Sorry, I always reply to the list, this time it flips on me.

Thanks!
So, this way I can have a check on the large of the subject as a sub rule and then check for the content, appreciated.

Regards,

Sergio

On Thu, Dec 1, 2011 at 4:33 PM, John Hardin <jhardin@impsec.org> wrote:
On Thu, 1 Dec 2011, Sergio wrote:

I want to check for specific subject size, thanks.

Let's keep the discussion on-list so others may benefit.

Larger than:

header  __SUBJ_GT_100   Subject =~ /.{101}/

Smaller than or equal to:

header  __SUBJ_LE_100   Subject =~ /^.{0,100}$/


Sergio

On Thu, Dec 1, 2011 at 3:41 PM, John Hardin <jhardin@impsec.org> wrote:

On Thu, 1 Dec 2011, Sergio wrote:

 is there a way to check the size of a subject on a rule?

Do you want to know if it's larger than or smaller than some specific
size, or do you want to know about how many characters are in it?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
 Any time law enforcement becomes a revenue center, the system
 becomes corrupt.

-----------------------------------------------------------------------
 14 days until Bill of Rights day