I though about making it optional, but it is at the end of the text it
checks for. It is like saying
"match rule X and then there can be a ; at the end or not"
I'd rather just say
"match rule X"

Regards,

Danie Marais
CTO, Attix5
[EMAIL PROTECTED]
www.attix5.com
+27 21 880 2323 (Tel)
+27 21 880 2324 (Fax)
----- Original Message ----- 
From: "jennifer" <[EMAIL PROTECTED]>
To: "'Danie Marais'" <[EMAIL PROTECTED]>; "'Gary Smith'"
<[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
Sent: Wednesday, February 18, 2004 6:05 PM
Subject: RE: This doesn't get picked up


>
> >
> > Yes, I did restart the daemon.  I checked using spamassassin,
> > not spamc
> > anyway, so restart of the daemon is not necessary.
> >
> > However, I modified the rules a bit.  Seems that when you
> > remove the ';'
> > from the rules it works.  I didn't see any ;'s in the mail
> > that was slipping
> > through.
> >
> > Perhaps that was the problem?
>
> yes, that was the problem, Danie.  Don't remove the ";", make them
> optional.  (at least that is what i would suggest, so that it still
> catches the other form as well.)  I'll do the same for the distribution
> set.
>
> thanks,
> Jennifer
>
> >
> > Regards,
> > Danie Marais
> > ----- Original Message ----- 
> > From: "Gary Smith" <[EMAIL PROTECTED]>
> > To: "Danie Marais" <[EMAIL PROTECTED]>; "jennifer"
> > <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]>
> > Sent: Wednesday, February 18, 2004 4:59 PM
> > Subject: RE: [Suspected SPAM] Re: This doesn't get picked up
> >
> >
> > > Did you restart the SA daemon?
> > >
> > > -----Original Message-----
> > > From: Danie Marais [mailto:[EMAIL PROTECTED]
> > > Sent: Wednesday, February 18, 2004 5:17 AM
> > > To: jennifer; [EMAIL PROTECTED]
> > > Subject: [Suspected SPAM] Re: This doesn't get picked up
> > >
> > > Thanks for that, Jennifer
> > >
> > > I see how this is supposed to work, but I have placed the
> > weeds.cf file
> > > in
> > > /etc/mail/spamassassin and made sure it has read access for
> > everybody.
> > >
> > > I then ran
> > > spamassassin < mymessage.eml > result.txt
> > >
> > > And the rules were not applied.  I have attached the
> > message if you want
> > > to
> > > verify.  Maybe it's just me being stupid, but my other rulesets like
> > > backhair and chickenpox applied in the same fashion work just fine.
> > >
> > > Danie
> > > ----- Original Message ----- 
> > > From: "jennifer" <[EMAIL PROTECTED]>
> > > To: "'Danie Marais'" <[EMAIL PROTECTED]>;
> > > <[EMAIL PROTECTED]>
> > > Sent: Tuesday, February 17, 2004 4:27 PM
> > > Subject: RE: This doesn't get picked up
> > >
> > >
> > > >
> > > > > Hi,
> > > > >
> > > > > I got a spam message yesterday with the following text
> > > > >
> > > > > "Discover the new winning sexual erection pill!
> > > > > This medication picks up where Viagra stops."
> > > > >
> > > > > But 'viagra' was not picked up.  However, when I look at the
> > > > > message source
> > > > > I see this:
> > > > >
> > > > > <html>
> > > > > <body>
> > > > > Disco<eqkolpb>ver the n</nyvakro>ew winning
> > > > > &#115&#101&#120&#117&#97&#108
> > > > > &#32&#101&#114&#101&#99&#116&#105&#111&#110&#32&#112&#105&#108
> > > > > &#108!<br>
> > > > > This
> > > > > &#109&#101&#100&#105&#99&#97&#116&#105&#111&#110&#32&#112&#105
> > > > > &#99&#107&#115
> > > > > &#32&#117&#112&#32&#119&#104&#101&#114&#101&#32&#86&#105&#97&#
> > > > > 103&#114&#97
> > > > > &#32&#115&#116&#111&#112&#115.<br><br>
> > > > >
> > &#79&#110&#108&#121&#32&#36&#51&#32&#80&#69&#82&#32&#68&#79&#83&#69
> > > > > <br><br>
> > > > > <a
> > > > > href="http://www.&#99&#110&#98&#114&#111&#97&#115&#116&#99&#97
> > > > > &#115&#116.com
> > > > > /c2/index&#46&#112&#104&#112&#63&#65&#70&#70&#95&#73&#68&#61&#
> > > > > 100&#109&#53&#
> > > > > 54">
> > > > > &#71&#101&#116&#32&#121&#111&#117&#114&#32&#102&#114&#101&#101
> > > > > &#32&#112&#114&#101&#115&#99&#114&#105&#112&#116&#105&#111&#11
> > > > > 0&#32&#78&#79&
> > > > > #87&#33</a>
> > > > > <br><br><br>
> > > > > .
> > > > > .
> > > > > .
> > > > >
> > > > >
> > > > >
> > > > >
> > > > > Is there a simple way of catching this apprach?
> > > >
> > > > The Weeds Set (not weeds2)
> > > >
> > > > http://www.emtinc.net/spamhammers.htm
> > > >
> > > > Jennifer
> > > >
> > > > >
> > > > > Danie Marais
> > > > >
> > > > >
> >
> >
>
>

Reply via email to