ram wrote:
> Can I have multiple custom rules and evaluate some rules depending on
> results from others
>
>
> Basically I have different domains and each domain recieves different
> kind of spam. I wish to let domain administrators manage rules for
> themselves , but without increasing the load on SA
>
>
>
> For eg a rule might be
>
> header __TO_CC_PHARMA_COMPANY ToCc =~ /[EMAIL PROTECTED]/i
>
> if( __TO_CC_PHARMA_COMPANY ) { ######## How to do this ????
> body ALLOW_MEDS /viagra/
> descibe this company recieves such legal mails , so give a negative
> score to offset the others
> score ALLOW_MEDS -2
> } ######### end if
>
You don't do it as a "conditional" rule.. Any "conditional" rule
structured that way would be something like an ifplugin, which would
inhibit it from loading the rule when the file is read, before scanning
the message.
To get the functionality you want, you'd use a meta rule instead..
header __TO_CC_PHARMA_COMPANY ToCc =~ /[EMAIL PROTECTED]/i
body __HAS_VWORD /viagra/
meta ALLOW_MEDS ( __HAS_VWORD && __TO_CC_PHARMA_COMPANY)
score ALLOW_MEDS -2
>
>
>
