On Mon, 25 Jun 2018, J Doe wrote:
Hello,
I was wondering if it is possible to assign a score to a custom rule that will
evaluate to the value that required_score is set to.
My thinking here is that if this rule ever passes, it should not add a small
value to the score but push the score up to the value
that required_score is set to. This way, if the custom rule ever matches, it
automatically scores the amount required to flag
the message as spam because the score applied is the value of required_score.
I am wondering if it’s possible to do something like this:
body __BODY_TEST1 . . .
body __BODY_TEST2 . . .
meta CUSTOM_RULE1 (__BODY_TEST1 && __BODY_TEST2)
describe CUSTOM_RULE1 My custom rule
score CUSTOM_RULE1 %required_score
…where that last %required_score is the part I am curious about.
If it’s not possible to do this directly, is there a way to achieve the same
effect that is used by SA rule writers ?
That's called a "poison pill rule", and generally you don't worry about
hitting the required score exactly, you just set it to something large -
like 10 or 100.
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
9 days until the 242nd anniversary of the Declaration of Independence
