On Mon, 2013-09-09 at 01:36 +0000, Raymond Jette wrote: > The following lines also show a test rule hitting:
One important thing I noticed missing from this thread is any evidence that custom rules are not working. This is pretty important to get a better picture of your issue and environment. How exactly do you tell your custom rules are not working? > [root@mx1 rjette]# cat mailflow.txt | grep match_ > Sep 8 21:31:47.662 [10285] dbg: rules: ran body rule match_all ======> got > hit: "negative match" > Sep 8 21:31:48.116 [10285] dbg: check: > tests=DKIM_ADSP_NXDOMAIN,MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS,match_all Whatever that was you passed through, it was not a mail. The following one looks good, though. > Sep 8 21:31:55.091 [10288] dbg: rules: ran body rule match_all ======> got > hit: "Rodney Martha Clephane Adkins commented on your status." > Sep 8 21:31:56.061 [10288] dbg: check: > tests=DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS,match_all > Sep 8 21:31:56.064 [10288] info: spamd: result: . 0 - > DKIM_SIGNED,DKIM_VALID,DKIM_VALID_AU,HTML_MESSAGE,RCVD_IN_DNSWL_LOW,SPF_PASS,match_all > > scantime=1.4,size=11207,user=nobody,uid=99,required_score=6.0,rhost=localhost.localdomain,raddr=127.0.0.1,rport=45086,mid=<b49d486c08d3c328fc670ccaf5e33...@graph.facebook.com>,autolearn=unavailable > > It appears to hit here but not on real mail. Any ideas? This is getting slightly confusing. The original issue was custom rules working if defined in local.cf, but not in custom cf files. Now you are saying your custom rules work in debug mode, but not with "real mail". By that, are you referring to not using debug mode, or a substantially different method of passing mail to your testing environment versus production system? -- char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1: (c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}