Deon For starters, grep for the rule in /usr/share/spamassassin:
cesium:/usr/share/spamassassin # grep WORLD * 20_head_tests.cf:header ROUND_THE_WORLD_LOCAL eval:check_for_round_the_world_received_helo() 20_head_tests.cf:describe ROUND_THE_WORLD_LOCAL Received: says mail sent around the world (HELO) 20_head_tests.cf:header ROUND_THE_WORLD eval:check_for_round_the_world_received_revdns() 20_head_tests.cf:describe ROUND_THE_WORLD Received: says mail sent around the world (DNS) 20_head_tests.cf:tflags ROUND_THE_WORLD net 30_text_de.cf:lang de describe ROUND_THE_WORLD_LOCAL "Received"-Kopfzeilen belegen Versand rund um die Welt (HELO) 30_text_de.cf:lang de describe ROUND_THE_WORLD "Received"-Kopfzeilen belegen Versand rund um die Welt (DNS) 30_text_fr.cf:lang fr describe ROUND_THE_WORLD Les en-t�tes Received: montrent que ce message a fait le tour du monde 30_text_fr.cf:lang fr describe ROUND_THE_WORLD_LOCAL En-t�tes Received: donnent l'impression que le message a fait le tour du monde 30_text_it.cf:lang it describe ROUND_THE_WORLD L'header Received: rivela che la mail ha fatto il giro del mondo 30_text_sk.cf:lang sk describe ROUND_THE_WORLD_LOCAL Polia "Received:" ukazuj� �e e-mail obi*iel cel� svet 30_text_sk.cf:lang sk describe ROUND_THE_WORLD Polia "Received:" ukazuj� �e e-mail obi*iel cel� svet 50_scores.cf:score ROUND_THE_WORLD_LOCAL 3.072 2.965 2.696 2.699 50_scores.cf:score ROUND_THE_WORLD 0 2.515 0 2.141 Now we see its an eval rule which means its not triggered by a regular expression. So let's have a look in (in the case of my Perl setup, yours may be slightly different): /usr/lib/perl5/site_perl/5.8.1/Mail/SpamAssassin/EvalTests.pm Have a look around line 1570 for the full gory details - it's a whole lot of Perl! For non eval tests you will get a regular expression which you can then check to see how it fired. Again have a look through the files in /usr/share/spamassassin for the full set. The rules are broken down into several files eg 20_head_tests.cf holds the header tests. It shoudl be fairly self-explanatory. Cheers Jon >>> Deon de Villiers - Hetzner Africa <[EMAIL PROTECTED]> 07/15/04 10:28am >>> Hi I geuss this question applies to any built in rule in SA, but for example: How do I find out what the actual check is that ROUND_THE_WORLD_LOCAL does? It is firing on a particular mail (not spam), which I can see has more Received by headers than usual, but I want to tell exactly at what point the rule is triggered for example. Thanks Deon.
