Results 1 to 1 of 1
  1. #1
    Untangler
    Join Date
    Jan 2019
    Posts
    35

    Default "Message = " rule not applied properly

    I copied the message text of a signature to a rule that uses "Message =" like this:

    Rules.png

    The Signatures tab seems to agree that the rule has been applied. The "number of rules affected" is also set to 1 as expected.

    Signatures.png

    However, the rule is not actually applied. I tried this the other way by blocking all and setting the "Message =" rule to Disable and everything is blocked, so the rule was still not applied.

    If I use "Message contains", it works as expected.
    If I use "Signature Identifier =", it also works as expected.

    This is not a critical issue as either of the above does the job, but it's a bit surprising that the Signatures tab says something and something else is applied to the actual engine.
    Last edited by LaurentR; 02-28-2019 at 05:46 PM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2