<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1141" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff size=2>Here's
one I use...</FONT></SPAN></DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff
size=2>rawbody LOCAL_CNTNTFRM_vresp
/https?:\/\/.*?\.vresp\.com/i<BR>describe LOCAL_CNTNTFRM_vresp Has
"<A href="http://*.vresp.com">http://*.vresp.com</A>" in body<BR>score
LOCAL_CNTNTFRM_vresp 3<BR></FONT></SPAN></DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff size=2>In the
reg exp /s and .s must be preceded by \, makes it confusing. The ? makes the s
optional so http or https will work. The i after the final / means case
insensitive.</FONT></SPAN></DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=235462715-18032003><FONT face=Arial color=#0000ff size=2>Your
reg exp would be "/http:\/\/www\.xx-yyyyy\.com/" off the top of my head
anyways.</DIV></FONT></SPAN>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma
size=2>-----Original Message-----<BR><B>From:</B> Stephe Campbell
[mailto:campbell@cnpapers.com]<BR><B>Sent:</B> Tuesday, March 18, 2003 10:19
AM<BR><B>To:</B> MAILSCANNER@jiscmail.ac.uk<BR><B>Subject:</B> Body SA
rule<BR><BR></FONT></DIV>
<DIV><FONT size=2>This is not a MS problem, but I have yet been able to find
anything in the SA archives and hope that someone using MS has done this
before. I'm not versed in Perl, so I sort of need assistance. The people of
this maillist really seem to be on the ball.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>We receive a lot of spam from a particular group. Each
mailing is from various sources, but all have the following line in
them(actually a reply link where I have replaced the real address with x's,
y's, etc):</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV> </DIV>
<DIV><FONT size=2><FONT size=3> visit at </FONT><A
href="http://www.xx-yyyyy.com/34606zzz.html"><FONT
size=3>http://www.xx-yyyyy.com/34606zzz.html</FONT></A></FONT></DIV>
<DIV><FONT size=2><FONT size=2></FONT></FONT> </DIV>
<DIV><FONT size=2>I would like to use a body or rawbody (uri or full maybe?)
rule to find "html://www.xx-yyyyy.com" and give it a score in SA by adding it
to my spam.assassin.prefs.conf file but have not yet figured out how to write
it. My Header rules work fine, but all of my attempts at this seem to be all
for nothing.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Any help would be appreciated and sorry for the non-MS
stuff.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2><BR></FONT></DIV>
<DIV><FONT size=2>steve campbell</FONT></DIV>
<DIV><FONT size=2><A
href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</A></FONT></DIV></BLOCKQUOTE></BODY></HTML>