Jean-Paul Natola wrote: > Hi all , > > I've been getting quite a few messages sneaking in related to stocks, > What I have noticed is that they ALL contain the following; > > Company: > Symbol: > Price: > How would I go about a creating a rule/filter that would score any message > that contains those three words followed by the colon to score 3 points?
Make 3 body rules and bind them with a meta rule. body __COMPANY /\bCompany:\s/i body __SYMBOL /\bSymbol:\s/i body __PRICE /\bPrice:\s/i meta STOCK_PRICE (__COMPANY && __SYMBOL && __PRICE) describe STOCK_PRICE seems to be quoting a company stock price score STOCK_PRICE 0.5 You could also improve the body rules with obfuscated text handling if you need it: i.e: body __SYMBOL /\bSymb[o0][l1i]:\s/i
