On 13 Apr 2018, at 6:36 (-0400), Giovanni Bechis wrote:
On 04/13/18 09:06, Sebastian Arcus wrote:
Hello all. I am getting some fp's with emails from QuickBooks /
Intuit with the above rule:
Apr 13 08:00:30.853 [5768] dbg: rules: ran uri rule URI_TRY_3LD
======> got hit: "https://myturbotax.intuit.com";
On a slightly different note, and mainly for my curiosity to
understand SA rules syntax, in 72_active.cf, the score seems to be
commented out:
#score URI_TRY_3LD 2.000 # limit
But when it hits, it still adds 2.0 to the score (and I haven't
customized the score anywhere else).
That's exceedingly unusual and difficult to explain...
Is this a special form of SA syntax?
No, it is an artifact of how sandbox rules are included in the published
rules.
the score is present in rulesrc/sandbox/jhardin/20_misc_testing.cf
with tflags publish.
Giovanni
Yes, but it is published in 72_scores.cf with a trivial score:
score URI_TRY_3LD 0.001 0.001 0.001 0.001
--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Currently Seeking Steady Work: https://linkedin.com/in/billcole
