On 25-Mar-2009, at 19:29, John Hardin wrote:
If 3.2.x does indeed implement multiline rawbody matches, then we'll be able to have a robust rule for this - e.g. an HTML email with a table that has more than 30 columns and more than 5 rows. That will be difficult to obfuscate.
More than 30 columns is enough, it doesn't need to worry about the number of rows I wouldn't think. Especially since it would be trivial to make each 'row' a separate table, breaking the matching.
-- Why live in the world when you can live in your head?
