You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Hans-Werner Friedemann <h-...@vds-herzberg.de> on 2010/09/30 10:02:44 UTC

Own Rule

Has anyone an idea how I can implement an check
whether the eMail-recipient is the sender an the eMail-Adress appears in
the subject to?
 
Thanks for answering!

Re: AW: Own Rule

Posted by Ned Slider <ne...@unixmail.co.uk>.
On 04/10/10 07:00, Hans-Werner Friedemann wrote:
> Sorry, but is it possible to combine
> __TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule?
>
> Can somebody help me to build this rule?
>
> Thanks in advance
>

meta        TO_EQ_FROM_IN_SUBJECT        (__TO_EQ_FROM && __FROM_IN_SUBJECT)
describe        TO_EQ_FROM_IN_SUBJECT        Hits __TO_EQ_FROM and 
__FROM_IN_SUBJECT
score        TO_EQ_FROM_IN_SUBJECT        0.01

Adjust the score as you see fit.


Re: AW: Own Rule

Posted by John Hardin <jh...@impsec.org>.
On Mon, 4 Oct 2010, Hans-Werner Friedemann wrote:

> Sorry, but is it possible to combine
> __TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule?
>
> Can somebody help me to build this rule?

Please look at the reply to "Own Rule" I posted in the last two days.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   I'm seriously considering getting one of those bright-orange prison
   overalls and stencilling PASSENGER on the back. Along with the paper
   slippers, I ought to be able to walk right through security.
                                              -- Brian Kantor in a.s.r
-----------------------------------------------------------------------
  74 days until TRON Legacy

Re: AW: Own Rule

Posted by John Hardin <jh...@impsec.org>.
On Mon, 4 Oct 2010, Benny Pedersen wrote:

> On man 04 okt 2010 08:00:59 CEST, Hans-Werner Friedemann wrote
>
>> Sorry, but is it possible to combine
>> __TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule?
>> 
>> Can somebody help me to build this rule?
>
> meta foo (__TO_EQ_FROM && __FROM_IN_SUBJECT)

Or just wait for FROM_IN_TO_AND_SUBJ to be promoted from my sandbox...

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   I'm seriously considering getting one of those bright-orange prison
   overalls and stencilling PASSENGER on the back. Along with the paper
   slippers, I ought to be able to walk right through security.
                                              -- Brian Kantor in a.s.r
-----------------------------------------------------------------------
  74 days until TRON Legacy

Re: AW: Own Rule

Posted by Benny Pedersen <me...@junc.org>.
On man 04 okt 2010 08:00:59 CEST, Hans-Werner Friedemann wrote

> Sorry, but is it possible to combine
> __TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule?
>
> Can somebody help me to build this rule?

meta foo (__TO_EQ_FROM && __FROM_IN_SUBJECT)

-- 
xpoint http://www.unicom.com/pw/reply-to-harmful.html


AW: Own Rule

Posted by Hans-Werner Friedemann <h-...@vds-herzberg.de>.
Sorry, but is it possible to combine
__TO_EQ_FROM and __FROM_IN_SUBJECT in a meta rule?

Can somebody help me to build this rule?

Thanks in advance



 

-----Ursprüngliche Nachricht-----
Von: John Hardin [mailto:jhardin@impsec.org] 
Gesendet: Sonntag, 3. Oktober 2010 04:00
An: users@spamassassin.apache.org
Betreff: Re: Own Rule

On Thu, 30 Sep 2010, John Hardin wrote:

> On Thu, 30 Sep 2010, RW wrote:
>
>>  On Thu, 30 Sep 2010 06:39:15 -0700 (PDT)  John Hardin 
>> <jh...@impsec.org> wrote:
>> 
>> >  On Thu, 30 Sep 2010, Hans-Werner Friedemann wrote:
>> > 
>> > >  Has anyone an idea how I can implement an check whether the  
>> > > eMail-recipient is the sender an[d] the eMail-Adress appears in  
>> > > the subject to[o]?
>> > 
>> >  Use the __TO_EQ_FROM meta rule that's being distributed via  
>> > sa-update.
>> > 
>> >  What exactly do you want to check for?
>>
>>  As I read it he wants
>>
>>  __TO_EQ_FROM && __FROM_IN_SUBJECT
>>
>>  where __FROM_IN_SUBJECT would presumably be constructed in a similar  
>> way to __TO_EQ_FROM
>
> Gah. Quick answer after brief skim. Sorry.
>
> I'll put that together and add it to my sandbox, likely tomorrow.

...not too shabby:

http://ruleqa.spamassassin.org/20101002-r1003754-n/T_FROM_IN_TO_AND_SUBJ/detail

I'll promote it shortly if it keeps that level of performance.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   No representation without taxation!
-----------------------------------------------------------------------
  76 days until TRON Legacy




Re: Own Rule

Posted by John Hardin <jh...@impsec.org>.
On Thu, 30 Sep 2010, John Hardin wrote:

> On Thu, 30 Sep 2010, RW wrote:
>
>>  On Thu, 30 Sep 2010 06:39:15 -0700 (PDT)
>>  John Hardin <jh...@impsec.org> wrote:
>> 
>> >  On Thu, 30 Sep 2010, Hans-Werner Friedemann wrote:
>> > 
>> > >  Has anyone an idea how I can implement an check whether the 
>> > >  eMail-recipient is the sender an[d] the eMail-Adress appears in 
>> > >  the subject to[o]?
>> > 
>> >  Use the __TO_EQ_FROM meta rule that's being distributed via 
>> >  sa-update.
>> > 
>> >  What exactly do you want to check for?
>>
>>  As I read it he wants
>>
>>  __TO_EQ_FROM && __FROM_IN_SUBJECT
>>
>>  where __FROM_IN_SUBJECT would presumably be constructed in a similar
>>  way to __TO_EQ_FROM
>
> Gah. Quick answer after brief skim. Sorry.
>
> I'll put that together and add it to my sandbox, likely tomorrow.

...not too shabby:

http://ruleqa.spamassassin.org/20101002-r1003754-n/T_FROM_IN_TO_AND_SUBJ/detail

I'll promote it shortly if it keeps that level of performance.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   No representation without taxation!
-----------------------------------------------------------------------
  76 days until TRON Legacy

Re: Own Rule

Posted by John Hardin <jh...@impsec.org>.
On Thu, 30 Sep 2010, RW wrote:

> On Thu, 30 Sep 2010 06:39:15 -0700 (PDT)
> John Hardin <jh...@impsec.org> wrote:
>
>> On Thu, 30 Sep 2010, Hans-Werner Friedemann wrote:
>>
>>> Has anyone an idea how I can implement an check whether the
>>> eMail-recipient is the sender an[d] the eMail-Adress appears in the
>>> subject to[o]?
>>
>> Use the __TO_EQ_FROM meta rule that's being distributed via sa-update.
>>
>> What exactly do you want to check for?
>
> As I read it he wants
>
> __TO_EQ_FROM && __FROM_IN_SUBJECT
>
> where __FROM_IN_SUBJECT would presumably be constructed in a similar way 
> to __TO_EQ_FROM

Gah. Quick answer after brief skim. Sorry.

I'll put that together and add it to my sandbox, likely tomorrow.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Think Microsoft cares about your needs at all?
   "A company wanted to hold off on upgrading Microsoft Office for a
   year in order to do other projects. So Microsoft gave a 'free' copy
   of the new Office to the CEO -- a copy that of course generated
   errors for anyone else in the firm reading his documents. The CEO
   got tired of getting the 'please re-send in XX format' so he
   ordered other projects put on hold and the Office upgrade to be top
   priority."                                    -- Cringely, 4/8/2004
-----------------------------------------------------------------------
  78 days until TRON Legacy

Re: Own Rule

Posted by RW <rw...@googlemail.com>.
On Thu, 30 Sep 2010 06:39:15 -0700 (PDT)
John Hardin <jh...@impsec.org> wrote:

> On Thu, 30 Sep 2010, Hans-Werner Friedemann wrote:
> 
> > Has anyone an idea how I can implement an check whether the 
> > eMail-recipient is the sender an[d] the eMail-Adress appears in the
> > subject to[o]?
> 
> Use the __TO_EQ_FROM meta rule that's being distributed via sa-update.
> 
> What exactly do you want to check for? 

As I read it he wants 

__TO_EQ_FROM && __FROM_IN_SUBJECT


where __FROM_IN_SUBJECT would presumably be constructed in a similar way
to __TO_EQ_FROM

Re: Own Rule

Posted by John Hardin <jh...@impsec.org>.
On Thu, 30 Sep 2010, Hans-Werner Friedemann wrote:

> Has anyone an idea how I can implement an check whether the 
> eMail-recipient is the sender an the eMail-Adress appears in the subject 
> to?

Use the __TO_EQ_FROM meta rule that's being distributed via sa-update.

What exactly do you want to check for? By itself it's not useful, and I 
have several combination metas with it that are doing fairly well in 
masscheck (and which the score generator is unfortunately assigning low or 
zero scores to).

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   So Microsoft's invented the ASCII equivalent to ugly ink spots that
   appear on your letter when your pen is malfunctioning.
          -- Greg Andrews, about Microsoft's way to encode apostrophes
-----------------------------------------------------------------------
  78 days until TRON Legacy