On Thu, 19 Feb 2009 08:01:48 -0800 (PST), John Hardin
<jhar...@impsec.org> wrote:
>On Thu, 19 Feb 2009, Nigel Frankcom wrote:
>
>> Testing was done through spamassassin --lint and with debug. I used a
>> mail that *should* have hit the rules.
>
>--lint is not for testing rule performance, as it uses an
>internally-generated test message. It's just to check for syntax errors.
>
>As has been requested, can you post a complete sample message on pastebin
>for us to see?
Many thanks to all... I have the rule working. As usual it was a
syntactical error (typo).
For anyone else getting the live.com emails with google groups links
the following works:
# Live.com spam
#rev:
# Nigel Frankcom: 19/02/2009 12:56:07~ works with 3.0.x, 3.1.x,
3.2.x
# Tested on 3.0.4, 3.0.5, 3.1.0, 3.2.x
header __NFheader ALL =~ /live\.com/i
uri __NFuri m{^https?\://www\.google\.com/groups?}i
meta NFheader_Details (__NFheader && __NFuri)
describe NFheader_Details live dot com spam.
score NFheader_Details 7.0
My default is 5.0 but the AWL puts live with a positive score. I'm
noting stuff from yahoo as well so will adjust this to suit.
Feel free to mangle it, I'd appreciate a copy of any wider ranging
working versions though.
Kind regards and many thanks to all.
Nigel
