Re: Rule for: Subject contains email address from To: header?

Benoit Panizzon <[email protected]> Tue, 12 May 2026 16:36:16 +0200
Newsgroups gmane.mail.spam.spamassassin.general
Organization ImproWare AG
Message-ID <[email protected]>
Some more debug digging - still user 'defang'

May 12 16:31:52.953 [7785] dbg: config: read file /usr/share/spamassassin/7=
2_active.cf
May 12 16:31:53.348 [7785] dbg: config: parsing file /usr/share/spamassassi=
n/72_active.cf

May 12 16:31:55.452 [7785] dbg: rules: ran meta rule __TO_IN_SUBJ =3D=3D=3D=
=3D=3D=3D> got hit (1)
May 12 16:31:55.457 [7785] dbg: rules: ran meta rule TO_IN_SUBJ =3D=3D=3D=
=3D=3D=3D> got hit (1)
May 12 16:31:59.597 [7785] dbg: learn: auto-learn: adding 1.000 header and =
0.000 body points, 3/0 ratio (TO_IN_SUBJ)

May 12 16:31:59.598 [7785] dbg: check: tests=3DBAYES_00,DKIM_SIGNED,DKIM_VA=
LID,DKIM_VALID_AU,DMARC_PASS,HEADER_FROM_DIFFERENT_DOMAINS,HTML_FONT_LOW_CO=
NTRAST,HTML_MESSAGE,SNCH_OVH,SPF_FAIL,SPF_HELO_NONE,TO_IN_SUBJ
May 12 16:31:59.599 [7785] dbg: check: subtests=3D__ANY_TEXT_ATTACH,__ANY_T=
EXT_ATTACH_DOC,__BODY_TEXT_LINE(3),__COMMENT_EXISTS,__CT,__CTYPE_HAS_BOUNDA=
RY,__CTYPE_MULTIPART_ALT,__CTYPE_MULTIPART_ANY,__DKIM_DEPENDABLE,__DKIM_EXI=
STS,__DOS_DIRECT_TO_MX,__DOS_DIRECT_TO_MX_UNTRUSTED,__DOS_HAS_ANY_URI,__DOS=
_RCVD_TUE,__DOS_SINGLE_EXT_RELAY,__E_LIKE_LETTER(253),__FROM_FULL_NAME,__GB=
_TO_ADDR,__HAS_ANY_EMAIL,__HAS_ANY_URI,__HAS_DATE,__HAS_DKIM_SIGHD,__HAS_FR=
OM,__HAS_HREF(2),__HAS_HREF_ONECASE(2),__HAS_MESSAGE_ID,__HAS_MSGID,__HAS_R=
CVD,__HAS_REPLY_TO,__HAS_SUBJECT,__HAS_TO,__HAS_URI,__HELO_DNS,__JM_REACTOR=
_DATE,__LAST_EXTERNAL_RELAY_NO_AUTH,__LAST_UNTRUSTED_RELAY_NO_AUTH,__LOCAL_=
PP_NONPPURL,__LOWER_E(230),__L_BODY_8BITS,__MIME_HTML,__MIME_QP,__MIME_QPC,=
__MIME_VERSION,__MISSING_REF,__MISSING_REPLY,__MSGID_OK_HOST,__NONEMPTY_BOD=
Y,__NOT_SPOOFED,__PDS_QP_1024,__PDS_QP_128,__PDS_QP_512,__PDS_QP_64,__RATWA=
RE_0_TZ_DATE,__SANE_MSGID,__SINGLE_WORD_LINE(2),__STY_INVIS,__STY_INVIS_1,_=
_STY_INVIS_1_MINFP,__STY_INVIS_DIRECT,__SUBJECT_ENCODED_QP,__SUBJ_HAS_TO_2,=
__SUBJ_NOT_SHORT,__TAG_EXISTS_BODY,__TAG_EXISTS_HEAD,__TAG_EXISTS_HTML,__TA=
G_EXISTS_META,__TAG_EXISTS_STYLE,__TOCC_EXISTS,__TO_IN_SUBJ,__TVD_MIME_ATT_=
TP,__T_PDS_MSG_512,__URI_MAILTO(3),__USING_VERP1 (Total Subtest Hits: 561 /=
 Deduplicated Total Hits: 73)

Still not understanding why this only causes a hit when run via command
line.

Mit freundlichen Gr=C3=BCssen

-Beno=C3=AEt Panizzon-
--=20
I m p r o W a r e   A G    -    Leiter Commerce Kunden
______________________________________________________

Zurlindenstrasse 29             Tel  +41 61 826 93 00
CH-4133 Pratteln                Fax  +41 61 826 93 01
Schweiz                         Web  http://www.imp.ch
______________________________________________________