I have some basic questions about the way bombRe is logged.
Here's example of logging of a message that came in with
$8.2 million
appearing twice in the message (once in the text version, once in the html
version)
I've got bombReMaxHits set to 10. The bomb valance is 50
(starts out before the lines below with a score of 15 due to a bad DKIM)
May-24-11 12:14:35 Info: weighted regex (bombRe) result found for $8.2
million - with \$\d{1,5}\.\d{1,3}\smillion - weight is 0.10
May-24-11 12:14:35 Info: weighted regex (bombRe) result found for $8.2
million - with \$\d{1,5}\.\d{1,3}\smillion - weight is 0.10
[[ Showing the 2 matches right? ]]
May-24-11 12:14:35 11814-14244 66.1.2.3 <[email protected]> to:
[email protected] Regex:BombRe 'PB 5: for $8.2 million'
[[ if it found 2 matches, why is the score only 5 and not 10? (0.10 x 50 x
2) Does ASSP not score multiple matches for the same line in bombRe? I
like that, if it's the case. ]]
May-24-11 12:14:35 11814-14244 [bombRe] 66.1.2.3 <
[email protected]> to: [email protected] [scoring] (bombRe '$8.2
million')
May-24-11 12:14:35 11814-14244 66.1.2.3 <[email protected]> to:
[email protected] Message-Score: added 5 for Regex:BombRe 'PB 5: for $8.2
million'bombRe: '$8.2 million ', total score for this message is now 20
[[ I don't quite understand the syntax here. ]]
Thanks.
------------------------------------------------------------------------------
vRanger cuts backup time in half-while increasing security.
With the market-leading solution for virtual backup and recovery,
you get blazing-fast, flexible, and affordable data protection.
Download your free trial now.
http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
