I'm still getting emails containing links to sites in russia. I have this
regex in my BombRe file:
http\:\/\/[A-Za-z\.]+?\.(?:ru|ly|nl|ec|cc|vc|ua|in|am)[\s\/\n\r\\]
Which according to my (web based) regex testers SHOULD catch the email message
below. So, I put it into the mail tester in ASSP
Yeah, I've given up. I'm just going back to (value|value|value).
From: K Post nntp.p...@gmail.com
Reply-To: For Users of ASSP assp-user@lists.sourceforge.net
Date: Wed, 2 Jun 2010 16:25:35 -0400
To: For Users of ASSP assp-user@lists.sourceforge.net
Subject: Re: [Assp-user] Regex help
2010 11:56:50 -0700
To: assp-user@lists.sourceforge.net
Subject: Re: [Assp-user] Regex help please.
Paul K. Dickson wrote:
For ease of administration/review I want to have a regex that will allow 1
value per line. A random example:
Sales\s(\btest\b
Anotherword
Stufftoblock
Ihatespam
. Dickson pdick...@frederickcountymd.gov
Reply-To: For Users of ASSP assp-user@lists.sourceforge.net
Date: Wed, 02 Jun 2010 09:08:39 -0400
To: For Users of ASSP assp-user@lists.sourceforge.net
Subject: Re: [Assp-user] Regex help please.
Thanks for the suggestion. That is only going to specify
NM. Still isn't working :(
From: Paul K. Dickson pdick...@frederickcountymd.gov
Reply-To: For Users of ASSP assp-user@lists.sourceforge.net
Date: Wed, 02 Jun 2010 11:28:07 -0400
To: For Users of ASSP assp-user@lists.sourceforge.net
Subject: Re: [Assp-user] Regex help please.
Figured
Just so that I understant, you're not looking for an email that has:
Sales test
Anotherword
Stotoblock
Ihatespam
but instead anthing that is either:
Sale test
Sales anotherword
etc...
and you only want the regex to be multiline so that it's easier to edit in
the admin interface? (I don't think
For Users of ASSP assp-user@lists.sourceforge.net schreibt:
Sales\s(\btest\b|anotherword|stufftoblock|ihatespam)
Sales\s\btest\b
Sales\sanotherword
Sales\sstufftoblock
Sales\sihatespam
--
@lists.sourceforge.net
Date: Wed, 2 Jun 2010 13:22:02 -0400
To: For Users of ASSP assp-user@lists.sourceforge.net
Subject: Re: [Assp-user] Regex help please.
Just so that I understant, you're not looking for an email that has:
Sales test
Anotherword
Stotoblock
Ihatespam
but instead anthing
2010 13:22:02 -0400
To: For Users of ASSP assp-user@lists.sourceforge.net
Subject: Re: [Assp-user] Regex help please.
Just so that I understant, you're not looking for an email that has:
Sales test
Anotherword
Stotoblock
Ihatespam
but instead anthing that is either:
Sale
For ease of administration/review I want to have a regex that will allow 1
value per line. A random example:
Sales\s(\btest\b
Anotherword
Stufftoblock
Ihatespam)
Instead of:
Sales\s(\btest\b|anotherword|stufftoblock|ihatespam)
Does anyone know how to do this off the top of their head?
Paul K. Dickson wrote:
For ease of administration/review I want to have a regex that will allow 1
value per line. A random example:
Sales\s(\btest\b
Anotherword
Stufftoblock
Ihatespam)
Instead of:
Sales\s(\btest\b|anotherword|stufftoblock|ihatespam)
Does anyone know how to do
Since ASSP_1.7.1.0 (rc) 0.5.07 you can use just
^$ in bombsubjectre.
--
Download Intel#174; Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune
Does anyone have a regex to match a blank subject or a subject with just
³Subject: re²? Trying to avoid catching subjects with any additional
characters.
I¹ve tried:
^Subject: $
Subject: $
Subject: \n
Subject: \Z
Subject: \z
And all of the above except with the ³re² included.
Paul K.
Here's a site with a RegEx tester.
http://regexlib.com/RETester.aspx
I had a different one, but I can't find it anymore.
On 3/5/2010 9:07 AM, Paul K. Dickson wrote:
Does anyone have a regex to match a blank subject or a subject with just
³Subject: re²? Trying to avoid catching subjects with
On Mar 5, 2010, at 7:07 AM, Paul K. Dickson wrote:
Does anyone have a regex to match a blank subject or a subject with just
“Subject: re”? Trying to avoid catching subjects with any additional
characters.
I’ve tried:
^Subject: $
Subject: $
Subject: \n
Subject: \Z
Subject: \z
How do I write a regex that will match through multiple lines of data?
Thanks in advance!
Brett
--
Let Crystal Reports handle the reporting - Free Crystal Reports 2008 30-Day
trial. Simplify your report design,
For Users of ASSP assp-user@lists.sourceforge.net schreibt:
How do I write a regex that will match through multiple lines of data?
ASSP uses si as default switches. This means the search will be be
across newlines.
--
Fritz Borgstedt
How do I write a regex that will match through multiple
lines of data?
ASSP uses si as default switches. This means the search will
be be across newlines.
Thanks for the help! I'll try it out.
Brett
For Users of ASSP assp-user@lists.sourceforge.net schreibt:
How do I write a regex that will match through multiple lines of data?
You can use (?s) as embedded pattern-match modifier.
Instead of
if ( /$pattern/si )
you may use
$pattern = (?si)foobar;
if ( /$pattern/ )
Fritz Borgstedt wrote:
How do I write a regex that will match through multiple
lines of data?
You can use (?s) as embedded pattern-match modifier.
Instead of
if ( /$pattern/si )
you may use
$pattern = (?si)foobar;
if ( /$pattern/ )
Maybe I wasn't clear or don't
For Users of ASSP assp-user@lists.sourceforge.net schreibt:
the.branch.manager.of.the.Eco.Bank.Of.Ghana.Limited
try
the.branch.manager.?.?.?of.the.Eco.Bank.Of.Ghana.Limited
or
(?si)the.branch.manager.?.?.?of.the.Eco.Bank.Of.Ghana.Limited
On 9/29/2008, Melvin ([EMAIL PROTECTED]) wrote:
since I'm in the process of replacing my mail server and
consolidating from 2 boxes to 1, I didn't really see any point in trying
to upgrade the existing installation.
Heh - weird how different people are... I consider that the best time to
Are you running an old version of assp?
denySenderRe was replaced with DoBombSenderRe in januari 2007.
You probably need:
#\.#\.#-#
2008/9/28 Melvin [EMAIL PROTECTED]:
I'm seeing an extremely large spike in spam which appears to be coming
from random places. They've gotten smart enough to
Wim Borghs wrote:
Are you running an old version of assp?
denySenderRe was replaced with DoBombSenderRe in januari 2007.
You probably need:
#\.#\.#-#
Yes, I'm running 1.2.6. I know it's old, but it works well at the
moment and since I'm in the process of replacing my mail server and
I'm seeing an extremely large spike in spam which appears to be coming
from random places. They've gotten smart enough to retry in 40+ minutes
so delaying lets them through. They're all viral or at least appear to
be. There is no subject header and no body when it gets to the mail
client.
:[EMAIL PROTECTED] On Behalf Of Micheal
Espinola Jr
Sent: Sunday, October 14, 2007 3:10 PM
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
Subject: Re: [Assp-user] Regex help
Fritz Borgstedt wrote:
pen...i.s
I posted a response in the wiki forums that offers a solution:
*
http
Hill, Brett wrote:
Out of curiosity, are regex's case sensitive?
They can be, but they are not case sensitive in ASSP.
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?
Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
assp-user@lists.sourceforge.net schreibt:
Out of curiosity, are regex's case sensitive?
No, you can see what we use at:
Internal Name: RegexModifier
will change modifiers to /msi, all other will use /i only
/i makes
They can be, but they are not case sensitive in ASSP.
Yes, they are not case sensitive by default, however you can change
the default by putting the modifier into the regex. It can be done at
the beginning or in the midth for the part of the regex right of it.
The regex (?i)te(?-i)st should
Fritz Borgstedt wrote:
Yes, they are not case sensitive by default, however you can change
the default by putting the modifier into the regex. It can be done at
the beginning or in the midth for the part of the regex right of it.
The regex (?i)te(?-i)st should match test and TEst, but not
BombRaw: 'Penalties'). Chance anyone knows which one this is?
)
-
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration
Fritz Borgstedt wrote:
pen...i.s
I posted a response in the wiki forums that offers a solution:
*
http://www.asspsmtp.org/forums/regular-expressions/penis-bomb-regex-false-postive/msg918/#msg918
In a nutshell, just prefix this to the existing penis regexp:
* (?!\b(penalties)\b)
I'm using the original bombre.txt (pretty much the stock version) file
before the smaller one was put up on Fritz's website. For the life of
me, I can't find 'Penalties' in this file. An email was getting caught
up and the log said (BombRaw: 'Penalties'). Chance anyone knows which
one this is?
Hill, Brett wrote:
I'm using the original bombre.txt (pretty much the stock version) file
before the smaller one was put up on Fritz's website. For the life of
me, I can't find 'Penalties' in this file. An email was getting caught
up and the log said (BombRaw: 'Penalties'). Chance anyone
On 22 Jun 2007 at 10:51, Marrco wrote:
so assp understand that spamtraps and spamcollect are local (not to be
bounced as not existant users), but fails to understand regex in spamtraps.
But it's not an re field, it's an address
field.
paul
On 22 Jun 2007 at 10:51, Marrco wrote:
so assp understand that spamtraps and spamcollect are local (not to be
bounced as not existant users), but fails to understand regex in
spamtraps.
But it's not an re field, it's an address
field.
paul
That makes sense. I was just testing what Kevin
On 22 Jun 2007 at 12:44, Marrco wrote:
That makes sense. I was just testing what Kevin said, and it didn't work
that way.
Sure - in fact I didn't read back to the
beginning of the thread to understand it all.
I agree with Kevin that _not_ letting these in
may be a better solution. I get
Ernesto Reyes wrote:
I need help with a regex expression to find addresses that begin with
aaron followed by any character followed by @domain.com. I want to
enter it in the Spam Collect Addresses*, since I am getting hundreds of
spam e-mails addressed to below addresses.
I entered this:
Perfect, thanks Kevin.
I am not sure of what you mean regarding use local address validation
I am changing Spam Collect Addresses*
Mail to any of these users at are always spam and will contribute to the
spam-collection unless from someone on the whitelist;
@domain.com makes the whole domain a
Ernesto Reyes wrote:
Perfect, thanks Kevin.
I am not sure of what you mean regarding use local address validation
I mean using ASSP to see if the address is valid or invalid.
Using either using the 'LocalAddresses_Flat' or LDAP.
I am changing Spam Collect Addresses*
Mail to any of these
This isn't purely an ASSP question...but hopefully someone can help. I
grabbed the Bomb regex samples from the ASSP web site, to improve my
filtering. One group of regex's trap for bank fraud spam, as follows:
(bank|credit|ebay|pal|security|union|YOUR_ORG) (antivirus|support|team)#
phishing
2007/2/12, Michelle Dupuis [EMAIL PROTECTED]:
[...]These regex's appear to have incorrectly trapped a user with name
bank.lavika.se - obviously the workd bank. From what I've learned of
RegEx, none of the above SHOULD trap this:
X-Assp-Spam-Reason: BombRe: 'bank.lavika.se (skar'
Can someone
42 matches
Mail list logo
