On Tue, 2008-12-02 at 14:12 -0800, fchan wrote: > I'm having much spam that has html with the common alt test portion. > The http link to where ever and the images always changes so I need > to use the alt text portion of the is html to key off. Below is the > paste link of the html: > > http://pastebin.ca/1274188
You can do that with rawbody rules. See section Rule Definitions in the docs. http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.html -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}