> I receive spam mails with missing from. > subject: variable > body: empty > > but I wan´t mark as spam mails with empty body.
SARE has a rule for that in one of the files, I don't recall which.
Off the top of my head (and this may have errors in it) you could do
something like this:
header __LW_GOOD_FROM From =~ /\s/
body __LW_GOOD_BODY /\s/
meta LW_EMPTY_MAIL !__LW_GOOD_FROM && !__LW_GOOD_BODY
score LW_EMPTY_MAIL 1
describe LW_EMPTY_MAIL No Body from Nobody
Loren
