[Rspamd-Users] Whitelist overrides - help please?

[Phil Stracchino]

On 2020-07-16 16:58, Phil Stracchino wrote:
> After reading that page for about the fifth time and getting no helpful
> information from it, and following links to many other documentation
> pages from many configuration files, I THINK that I MIGHT have figured
> out what I need.  Here's what I have:
> 
> /etc/rspam/local.d/trie.conf
> 
>     DELIVERY_FAIL_NOTICE {
>         patterns = [
>             "There was a problem delivering your message",
>         ]
>     }
> 
> /etc/rspam/local.d/content_group.conf
> 
> symbols = {
>     "DELIVERY_FAIL_NOTICE" {
>         weight = -5.0;
>         description = "This message looks like a delivery failure
> notification";
>         one_shot = true;
>     }
> }
> 
> 
> This at least generates no errors on loading.  Does this seem like it
> SHOULD work?  Now I get to wait for the next retry and see whether it
> actually *does* what I want...
> 
> Am I defining the symbol in the right place?  Is there a better place?

OK, that did not work, my rule apparently did not trigger.

Can anyone advise me what I am doing wrong here?





-- 
  Phil Stracchino
  Babylon Communications
  phils at caerllewys.net
  phil at co.ordinate.org
  Landline: +1.603.293.8485
  Mobile:   +1.603.998.6958