On Wed, 2 Sep 2015, Olivier Nicole wrote:

Malware Patrol (malwarepatrol.net) has a file with over 100,000 rules of
the form:

body MBL_2931645                /files\.oqayiq\.biz\/javasoft\/different\//i

This causes spamassassin --lint to never terminate (well, I killed it
afetr one hour).

I would think uri rules would be a lot better than body rules, no?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Trusting in anti-gun laws to keep you from being shot is like
  refusing to wear your seatbelt because you trust traffic laws to
  keep you from being in a car accident.              -- Erin Palette
-----------------------------------------------------------------------
 15 days until the 228th anniversary of the signing of the U.S. Constitution

Reply via email to