Nigel Frankcom wrote: > Hi All, > > I've written the following rule to deal with spam a particular set of > users are getting hit by that very few of my rules are hitting. > > Using --lint the rule come back clean but on testing it appears to be > ignored. It's in the spamassassin directory. > > Am I missing something stupid? (Wouldn't be the 1st time) > > header __NFheader ALL =~ /live\.com/i > score __NFheader 0.1 > uri __NFuri /www\.google\.com\/groups\// > score __NFuri 0.1 > meta NFheader_Details (__NFheader && __NFuri) > describe NFheader_Details live dot com spam > score NFheader_Details 5.0
I would make the URI rule case-insensitive. Also, you do not need to have a score for the sub-rules. Other than that, I don't see anything obviously wrong. Post a sample spam email somewhere so we can see what you are trying to match. (Don't send the sample to the list, put it on pastebin or your webserver) -- Bowie
