This isn't a request, more an open discussion.
Would it be good to program a default counter function in SA so that users may custom write rules using it. IE a simple function call in SA called 'counter' instead of header. Then you simply feed it a regex and give it a minimum.
counter MY_TEST <br> ,5
this would mean if the term <br> is found in the rawbody at least 5 times, then it is a hit.
(OH, and I have no clue how to program this!)

Chris Santerre
System Admin
"A little nonsense now and then, is relished by the wisest men."
 - Willy Wonka


Reply via email to