Thank you John, it was a typo in my email, in my server I wrote the score name the same as the meta name, the rule in my server is:
header __ENV_FROM_DHL Received =~ /envelope-from [^ @]+@dhl[^ .]+\.com/i header __FROM_DHL From =~ /\bdhl[^ .]+\.com/i header __ENV_FROM_UPS Received =~ /envelope-from [^ @]+@ups\.com/i header __FROM_UPS From =~ /\bups\.com/i meta DHL_UPS_MISMATCH (__ENV_FROM_DHL && __FROM_UPS) || (__ENV_FROM_UPS && __FROM_DHL) describe DHL_UPS_MISMATCH Correo con virus DHL-USA o UPS score DHL_UPS_MISMATCH 11 Regards, Sergio On Sun, Nov 20, 2011 at 11:33 AM, John Hardin <jhar...@impsec.org> wrote: > On Sat, 19 Nov 2011, Sergio wrote: > > meta DHL_UPS_MISMATCH (__ENV_FROM_DHL && __FROM_UPS) || >> (__ENV_FROM_UPS && __FROM_DHL) >> score VIRUS_DHLTOTAL 11 >> > > Fix the name on the score. > > > -- > John Hardin KA7OHZ > http://www.impsec.org/~**jhardin/<http://www.impsec.org/%7Ejhardin/> > jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org > key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 > ------------------------------**------------------------------** > ----------- > North Korea: the only country in the world where people would risk > execution to flee to communist China. -- Ride Fast > ------------------------------**------------------------------** > ----------- > 347 days since the first successful private orbital launch (SpaceX) >
