SpamAssassin Question

[anthonyh]

We've signed up with KnowBe4 and are currently running phishing campaigns against a small group of test users (basically the IT department). Since folks have been marking the messages as spam (which is good), SpamAssassin has learned this and is now starting to automatically catch the phishing campaign emails and direct them to the user's Junk folder.

I threw together a basic rule to help reduce the message score. Here is the rule:

header AH_KNOWBE4   Received=~ /phishtest\.knowbe4\.com/
score AH_KNOWBE4    score -10.0
describe AH_KNOWBE4 Prevents KnowBe4 campaign emails from falling into users Junk folders

The rule is being triggered. However, instead of applying the score of -10, a score of 1 is applied. I'm not sure why.

For what it's worth we're running Zimbra 8.6.0

What am I doing wrong?

[anthonyh]

Holy crap! Am I an idiot or what?! The issue is my score line. It's wrong. It should be:

score  AH_KNOWBE4  -10.0

Not sure why the hell it took me so long to catch my mistake!

[anthonyh]

And I can officially confirm that my rule now works exactly how I expect it to.

Who would've though you had to type things correctly...

[scottalanmiller]

Always nice when you figure it out before anyone else does.

[anthonyh]

@scottalanmiller Ha. Well, it took me posting the question to the official SpamAssassin listserve before seeing my mistake. I caught it as soon as my message posted. A quick reply-of-shame, then an update of this thread.

[dbeato]

@scottalanmiller an now one can say that something was wrong

[scottalanmiller]

@dbeato said in SpamAssassin Question:

@scottalanmiller an now one can say that something was wrong

Exactly

[dbeato]

@anthonyh said in SpamAssassin Question:

quick reply-of-shame, then an update of this thread.

Nice! Is like reading your code in a nice screen just for what you need