup, you need to use a rawbody rule. -- Randomly Generated Tagline: "Percussive Maintenance - The fine art of whacking the crap out of an electronic device to get it working again." - Unknown
pgpBeIWnFsHzC.pgp
Description: PGP signature
