> -----Original Message-----
> From: Matt Kettler [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, November 22, 2005 8:48 AM
> To: [EMAIL PROTECTED]; [email protected]
> Subject: Re: rules and new line
> 
> At 08:35 AM 11/22/2005, [EMAIL PROTECTED] wrote:
> >I've got some spam mails that has this kind of pattern
> >
> >A
> >Q
> >s
> >G
> >T
> >Ue
> >O
> >
> >I've tried to make a rule but \n doesen't work with 
> spamassassin. Can 
> >anyone give me some advice or an example to catch this kind of spam?
> 
> You'd need to use rawbody. By default, body rules are run 
> against the body text after all HTML tags and EOLs are removed.
> 

rawbody would not catch this because it keeps newlines and whitespace
intact and applies regexp per-line.  you would have to write several
rawbody rules and meta them together if you plan to use rawbody.  

rawbody  __A_LINE  /^A$/
rawbody  __Q_LINE  /^Q$/
rawbody  __s_LINE  /^s$/
rawbody  __G_LINE  /^G$/
rawbody  __T_LINE  /^T$/
rawbody  __Ue_LINE /^Ue$/
rawbody  __O_LINE  /^O$/

meta  BROKEN_TEXT  ( __A_LINE && __Q_LINE && __s_LINE && __G_LINE &&
__T_LINE && __Ue_LINE && __O_LINE )
score BROKEN_TEXT  1.0

The body and full options I describe in my other message are much better
options.  

dallas

Reply via email to