[prev in list] [next in list] [prev in thread] [next in thread] 

List:       spamassassin-users
Subject:    Re: Hint to write a [raw]body rule
From:       Giovanni Bechis <giovanni () paclan ! it>
Date:       2019-10-16 14:21:24
Message-ID: 8bdeb6c1-c2ec-4e28-2d1f-6c4269ef8c1e () paclan ! it
[Download RAW message or body]

On 10/16/19 4:11 PM, Bill Cole wrote:
> On 16 Oct 2019, at 8:44, Giovanni Bechis wrote:
> 
> > I have lot of emails like this one (redacted):
> > https://pastebin.com/v5NCRK9d
> > and I would like to write a rule that matches the "
" that appears on some lines,
> 
> Are you sure?
> 
> That's a QP-encoded carriage return. I would expect a lot of them in both spam and \
> ham. 
it is a part of a meta-experiment

> > any hints ?
> 
> You could try matching it as '\r' in a rawbody rule, but I'm not sure that would \
> work. If it does, you probably want '\r[^\n]' to exclude CRLFs, but you should test \
> that carefully 
> What should work better is to use a 'full' rule and look for the undecoded 'Ð', \
> probably with '
(?!
)' or even '
(?!(
> =?$)'
> 
> e.g.:
> 
> full QP_BARE_CR /
(?!(
> =?$))/m
> 
> CAVEAT: not well tested...
> 
Seems to work, more tests later.
thanks
 Giovanni


[prev in list] [next in list] [prev in thread] [next in thread]