On 12/3/2022 8:40 μ.μ., Matus UHLAR - fantomas wrote:
this is because PDS_FROM_2_EMAILS has some exceptions, which is why
I advised you to use something different.
On 12.03.22 22:21, Nikolaos Milas wrote:
Sorry Matus if I don't understand right, but can you please clarify:
The rule:
L_OLEMACRO_ZIP_PW && __PDS_FROM_2_EMAILS
doesn't also depend on the original
PDS_FROM_2_EMAILS
rule? How will this extend the scope of the detected mails? I
understand that the original rule must get triggerred for the whole to
get triggered too. No?
And, when you mentioned:
T_PDS_FROM_2_EMAILS
this was a spelling mistake which meant to be: __PDS_FROM_2_EMAILS or
something I don't understand?
Probably some things are very clear to you as an expert, but I am
missing pieces of the puzzle.
Can you please break things down a bit?
I have re-checked my last statements and to me it looks like they still
apply.
__PDS_FROM_2_EMAILS is not PDS_FROM_2_EMAILS
__PDS_FROM_2_EMAILS is not T_PDS_FROM_2_EMAILS
more explanations may come next week if I (or someone else) am not lazy
--
Matus UHLAR - fantomas, [email protected] ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"To Boot or not to Boot, that's the question." [WD1270 Caviar]
