<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1141" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=832405515-18032003><FONT face=Arial color=#0000ff size=2>I'm
not sure whether that is an issue or not.</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Stephe Campbell
[mailto:campbell@cnpapers.com]<BR><B>Sent:</B> Tuesday, March 18, 2003 10:50
AM<BR><B>To:</B> MAILSCANNER@jiscmail.ac.uk<BR><B>Subject:</B> Re: Body SA
rule<BR><BR></FONT></DIV>
<DIV><FONT size=2>Mr. Winkler,</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Thank you very much. That seemed to work, although I think I
may have tried that same rule you provided. The difference was I used a rule
name with a hyphen instead of underscore. Do you know if that is a real issue?
I might be wrong though on whether I used your regexp prior, I tried so
many.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Thanks again</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Steve Campbell</FONT></DIV>
<DIV><FONT size=2><A
href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</A></FONT></DIV>
<BLOCKQUOTE dir=ltr
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=dwinkler@ALGORITHMICS.COM
href="mailto:dwinkler@ALGORITHMICS.COM">Derek Winkler</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, March 18, 2003 10:30
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: Body SA rule</DIV>
<DIV><BR></DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff
size=2>Here's one I use...</FONT></SPAN></DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff
size=2>rawbody LOCAL_CNTNTFRM_vresp
/https?:\/\/.*?\.vresp\.com/i<BR>describe LOCAL_CNTNTFRM_vresp
Has "<A href="http://*.vresp.com">http://*.vresp.com</A>" in body<BR>score
LOCAL_CNTNTFRM_vresp 3<BR></FONT></SPAN></DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff size=2>In
the reg exp /s and .s must be preceded by \, makes it confusing. The ? makes
the s optional so http or https will work. The i after the final / means
case insensitive.</FONT></SPAN></DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff
size=2>Your reg exp would be "/http:\/\/www\.xx-yyyyy\.com/" off the top of
my head anyways.</DIV></FONT></SPAN>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Stephe Campbell
[mailto:campbell@cnpapers.com]<BR><B>Sent:</B> Tuesday, March 18, 2003
10:19 AM<BR><B>To:</B> MAILSCANNER@jiscmail.ac.uk<BR><B>Subject:</B> Body
SA rule<BR><BR></FONT></DIV>
<DIV><FONT size=2>This is not a MS problem, but I have yet been able to
find anything in the SA archives and hope that someone using MS has done
this before. I'm not versed in Perl, so I sort of need assistance. The
people of this maillist really seem to be on the ball.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>We receive a lot of spam from a particular group. Each
mailing is from various sources, but all have the following line in
them(actually a reply link where I have replaced the real address with
x's, y's, etc):</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV> </DIV>
<DIV><FONT size=2><FONT size=3> visit at </FONT><A
href="http://www.xx-yyyyy.com/34606zzz.html"><FONT
size=3>http://www.xx-yyyyy.com/34606zzz.html</FONT></A></FONT></DIV>
<DIV><FONT size=2><FONT size=2></FONT></FONT> </DIV>
<DIV><FONT size=2>I would like to use a body or rawbody (uri or full
maybe?) rule to find "html://www.xx-yyyyy.com" and give it a score in SA
by adding it to my spam.assassin.prefs.conf file but have not yet figured
out how to write it. My Header rules work fine, but all of my attempts at
this seem to be all for nothing.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Any help would be appreciated and sorry for the non-MS
stuff.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2><BR></FONT></DIV>
<DIV><FONT size=2>steve campbell</FONT></DIV>
<DIV><FONT size=2><A
href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</A></FONT></DIV></BLOCKQUOTE></BLOCKQUOTE></BLOCKQUOTE></BODY></HTML>