[Rspamd-Users] regex matching only in "Scan/Learn" UI

[Tino Hendricks]

Dear list,

what could be the reason that this spam mail body part:

--0000000000001835a10625032efb
Content-Type: text/plain; charset="UTF-8"

https://t.co/QOvzySU9xJ

--0000000000001835a10625032efb
Content-Type: text/html; charset="UTF-8"

<div dir="ltr"><a href="https://t.co/QOvzySU9xJ">https://t.co/QOvzySU9xJ</a><br></div>

--0000000000001835a10625032efb--


successfully matches my regex:

/Content-Type: text\/plain; charset="UTF-8"

https:\/\/\w+\.\w+\/\S{5,15}

/m

while testing in „Scan/Learn“ tab of the web interface, but not during the scan of the incoming mail?

OTOH, with the HFILTER_URL_ONLY symbol it’s vice versa: shows up there, but not during the „Scan/Learn“ thing. 

Thanks,

Tino
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 4339 bytes
Desc: not available
URL: <https://lists.rspamd.com/pipermail/users/attachments/20241022/7b60e3fb/attachment.bin>