BTW: To expound upon my previous "guess" at matching short messages, what's
wrong with:
body MY_TOO_SHORT /^.{1,100}$/

(Which I mean to check for a message where the length is < 100 chars)


AJ Weber wrote:
> 
> Didn't find it, but I'll keep looking.  While searching, I noticed you had
> some updated chickenpox rules, but I didn't see them in your sandbox (at
> least from the link I looked at).  I know this is a tangent, but could you
> direct me to that rule-set?  I have the one from the SA wiki, but it
> doesn't seem "enough".
> 
> Thanks for the reply,
> AJ
> 
> 
> John Hardin wrote:
>> 
>> On Fri, 6 Jan 2012, AJ Weber wrote:
>> 
>>> Is there a way to check if the body of an email is less than some
>>> threshold
>>> (length of chars)?
>> 
>> Check the archives. This came up a month or two ago and I suggested a
>> rule 
>> set to detect a short body. Karsten then suggested a minor refinement.
>> 
>> You can't do it in a single rule.
>> 
>> -- 
>>   John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
>>   jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
>>   key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
>> -----------------------------------------------------------------------
>>    Windows Genuine Advantage (WGA) means that now you use your
>>    computer at the sufferance of Microsoft Corporation. They can
>>    kill it remotely without your consent at any time for any reason;
>>    it also shuts down in sympathy when the servers at Microsoft crash.
>> -----------------------------------------------------------------------
>>   11 days until Benjamin Franklin's 306th Birthday
>> 
>> 
> 
> 

-- 
View this message in context: 
http://old.nabble.com/rule-to-test-%22body%22-length--tp33092865p33093814.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Reply via email to