RE: Help with rule

2023-06-06 Thread jacklistmail
Hello,


Thanks, it looks like there was an extra from in my code, it was that line
that gave me the error with -lint, it actually passed it with the @ escaped
or not will conduct ome test to make sure.

 

 

From: Loren Wilton  
Sent: Monday, June 5, 2023 11:15 PM
To: users@spamassassin.apache.org
Subject: Re: Help with rule

 

> meta FROM_CLIENT_TEST from FROM_CLIENT_EMAIL && FROM_CLIENT_IP

 

Is that a typo when you were making this mail, or is it actually how the
line is coded? There is an extra "from" there.

 

Even if you fix that, you won't get the results you expect. Both
FROM_CLIENT_EMAIL and  FROM_CLIENT_IP will score as 1 point each if they
hit, so your final adjusted score will be +1, not -1.

 

You can fix that in several ways:

 

header FROM_CLIENT_EMAIL From =~ /client@client\.com/i

scoreFROM_CLIENT_EMAIL 0.01

header FROM_CLIENT_IP Received =~ /from 138\.31\230\.222/

scoreFROM_CLIENT_IP  0.01

 

Or

 

 

header FROM_CLIENT_EMAIL From =~ /client@client\.com/i

header FROM_CLIENT_IP Received =~ /from 138\.31\230\.222/

meta FROM_CLIENT_TEST FROM_CLIENT_EMAIL && FROM_CLIENT_IP

score FROM_CLIENT_TEST -3.0

 

Or the probably best way once you have the tests debugged and you know they
both hit correctly:

 

header __FROM_CLIENT_EMAIL From =~ /client@client\.com/i

header __FROM_CLIENT_IP Received =~ /from 138\.31\230\.222/

meta FROM_CLIENT_TEST __FROM_CLIENT_EMAIL && __FROM_CLIENT_IP

score FROM_CLIENT_TEST -1.0

 

The double underscore on the front of the rule will keep it from
contributing a score of it's own, and it will not show in the list of hit
rules. Thus you will only see the result of the meta.

 

Loren

 

 



Help with rule

2023-06-05 Thread jacklistmail
Hello All,

 

I know this isn't the best method, I have to learn some of the previous
suggestions, but I would like to get this rule to work.

Not sure where I went wrong.

 

header FROM_CLIENT_EMAIL From =~ /client@client\.com/i

header FROM_CLIENT_IP Received =~ /from 138\.31\230\.222/

meta FROM_CLIENT_TEST from FROM_CLIENT_EMAIL && FROM_CLIENT_IP

score FROM_CLIENT_TEST -1.0

 

 

Thanks!