On Sat, 12 Jan 2013, Kevin A. McGrail wrote:

On 1/12/2013 6:17 AM, Apache Jenkins Server wrote:
 See <https://builds.apache.org/job/SpamAssassin-trunk/8314/changes>

SPOOFED_URL_HOST depends on T_URL_SHORTENER which is nonexistent

Anyone have any thoughts about this? It looks to me like it happened from a rule promotion.

Generally when something like this occurs, I split the T_ rule into a __subrule for meta rules to use and that won't be omitted due to poor performance, and then a scored meta rule that, if it performs well, would be published.

In other words, change it to:

    uri     __URL_SHORTENER   /whatever/
    meta    URL_SHORTENER     __URL_SHORTENER

This also offers the ability to add FP avoidance negation rules to the scored version to improve its performance. e.g.:

    meta    URL_SHORTENER     __URL_SHORTENER && !ALL_TRUSTED


--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 [email protected]    FALaholic #11174     pgpk -a [email protected]
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  Maxim XXIX: The enemy of my enemy is my enemy's enemy. No more.
  No less.
-----------------------------------------------------------------------
 5 days until Benjamin Franklin's 307th Birthday

Reply via email to