On 8/28/2014 10:12 AM, Kevin A. McGrail wrote:
On 8/28/2014 10:05 AM, Axb wrote:
On 08/28/2014 03:45 PM, Rejaine Monteiro wrote:
body MYRULE /deputado|presidente/i
body MYRULE /(?:deputado|presidente)/i
Technically, Alex's rule is faster but not technically different.
The ?: tells the regexp not to store any matches in $1, $2, etc.
But otherwise, the ()'s are implied.
I have to believe you are either A) running against a version of spamd
that hasn't been restarted to reload the latest rule or B) the text
appears somehow in the message.
Or C) the text appears as a substring. Try this to avoid substring matches:
body MYRULE /\b(?:deputado|presidente)\b/i
Shouldn't be an issue in this case, but is very important when trying to
match shorter words.
--
Bowie
