Re: Trying to understand what's wrong in these rules...

2019-08-05 Thread RW
On Mon, 5 Aug 2019 15:40:45 +0200 hg user wrote: > I'm trying to understand why this rule fires on some messages: > metaPHISH_ZIMBRA ( __ZIMBRA_00 + __ZIMBRA_01 + __ZIMBRA_02 + > __ZIMBRA_03 > 2 ) && __NOT_FROM_INTERNAL What are these rules?

Re: Trying to understand what's wrong in these rules...

2019-08-05 Thread hg user
I noticed that the rules come from compiled bundle... as soon as I modified them adding one dummy word, spamassassing used the new "interpreted" ones and now the matched words are listed... so, is it normal that compiled rules don't output debug matches? how can I disable the compiled rules? On

Trying to understand what's wrong in these rules...

2019-08-05 Thread hg user
I'm trying to understand why this rule fires on some messages: metaPHISH_ZIMBRA ( __ZIMBRA_00 + __ZIMBRA_01 + __ZIMBRA_02 + __ZIMBRA_03 > 2 ) && __NOT_FROM_INTERNAL I read it in this way: IF at least THREE rules among __ZIMBRA_00, 01, 02 or 03 are matched AND rule __NOT_FROM_INTERNAL is