Need 2n eyes - Trying to create spam rules in salocal.cf/.in

[VTC]

My rule looks like this


header HEADER_EFTPS_EMAIL Subject =~ /^Federal Tax Payment ID/i
body BODY_EFTPS /^Federal Tax Payment ID/i
meta EFTPS_EMAIL (HEADER_EFTPS_EMAIL && BODY_EFTPS)
score EFTPS_EMAIL 20

yet when i run a test with "LAST NOTICE: Your Federal Tax Payment ID: 0103634 is failed." in both subject and body. it comes through unscathed by the amavis

[jrefl5]

Originally Posted by VTC

My rule looks like this


header HEADER_EFTPS_EMAIL Subject =~ /^Federal Tax Payment ID/i
body BODY_EFTPS /^Federal Tax Payment ID/i
meta EFTPS_EMAIL (HEADER_EFTPS_EMAIL && BODY_EFTPS)
score EFTPS_EMAIL 20

yet when i run a test with "LAST NOTICE: Your Federal Tax Payment ID: 0103634 is failed." in both subject and body. it comes through unscathed by the amavis

How about Droping the "^" as the string you are testing is not the Start of the Field/line.
I'm using

header   LOCAL_TAXFED           Subject =~ /Your Federal Tax Payment ID/i
describe LOCAL_TAXFED           Check for a FED TAX Phish
score     LOCAL_TAXFED           4.5

[VTC]

I do know "describe LOCAL_TAXFED Check for a FED TAX Phish"

Whats the variable "describe"?

[jrefl5]

It describes the reason for the rule, and its not required, but reminds what the purpose of the rule was.