On 4/8/2016 11:09 AM, Reindl Harald wrote:


Am 08.04.2016 um 17:05 schrieb John Hardin:
On Fri, 8 Apr 2016, Reindl Harald wrote:

/.*need to buy products.*\?.*/i

.* = any chars independent how often

Do NOT use ".*" in body or rawbody rules. That can lead to unbounded
processing times. Use a sane upper limit, e.g. ".{,20}", and try to
avoid repeated "." where possible

thanks for the hint but that's not possible in case of "contains" rules where you don't know at which place the offeding phrase comes

interesting that we have around 1100 such rules and the Spamassassin/ClamAV virtual machine runs most of the day between 50 and 300 MHz


In this case, aren't the first and last ".*" redundant anyway?

/.*need to buy products.*\?.*/i

is functionally equivalent to

/need to buy products.*\?/i

And since you don't need (or want) too much extra stuff before the question mark, you could easily limit it without losing functionality.

/need to buy products.{,20}\?/i

--
Bowie

Reply via email to