On Thu, Oct 13, 2005 at 06:29:22AM -0700, Loren Wilton wrote: > > Can somebody suggest me how to turn it in a SA 3.x rule? > > > Subject > > =~ > > /p.{0,2}u.{0,2}b.{0,2}l.{0,2}i.{0,2}c.{0,2}i.{0,2}d.{0,2}a.{0,2}d/i > > What you have above is very nearly correct for a Subject rule, if it were on > one line. > Below are possible subject and body rules. > > header MAL_PUBLICIDAD Subject =~ > body MAS_MAL_PUBLICIDAD =~
If you have 3.1, you could also use the ReplaceTags plugin and do something like: body FUZZY_REFINANCE /<inter W2><post P2>(?!publicidad)<P><U><B><L><I><C><I><D><A><D>/i -- Randomly Generated Tagline: "My mother never saw the irony in calling me a son-of-a-bitch." - Richard Jeni
pgpEBmahI6ahL.pgp
Description: PGP signature