Yes, Duane, we are using quite a number of network tests but somehow these
mails don't get caught...


-----Ursprüngliche Nachricht-----
Von: Duane Hill [mailto:[EMAIL PROTECTED] 
Gesendet: Montag, 28. August 2006 14:18
An: Whisky
Cc: users@spamassassin.apache.org
Betreff: Re: Question: SA Rule Recognizing Directories

On Monday, August 28, 2006 at 7:53:40 AM, Whisky confabulated:

> There's a lot of spam lately, which contains urls with subdirectories,
such
> as http://spamdomain.org/gal/ms/. 
> I have thus set up the following rule: 

> body BODY_ADDS_22
> /(\/za\/|\/wd\/|\/iu\/|\/xi\/|\/gal\|\/tx\/|\/nu\/)/i

> However, when I send a testmail that conatins the string "/gal" the rule
is
> not triggered. What am I doing wrong here? 

Are you using any network tests (specifically URIBL) and Razor2? Those
are what is catching most of these on our server here.

Here's the Spam status header from one of these messages:

X-Spam-Status: Hits:14.8 Bayes:0.5 Learn:disabled
        Tests:RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
 
UNPARSEABLE_RELAY,URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL

-- 
"This message was sent using 100% recycled electrons."

Reply via email to