> > Yes, I did restart the daemon. I checked using spamassassin, > not spamc > anyway, so restart of the daemon is not necessary. > > However, I modified the rules a bit. Seems that when you > remove the ';' > from the rules it works. I didn't see any ;'s in the mail > that was slipping > through. > > Perhaps that was the problem?
yes, that was the problem, Danie. Don't remove the ";", make them optional. (at least that is what i would suggest, so that it still catches the other form as well.) I'll do the same for the distribution set. thanks, Jennifer > > Regards, > Danie Marais > ----- Original Message ----- > From: "Gary Smith" <[EMAIL PROTECTED]> > To: "Danie Marais" <[EMAIL PROTECTED]>; "jennifer" > <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> > Sent: Wednesday, February 18, 2004 4:59 PM > Subject: RE: [Suspected SPAM] Re: This doesn't get picked up > > > > Did you restart the SA daemon? > > > > -----Original Message----- > > From: Danie Marais [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, February 18, 2004 5:17 AM > > To: jennifer; [EMAIL PROTECTED] > > Subject: [Suspected SPAM] Re: This doesn't get picked up > > > > Thanks for that, Jennifer > > > > I see how this is supposed to work, but I have placed the > weeds.cf file > > in > > /etc/mail/spamassassin and made sure it has read access for > everybody. > > > > I then ran > > spamassassin < mymessage.eml > result.txt > > > > And the rules were not applied. I have attached the > message if you want > > to > > verify. Maybe it's just me being stupid, but my other rulesets like > > backhair and chickenpox applied in the same fashion work just fine. > > > > Danie > > ----- Original Message ----- > > From: "jennifer" <[EMAIL PROTECTED]> > > To: "'Danie Marais'" <[EMAIL PROTECTED]>; > > <[EMAIL PROTECTED]> > > Sent: Tuesday, February 17, 2004 4:27 PM > > Subject: RE: This doesn't get picked up > > > > > > > > > > > Hi, > > > > > > > > I got a spam message yesterday with the following text > > > > > > > > "Discover the new winning sexual erection pill! > > > > This medication picks up where Viagra stops." > > > > > > > > But 'viagra' was not picked up. However, when I look at the > > > > message source > > > > I see this: > > > > > > > > <html> > > > > <body> > > > > Disco<eqkolpb>ver the n</nyvakro>ew winning > > > > sexual > > > >  erection pil > > > > l!<br> > > > > This > > > > medication pi > > > > cks > > > >  up where Via&# > > > > 103ra > > > >  stops.<br><br> > > > > > Only $3 PER DOSE > > > > <br><br> > > > > <a > > > > href="http://www.cnbroastca > > > > st.com > > > > /c2/index.php?AFF_ID=&# > > > > 100m5&# > > > > 54"> > > > > Get your free > > > >  prescriptio > > > > 0 NO& > > > > #87!</a> > > > > <br><br><br> > > > > . > > > > . > > > > . > > > > > > > > > > > > > > > > > > > > Is there a simple way of catching this apprach? > > > > > > The Weeds Set (not weeds2) > > > > > > http://www.emtinc.net/spamhammers.htm > > > > > > Jennifer > > > > > > > > > > > Danie Marais > > > > > > > > > >
