Score in symbol not work

40 views
Skip to first unread message

Emanuel Gonzalez

unread,
Aug 29, 2018, 11:36:48 AM8/29/18
to rspamd
Hello, here I am again jejeje

I create this rule:

        BODY_CONTENT_DECOD_BLK {
        type = "content";
        filter = "text";
        map = "${LOCAL_CONFDIR}/local.d/body_blocked_decoded.map.inc";
        regexp = true;
    }

In a file body_blocked_decoded.map.inc i add this:

/moneyforyou/

metrics.conf

        symbol "BODY_CONTENT_DECOD_BLK" {
                score = 30.0;
        }


LOG:

2018-08-29 12:32:54 #26252(normal) <490c92>; task; rspamd_task_write_log: id: <SC1P215MB0064E7FB96...@SC1P215MB0064.LAMP215.PROD.OUTLOOK.COM>, qid: <1fv2Sg-0006Jf-DV>, ip: 40.92.2.13, from: <emanuel_...@live.com.ar>, (default: F (no action): [66.09/nan] [BODY_CONTENT_DECOD_BLK(60.00){},ABUSE_SURBL(5.50){moneyforyou.su.multi.surbl.org;},HTML_SHORT_LINK_IMG_1(2.00){},IP_SCORE(-1.71){ipnet: 40.64.0.0/10(-4.73), asn: 8075(-3.75), country: US(-0.07);},SUBJECT_ENDS_SPACES(0.50){},R_SPF_ALLOW(-0.20){+ip4:40.92.0.0/14;},MIME_BASE64_TEXT(0.10){},MIME_GOOD(-0.10){multipart/alternative;text/plain;},ARC_NA(0.00){},ASN(0.00){asn:8075, ipnet:40.64.0.0/10, country:US;},DMARC_NA(0.00){live.com.ar;},FREEMAIL_ENVFROM(0.00){live.com.ar;},FREEMAIL_FROM(0.00){live.com.ar;},FROM_EQ_ENVFROM(0.00){},FROM_HAS_DN(0.00){},MX_GOOD(0.00){cached: nam.olc.protection.outlook.com;},RCPT_COUNT_ONE(0.00){1;},RCVD_COUNT_THREE(0.00){4;},RCVD_IN_DNSBL_JKM(0.00){13.2.92.40.hostkarma.junkemailfilter.com;},RCVD_IN_DNSWL_NONE(0.00){13.2.92.40.list.dnswl.org : 127.0.3.0;},RCVD_TLS_LAST(0.00){},R_DKIM_NA(0.00){},TO_DN_EQ_ADDR_ALL(0.00){},TO_MATCH_ENVRCPT_ALL(0.00){},URIBL_BLOCKED(0.00){moneyforyou.su.multi.uribl.com;}]), len: 25282, time: 3274.214ms real, 10.197ms virtual, dns req: 51, digest: <de7e5a0e2692b30df035b45968d404c6>, rcpts: <bid...@donweb.tk>, mime_rcpts: <bid...@donweb.tk>


############################################

Why do not you assign the correct score but duplicate it?

Regards.!!

Alexander Moisseev

unread,
Aug 29, 2018, 1:44:36 PM8/29/18
to rsp...@googlegroups.com
On 29.08.18 18:36, Emanuel Gonzalez wrote:
> ############################################
>
> Why do not you assign the correct score but duplicate it?
>
> Regards.!!

https://rspamd.com/doc/faq.html#what-are-one-shot-rules

Emanuel Gonzalez

unread,
Aug 30, 2018, 2:33:04 PM8/30/18
to Alexander Moisseev, rspamd
what a shame, my mistake was the quotes inside the "true" value jajaja

--
You received this message because you are subscribed to the Google Groups "rspamd" group.
To unsubscribe from this group and stop receiving emails from it, send an email to rspamd+un...@googlegroups.com.
Visit this group at https://groups.google.com/group/rspamd.
Reply all
Reply to author
Forward
0 new messages