header      LOCAL_DEMONSTRATION_RULE    /test/
score       LOCAL_DEMONSTRATION_RULE    1.000
describe    LOCAL_DEMONSTRATION_RULE    This is a simple test rule

AFAIK there are four different types of rules: body, rawbody, header and
full.
Yes, if you want to match 'test' in the Subject, you need a header rule:

Generally true, but not in this case. The subject is prepended to the body, so either a header rule for Subject or a body rule will hit on it. (But not a rawbody rule, I believe.)


To the OP: did you restart SA so it will pick up the new rules you wrote? In your case that would probably mean restarting Amvis, unless it has some command to restart SA internally.

       Loren


Reply via email to