On Wed, 2 Mar 2011, tr_ust wrote:

This is what my rules look like now:

uri LOCAL_URI_EXAMPLE /zynetsw.com\/forms\/use\/index\/form1.html/
score LOCAL_URI_EXAMPLE 200
uri LOCAL_URI_EXAMPLE /zynetsw.com\/forms\/use\/nana\/form1.html/
score LOCAL_URI_EXAMPLE 100
uri LOCAL_URI_EXAMPLE /zynetsw.com\/forms\/use\/ontokoros\/form1.html/
score LOCAL_URI_EXAMPLE 100
uri LOCAL_URI_EXAMPLE /zynetsw.com\/forms\/use\/tbt\/form1.html/
score LOCAL_URI_EXAMPLE 200
uri LOCAL_URI_EXAMPLE /zynetsw.com\/forms\/use\/webadmin\/form1.html/
score LOCAL_URI_EXAMPLE 200

I took out the last "/" as you suggested...thanks.

You may also want to escape the periods so they are literal matches rather then "match any single character":

  uri LOCAL_URI_EXAMPLE /zynetsw\.com\/forms\/use\/webadmin\/form1\.html/

Also, you only have one rule there. Every time you put in another "uri LOCAL_URI_EXAMPLE" you overwrite the previous definition. Change the name of each rule, for example by appending _00 _01 _02, etc.

There's nothing in the header of the emails that indicates it went through spamassassin - is there a way to use a spamassassin command to test out the rules?

Yes:

  spamassassin -L -t < your_test_message

More info cam be obtained by doing something like:

  spamassassin -L -t --debug area=rules < your_test_message

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  The fetters imposed on liberty at home have ever been forged out
  of the weapons provided for defense against real, pretended, or
  imaginary dangers from abroad.               -- James Madison, 1799
-----------------------------------------------------------------------
 11 days until Albert Einstein's 132nd Birthday

Reply via email to