OT: SA rule to catch multiple subject lines

[Kevin Miller]

Just replace the && with || and you'll be golden:
 
I.e.
    meta   junksubject    (__junksubject1 && __junksubject2) 
becomes
    meta   junksubject    (__junksubject1 || __junksubject2)

HTH...
 
...Kevin
--
Kevin Miller                Registered Linux User No: 307357
CBJ MIS Dept.               Network Systems Admin., Mail Admin.
155 South Seward Street     ph: (907) 586-0242
Juneau, Alaska 99801        fax: (907 586-4500 
 

________________________________

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steven Andrews
Sent: Tuesday, June 29, 2010 1:54 PM
To: 'MailScanner discussion'
Subject: RE: OT: SA rule to catch multiple subject lines



Hmmmm....actually, wont the && test for both to be true?  I think I need some kind of OR statement, or would a + do?

 

From: mailscanner-bounces at lists.mailscanner.info [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Steve Campbell
Sent: Tuesday, June 29, 2010 9:59 AM
To: MailScanner discussion
Subject: Re: OT: SA rule to catch multiple subject lines

 



On 6/29/2010 9:32 AM, Steven Andrews wrote: 

I'm probably doing this the hard way.  I have a client that likes to block by subject lines.  So far, I've been writing a new rule for each subject line they want to block or putting a "|" in the match for multiple subjects.  I found out that there's a limit to how many times you can use that before the rule doesn't fire anymore...probably on the length of the line.

 

I'd like to find a better way to write the rule, something along the lines:

 

Header                 junksubject        Subject =~ /junk subject 1/i

Header                 junksubject        Subject =~ /junk subject 2/i

Score                     junksubject        20.0

Describe              junksubject        blocked subject lines

 

Although writing the rule this way doesn't seem to work...it catches nothing.

 

Should I be making this more like a meta rule or is there a smarter way to do it?

 

Thanks for any direction you can provide.

 

Steve


Try something like this:

Header                __ junksubject1        Subject =~ /junk subject 1/i

Header                __ junksubject2        Subject =~ /junk subject 2/i



meta                     junksubject    (__junksubject1 && __junksubject2)
Score                     junksubject        20.0

Describe              junksubject        blocked subject lines

Steve Campbell