Not sure it can be done regex, hoping someone has the answer, but if not this is how I would do it in Declude. Break the regex into separate lines as in the example below and create a new filter with the declude directive.
---------------------------------- MINWEIGHTTOFAIL 4 TESTSFAILED 1 PCRE (?i:LASHBACK) TESTSFAILED 1 PCRE (?i:PSKY) TESTSFAILED 1 PCRE (?i:NEWERDOMAIN) TESTSFAILED 1 PCRE (?i:HEADERS) TESTSFAILED 1 PCRE (?i:ROUTING) TESTSFAILED 1 PCRE (?i:MAILSPIKE-L) ---------------------------------- David Barker Mail’s Best Friend Email : david.bar...@mailsbestfriend.com Web : www.mailsbestfriend.com Office : 866.919.2075 -----Original Message----- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of John Tolmachoff Sent: Friday, August 26, 2016 12:47 PM To: community@mailsbestfriend.com Subject: [MBF] Help with PCRE I am trying to create a Regex filter that will only trigger if 4 or more tests have failed. This is what I have so far but it is not working: (?i:LASHBACK|PSKY|NEWERDOMAIN|HEADERS|ROUTING|MAILSPIKE-L|HELO|SORBS|SPAMCOP|DNS{4,10}) It is triggering if only one has failed. I am trying to have it only trigger if 4 or more have failed. Any suggestions? John T eServices For You ############################################################# This message is sent to you because you are subscribed to the mailing list <community@mailsbestfriend.com>. To unsubscribe, E-mail to: <community-...@mailsbestfriend.com> To switch to the DIGEST mode, E-mail to <community-dig...@mailsbestfriend.com> To switch to the INDEX mode, E-mail to <community-in...@mailsbestfriend.com> Send administrative queries to <community-requ...@mailsbestfriend.com> ############################################################# This message is sent to you because you are subscribed to the mailing list <community@mailsbestfriend.com>. To unsubscribe, E-mail to: <community-...@mailsbestfriend.com> To switch to the DIGEST mode, E-mail to <community-dig...@mailsbestfriend.com> To switch to the INDEX mode, E-mail to <community-in...@mailsbestfriend.com> Send administrative queries to <community-requ...@mailsbestfriend.com>
