>-----Original Message-----
>From: Pham, Tu [mailto:[EMAIL PROTECTED]
>Sent: Thursday, May 06, 2004 3:30 AM
>To: [EMAIL PROTECTED]
>Subject: Writing Rules
>
>
>
>Hi,
>
>I had a question regarding writing a custom rule. I recently wrote one
>but it doesn't seem to be working. I was just wondering
>whether there ws
>something wrong with the rule I wrote.
>
>I am currently running SA 2.63 on Red Hat 7.2. In the local.cf file
>located in /etc/mail/spamassassin I added these lines:
>
>rawbody VIRUS_WARNING89 /------------- Virus Warning Message
>(on westaway)/
>describe VIRUS_WARNING89 Unhelpful virus message (89)
>score VIRUS_WARNING89 7.0
>
>Our SA cathces anything with a score over 5.6. I'm trying to get rid of
>these types of emails
>
>------------------ Virus Warning Message (on westaway)
>
>Informations.zip is of type executable and is removed.
>
>---------------------------------------------------------
>
>Do I need to restart a daemon or anything?
>
Yes you need to restart spamd. You can also try this:
rawbody VIRUS_WARNING89 /^\-{13,} Virus Warning Message/i
That should pretty much do it without causing any FPs. The \ before the -
may be overkill. I can never remember when it isn't needed. But it will work
like it is.
HTH,
Chris Santerre
System Admin and SARE Ninja
http://www.rulesemporium.com
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin
