Re: Rules for testing

2014-11-15 Thread Axb
On 11/15/2014 11:20 AM, Paul Stead wrote: A few more examples: WP_POMO - http://pastebin.com/ZeEEcPpN LOC_POMO - http://pastebin.com/1zJmXnXD - not hitting very often SUBJECT_REPEAT - http://pastebin.com/Q7ZHgFV8 http://pastebin.com/P1LBzGZ0 -- Paul Stead Systems Engineer Zen Internet If some

Re: Rules for testing

2014-11-15 Thread Paul Stead
A few more examples: WP_POMO - http://pastebin.com/ZeEEcPpN LOC_POMO - http://pastebin.com/1zJmXnXD - not hitting very often SUBJECT_REPEAT - http://pastebin.com/Q7ZHgFV8 http://pastebin.com/P1LBzGZ0 -- Paul Stead Systems Engineer Zen Internet

Re: Rules for testing

2014-11-13 Thread Paul Stead
On 13/11/14 17:07, Paul Stead wrote: FROM_2_EMAILS - inspired by the Khopesh rule of the same name. Matches when the from name contains an email address different to the from address, such as: From: "t...@example.com" 8< header __PDS_FROM_2_EMAILS From =~ /^\W+([\w+.-]+\@[\w.-]+\.\

Re: Rules for testing

2014-11-13 Thread Paul Stead
On 13/11/14 18:01, John Hardin wrote: On Thu, 13 Nov 2014, Paul Stead wrote: TO_EQ_FROM_NAME will match headers that look like the following: From: "t...@example.com" To: t...@example.com I'll review that and add it to my sandbox with the other TO_EQ_FROM rules. I've noticed my describe

Re: Rules for testing

2014-11-13 Thread Paul Stead
On 13/11/14 18:01, John Hardin wrote: There's already hacked-wordpress rules in testing. I'll compare to existing and see if this is already covered, can be merged neatly, or would be a variant subrule. The testing sub-rule was mine - this is slightly adjusted. The rules in sandbox for Wordpr

Re: Rules for testing

2014-11-13 Thread Paul Stead
Sending examples for testing: http://pastebin.com/J0R1AYdw - SUBJECT_REPEAT http://pastebin.com/v6BD4m2V - TO_EQ_FROM_NAME / FROM_2_EMAILS http://pastebin.com/pbqUn9qw - FROM_2_EMAILS Paul On 13/11/14 17:55, Paul Stead wrote: I was under the assumption that header matches only match the single

Re: Rules for testing

2014-11-13 Thread Axb
On 11/13/2014 06:55 PM, Paul Stead wrote: I was under the assumption that header matches only match the single line, The subject repeat one: Subject: Re: Hello Re: Hello Wouldn't the second line become the "Re:" header? The same with the From:/To: headers - I'm comparing the two headers - is

Re: Rules for testing

2014-11-13 Thread John Hardin
On Thu, 13 Nov 2014, Paul Stead wrote: I was under the assumption that header matches only match the single line, The subject repeat one: Subject: Re: Hello Re: Hello Wouldn't the second line become the "Re:" header? If the Re: is actually *not* indented, yes. You are correct. The same wi

Re: Rules for testing

2014-11-13 Thread John Hardin
On Thu, 13 Nov 2014, Paul Stead wrote: I've developed a few rules which seem to be hitting well, could I get these into the sandbox? TO_EQ_FROM_NAME will match headers that look like the following: From: "t...@example.com" To: t...@example.com I'll review that and add it to my sandbox with

Re: Rules for testing

2014-11-13 Thread Paul Stead
I was under the assumption that header matches only match the single line, The subject repeat one: Subject: Re: Hello Re: Hello Wouldn't the second line become the "Re:" header? The same with the From:/To: headers - I'm comparing the two headers - is there a better way? Paul On 13/11/14 17:1

Re: Rules for testing

2014-11-13 Thread Axb
On 11/13/2014 06:07 PM, Paul Stead wrote: Hey guys, I've developed a few rules which seem to be hitting well, could I get these into the sandbox? TO_EQ_FROM_NAME will match headers that look like the following: From: "t...@example.com" To: t...@example.com 8< header __PDS_TO_

Rules for testing

2014-11-13 Thread Paul Stead
Hey guys, I've developed a few rules which seem to be hitting well, could I get these into the sandbox? TO_EQ_FROM_NAME will match headers that look like the following: From: "t...@example.com" To: t...@example.com 8< header __PDS_TO_EQ_FROM_NAME_1 ALL =~ /\nTo:\s+(?:[^\