How to create a rule that tests the raw html when encoded in base64, but which ignores line breaks?

2010-02-28 Thread Mark London
Hi - I created a FULL rule that works fine with html in plain text. However, if the html is base64 encoded, FULL rules don't appear to work. A RAWBODY rule doesn't work either, because it doesn't ignore line breaks. Any ideas? Thanks. - Mark

Re: How to create a rule that tests the raw html when encoded in base64, but which ignores line breaks?

2010-02-28 Thread Karsten Bräckelmann
On Sun, 2010-02-28 at 12:00 -0500, Mark London wrote: Hi - I created a FULL rule that works fine with html in plain text. However, if the html is base64 encoded, FULL rules don't appear to work. A RAWBODY rule doesn't work either, because it doesn't ignore line breaks. Any ideas? full

Re: How to create a rule that tests the raw html when encoded in base64, but which ignores line breaks?

2010-02-28 Thread Benny Pedersen
On søn 28 feb 2010 18:00:13 CET, Mark London wrote Hi - I created a FULL rule that works fine with html in plain text. However, if the html is base64 encoded, FULL rules don't appear to work. A RAWBODY rule doesn't work either, because it doesn't ignore line breaks. Any ideas? ripmime

Re: How to create a rule that tests the raw html when encoded in base64, but which ignores line breaks?

2010-02-28 Thread Karsten Bräckelmann
On Sun, 2010-02-28 at 18:23 +0100, Benny Pedersen wrote: On søn 28 feb 2010 18:00:13 CET, Mark London wrote Hi - I created a FULL rule that works fine with html in plain text. However, if the html is base64 encoded, FULL rules don't appear to work. A RAWBODY rule doesn't work

Re: How to create a rule that tests the raw html when encoded in base64, but which ignores line breaks?

2010-02-28 Thread Mark London
/s didn't appear to work for rawbody in version 3.1.8 But I just tried it on a different system running 3.2.5, and it works there. Sorry about posting my question before testing my problem on a newer version! - Mark Karsten Bräckelmann wrote: On Sun, 2010-02-28 at 12:00 -0500, Mark London