I made a custom rule in local.cf to score the following with 5:
describe custom_body_checks Custom Body Checks score custom_body_checks 5
rawbody __bc_0 /%RND_ALT/I
meta custom_body_checks ( __bc_0 )
But it is not catching that phrase in the inbound e-mail. (below)
Can anyone tell me why?
Because you ended the __bc_0 with a /I, which isn't a valide modifier. Perhaps you meant lower-case /i?
try running spamassassin --lint on your rules..
$ spamassassin --lint
Bareword found where operator expected at (no file), rule __bc_0, line 1, near "/%RND_ALT/I"
(Missing operator before I?)
