On 13/04/18 11:36, Giovanni Bechis wrote:
On 04/13/18 09:06, Sebastian Arcus wrote:
Hello all. I am getting some fp's with emails from QuickBooks / Intuit with the 
above rule:

Apr 13 08:00:30.853 [5768] dbg: rules: ran uri rule URI_TRY_3LD ======> got hit: 
"https://myturbotax.intuit.com";

On a slightly different note, and mainly for my curiosity to understand SA 
rules syntax, in 72_active.cf, the score seems to be commented out:

#score       URI_TRY_3LD       2.000   # limit

But when it hits, it still adds 2.0 to the score (and I haven't customized the 
score anywhere else). Is this a special form of SA syntax?

the score is present in rulesrc/sandbox/jhardin/20_misc_testing.cf with tflags 
publish.

Is that a location on the SA server - or am I suppose to have those dirs locally here? I can't seem to find them anywhere locally.

Reply via email to