On Feb 9, 2007, at 2:53 AM, Matt Kettler wrote:
I just assumed the __RATWARE_0_TZ_DATE half was picking up on the lack
of a valid timezone. It's looking for the timezone to literally be
"+0000", which it is not.
I over-looked that entirely.
Jo, can you check your copy of this rule? The relevant bits should be:
header __RATWARE_0_TZ_DATE Date =~ /\s\+0000$/
meta LW_STOCK_SPAM4 __RATWARE_0_TZ_DATE && MIME_BASE64_TEXT
score LW_STOCK_SPAM4 1.66
describe LW_STOCK_SPAM4 Yup, its a spam!
That is exactly my copy of the rule.
--
Jo Rhett
Net Consonance : consonant endings by net philanthropy, open source
and other randomness