-
Notifications
You must be signed in to change notification settings - Fork 70
/
rule_multiple.t
executable file
·69 lines (49 loc) · 1.61 KB
/
rule_multiple.t
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
#!/usr/bin/perl
use lib '.'; use lib 't';
use SATest; sa_t_init("rule_multiple");
use Test; BEGIN { plan tests => 10 };
# ---------------------------------------------------------------------------
%patterns = (
q{ META_HEADER_RULE }, 'header',
q{ META_URI_RULE }, 'uri',
q{ META_BODY_RULE }, 'body',
q{ META_RAWBODY_RULE }, 'rawbody',
q{ META_FULL_RULE }, 'full',
q{ META_META_RULE }, 'meta',
q{ META_EVAL_RULE }, 'eval',
);
%anti_patterns = (
q{ META_HEADER_RULE_2 }, 'header_2',
q{ META_BODY_RULE_2 }, 'body_2',
q{ META_FULL_RULE_2 }, 'full_2',
);
tstlocalrules ('
header HEADER_RULE Subject =~ /--/
tflags HEADER_RULE multiple
meta META_HEADER_RULE HEADER_RULE > 1
header HEADER_RULE_2 Subject =~ /--/
meta META_HEADER_RULE_2 HEADER_RULE_2 > 1
uri URI_RULE /WWW.SUPERSITESCENTRAL.COM/i
tflags URI_RULE multiple
meta META_URI_RULE URI_RULE > 1
body BODY_RULE /WWW.SUPERSITESCENTRAL.COM/i
tflags BODY_RULE multiple
meta META_BODY_RULE BODY_RULE > 2
rawbody RAWBODY_RULE /WWW.SUPERSITESCENTRAL.COM/i
tflags RAWBODY_RULE multiple
meta META_RAWBODY_RULE RAWBODY_RULE > 2
body BODY_RULE_2 /WWW.SUPERSITESCENTRAL.COM/i
meta META_BODY_RULE_2 BODY_RULE_2 > 2
full FULL_RULE /WWW.SUPERSITESCENTRAL.COM/i
tflags FULL_RULE multiple
meta META_FULL_RULE FULL_RULE > 2
full FULL_RULE_2 /WWW.SUPERSITESCENTRAL.COM/i
meta META_FULL_RULE_2 FULL_RULE_2 > 2
meta META_RULE META_BODY_RULE + META_RAWBODY_RULE
meta META_META_RULE META_RULE > 1
loadplugin myTestPlugin ../../data/testplugin.pm
header EVAL_RULE eval:check_return_2()
meta META_EVAL_RULE EVAL_RULE > 1
');
sarun ("-L -t < data/spam/002", \&patterns_run_cb);
ok_all_patterns();