Karsten Bräckelmann skrev den 2013-07-10 23:46:
Doesn't seem to be hard to write afresh. Glimpse at the full headers,
identify From: thingies, count 'em, and ding the bell if there's more
than one...
header __HAS_FROM ALL =~ /^From:\s/m
tflags __HAS_FROM multiple
could miss maxhits= on tflags here
meta MULTI_FROM __FROM > 1
Easy peasy. Just combine the ALL pseudo-header with the Perl RE /m
multi-line match in a non-scoring sub-rule, together with the SA
tflags
multiple. And a meta rule with arithmetic expressions. ;)
and i have head attache with abcde.html 5 chars matching in urls like
http://example.org/abcde.html
all i tryed fails
Score as you seem fit, though I wouldn't expect it to catch a lot of
otherwise low-scoring spam. Might be different for Andreas though,
since
he specifically asked for it.
rules like this is not needed here, it was one time
Oh, BTW -- untested. :)
still nice
