On Fri, 8 Apr 2016, Bowie Bailey wrote:

On 4/8/2016 11:09 AM, Reindl Harald wrote:


 Am 08.04.2016 um 17:05 schrieb John Hardin:
>  On Fri, 8 Apr 2016, Reindl Harald wrote:
> > > /.*need to buy products.*\?.*/i > > > > .* = any chars independent how often > > Do NOT use ".*" in body or rawbody rules. That can lead to unbounded
>  processing times. Use a sane upper limit, e.g. ".{,20}", and try to
>  avoid repeated "." where possible

 thanks for the hint but that's not possible in case of "contains" rules
 where you don't know at which place the offeding phrase comes

 interesting that we have around 1100 such rules and the
 Spamassassin/ClamAV virtual machine runs most of the day between 50 and
 300 MHz


In this case, aren't the first and last ".*" redundant anyway?

/.*need to buy products.*\?.*/i

is functionally equivalent to

/need to buy products.*\?/i

That, too. .* at the end of an RE is totally pointless.


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The Tea Party wants to remove the Crony from Crony Capitalism.
  OWS wants to remove Capitalism from Crony Capitalism.
                                                    -- Astaghfirullah
-----------------------------------------------------------------------
 5 days until Thomas Jefferson's 273rd Birthday

Reply via email to