I have changed the BODY rule to URI rule... Now my rule looks something like this.
uri LOCAL_URI_LINK_BLOCK /abc\.uk/ score LOCAL_URI_LINK_BLOCK 4 actually i want to block this type of LINK from my mail : http://img409.abc.uk/my.php?image=qoofkjruod4.png where I am not sure if 1. It may not start with "http://"; always, may be just "www". 2. "img409" may change to something like "rpf234" 3. "my.php?image=qoofkjruod4.png" can be some thing else. But my constant part is always "abc.uk" But still I am confused... it not working as I wanted to... When I am testing from my different mail account its showing different result. I have tried to test from my office email account, when I am sending mail from Microsoft Outlook and checking the header I am seeing this : X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on 45224 X-Spam-Level: ** X-SMSpamC-SASpamRating: NOT SPAM X-Spam-Status: No, score=3.0 required=5.0 tests=BAYES_00,HTML_90_100, HTML_MESSAGE,LOCAL_URI_LINK_BLOCK,NO_DNS_FOR_FROM,RCVD_IN_SORBS_WEB autolearn=no version=3.1.7 But when sending the exactly same mail from Webmail I cannot see this !!! And moreover though I have mentioned the Spam score 4 its showing 3 only.. why? Please Advice TIA Diptanjan jdow wrote: > > Yeah, I was going to comment that the rule might be a little over- > enthusiastic. A little extra context checking for the http followed > by the .abc.com part followed by whitespace might be a little better. > > On the other hand, if it passes lint there is nothing wrong with it. > Watch for false alarms and when you see one fix it. > > {^_^} > ----- Original Message ----- > From: "Randal, Phil" <[EMAIL PROTECTED]> > > > A uri rule would make more sense. > > You're going to match xyzabc.com with that rule, too, so think > carefully. > > Phil > >> -----Original Message----- >> From: Diptanjan [mailto:[EMAIL PROTECTED] >> >> Hi friends, >> I am very new to spamassassin. I want to set up a local rule in >> /etc/mail/spamassassin/local.cf file >> so that any mail with link in it http//*.abc.com/* will be >> blocked and I >> want to give a score of 3.5 to that. >> >> I have so far written a rule for that but it not working properly. Can >> someone help. >> >> The rule I have set is : >> >> body LOCAL_BODY_LINK_BLOCK /abc\.com/ >> score LOCAL_BODY_LINK_BLOCK 3.5 >> >> Is there wrong in it? >> >> please advice >> >> TIA >> >> diptanjan > > > -- View this message in context: http://www.nabble.com/Setting-up-a-body-rule.-tf3958477.html#a11248787 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
