Hi, I have created a routine where I can enter a string into a text file and it gets converted into a set of rules that form a cf file. They are all of the form LOCAL_RULE_N, where N is a random 6-digit number. Two points are added if the rule is triggered. There are now about 3800 of these rules, dating back chronologically about a year or so.
I've learned a lot over the past year, and I now think some of these patterns may be catching valid mail, so I'd like to figure out how best to prune at least the ones that are no longer triggered or are triggered but don't cause the email to become spam. IOW, the message would be spam regardless of whether the rule fired. What is the best way to do this? An awk script on mail.log over the past few weeks? How can I wildcard the script with so many rules, and when they have random numbers at the end? I'm still surprised how many are hitting for things like "Acai Berry" or "PO Box 1845 | Ft. Worth | TX", for example. Thanks for any ideas. Alex