FOUND_YOU rule

[Tony Eames <ad...@nfreads.com>]

What exactly is the "FOUND_YOU" rule? The wiki entry on it is empty and I can't find anything about it on the internet.

Re: FOUND_YOU rule

[Bowie Bailey <Bo...@BUC.com>]

On 4/26/2017 9:33 AM, Tony Eames wrote:
> What exactly is the "FOUND_YOU" rule? The wiki entry on it is empty and I can't find anything about it on the internet.

The best place to get details on rules is to look in the rule files 
(/var/lib/spamassassin/3.004001/ on my system).  There generally aren't 
any extra comments, but the regexes for most of the rules aren't too 
complex.

This particular rule is a bit complicated.

meta    FOUND_YOU     __FOUND_YOU && !__DKIM_EXISTS && !__SUBJ_RE && 
!__HAS_X_REF && !__RP_MATCHES_RCVD && !__COMMENT_EXISTS && 
!__HAS_ERRORS_TO && !__HAS_IN_REPLY_TO

The main sub-rule is:

body    __FOUND_YOU    /\b(?:I|we)\sfound\syour?\b/i

So it is looking for things like "I found you" or "we found your". The 
meta is combining this match with other rules to reduce false 
positives.  The __FOUND_YOU sub-rule is also used in several other meta 
rules.

-- 
Bowie

Re: FOUND_YOU rule

[RW <rw...@googlemail.com>]

On Wed, 26 Apr 2017 09:33:22 -0400 (EDT)
Tony Eames wrote:

> What exactly is the "FOUND_YOU" rule? The wiki entry on it is empty
> and I can't find anything about it on the internet.

It's basically "I/we found you/your", with a bunch of exclusions so it
can't hit the majority of legitimate mail.