On 05/28/2014 11:36 PM, Karsten Bräckelmann wrote:
<snip-snip>
Another approach would be to actually ensure there is only a single
chunk. And finally, meta them together.
rawbody __CHUNK /^./
tflags __CHUNK multiple
meta SHORT_BODY_URI __SHORT_BODY_URI && (__CHUNK == 1)
That all said, the rule you are currently trying to write pretty much
sounds like the "has URI and short body" LOC_SHORT rule we discussed
back in Oct 2013...
or a "modern" 3.4 way :)
ifplugin Mail::SpamAssassin::Plugin::BodyEval
if can(Mail::SpamAssassin::Plugin::BodyEval::has_check_body_length)
body __BODY_LENGTH_100 eval:check_body_length('100')
meta BLAH_100 (__HAS_URI && __BODY_LENGTH_100)
endif
endif
