On 07/06/2013 10:39 PM, Rick Cooper wrote:
Benny Pedersen wrote:
Celene skrev den 2013-07-06 21:24:
Example: http://pastebin.com/UZtzfyEs
To be honest, I have never gotten any emails from people with only a
URL, unless they are spam, so this shouldn't be a problem. I just
want to match all emails that have a single link in the body
uri __HAS_URL /./
meta LESS_THEN_2_URL (__HAS_URL < 2)
describe LESS_THEN_2_URL Meta: have one single url
score LESS_THEN_2_URL 0.1
untested
This would match a message that had a body full of text that was legit but
only had one link, I believe the OP wants to match a body that is blank
except for a single url and I found no way to do that without writing a
custom plugin
*SA 3.4* includes the magic to do stuff like
body BODY_LENGTH_1o0 eval:check_body_length('100')
meta that with Benny's "LESS_THEN_2_URL" and bingo!
(not sure if one could use an if condition to make it even cheaper to run.)
