On Wed, 3 Jun 2009, Charles Gregory wrote:

Good morning!

Seeing some messages come through with large amounts of bayes poison text inserted between style /style tags.

Short of using a 'rawbody' test, is there some other characteristic that we could catch?

Nope, If you want to match tags, you need rawbody.

For example, and another question:

Is there any mechanism in SpamAssassin to count the number of times a rule is matched within a message?

Yep. "tflags multiple". Adds rule score to overall score for each hit.

What I'd like to see is "tflags exponential", so that each hit would add score*hits_so_far, to make it easier to punish stuff harder the more it is repeated.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Any time law enforcement becomes a revenue center, the system
  becomes corrupt.
-----------------------------------------------------------------------
 3 days until the 65th anniversary of D-Day

Reply via email to