spam report help

[Tom Kinghorn <th...@gmail.com>]

Good morning list.

If I have a body rule checking for various banned words in a message 
body, is there a way to indicate which word matched in the spam-report?

eg: when an IP is matched against an RBL, the ip is shown in the 
spam-report.

I would like to do the same for a text rule.

Is this possible?

thanks
Tom

Re: spam report help

[Dave Warren <li...@hireahit.com>]

On 3/30/2012 6:59 AM, Bowie Bailey wrote:
>
> I believe he is referring to a rule with multiple alternatives.
>
> body SPAMWORD /\b(word1|word2|word3|word4)\b/
>
> You know you have a match, but you don't know WHICH word matched.  I
> think debug mode is the only way to get this level of detail.

That, or (re-)write the rules to give you the detail of output you need.

-- 
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren

Re: spam report help

[Bowie Bailey <Bo...@BUC.com>]

On 3/30/2012 6:01 AM, Benny Pedersen wrote:
> Den 2012-03-30 11:52, Tom Kinghorn skrev:
>> On 30/03/2012 11:47, Benny Pedersen wrote:
>>> body SPAMWORD /^spamword$/
>>> describe SPAMWORD spamword found in body
>>> score SPAMWORD 0.1
>>>
>>> untested :)
>>>
>> Thats exactly what I am doing.
>> Its shows the description (from the 'describe' section) in the spam
>> report, not which word was matched.
> SPAMWORD is here the matched word name aswell

I believe he is referring to a rule with multiple alternatives.

body SPAMWORD /\b(word1|word2|word3|word4)\b/

You know you have a match, but you don't know WHICH word matched.  I
think debug mode is the only way to get this level of detail.

-- 
Bowie

Re: spam report help

[Benny Pedersen <me...@junc.org>]

Den 2012-03-30 11:52, Tom Kinghorn skrev:
> On 30/03/2012 11:47, Benny Pedersen wrote:
>>
>> body SPAMWORD /^spamword$/
>> describe SPAMWORD spamword found in body
>> score SPAMWORD 0.1
>>
>> untested :)
>>
> Thats exactly what I am doing.
> Its shows the description (from the 'describe' section) in the spam
> report, not which word was matched.

SPAMWORD is here the matched word name aswell

Re: spam report help

[Tom Kinghorn <th...@gmail.com>]

On 30/03/2012 11:47, Benny Pedersen wrote:
>
> body SPAMWORD /^spamword$/
> describe SPAMWORD spamword found in body
> score SPAMWORD 0.1
>
> untested :)
>
Thats exactly what I am doing.
Its shows the description (from the 'describe' section) in the spam 
report, not which word was matched.

Thanks

Tom

Re: spam report help

[Benny Pedersen <me...@junc.org>]

Den 2012-03-30 10:34, Tom Kinghorn skrev:
> Good morning list.
>
> If I have a body rule checking for various banned words in a message
> body, is there a way to indicate which word matched in the
> spam-report?
>
> eg: when an IP is matched against an RBL, the ip is shown in the 
> spam-report.

body SPAMWORD /^spamword$/
describe SPAMWORD spamword found in body
score SPAMWORD 0.1

untested :)