[Assp-user] Confused as to why mail got through as ok.

Analysis of the email shows it scoring very poorly. However the assp headers in the stored email don¹t show anything except a white-re match. Any ideas where I might look? Below are the headers and the meat of the analysis report X-Assp-Score: -5 (whiteRe: 'welcome (-5)') X-Assp-Delay: not

[Assp-user] FW: Confused as to why mail got through as ok.

Accidentally hit send before putting the analysis report: Subject: important alert Connecting IP: 192.168.1.15 Connecting HELO: TTUQLQDL Feature Matching: NoProcessing: 'spammeis...@frederickcountymd.gov' whiteRe: 'highest match: 'welcome (-5)' with valence: -5 - PB value = -5' matching

Re: [Assp-user] Regex help please.

Thanks for the suggestion. That is only going to specify that the item has a carriage return after it in the email, which most will not. From: Eric Shubert e...@shubes.net Organization: Eric Shubert Associates Reply-To: For Users of ASSP assp-user@lists.sourceforge.net Date: Tue, 01 Jun

[Assp-user] Testre doesn't match in the web analyzer

Testre is set to file:files/testre.txt File contents are: \btest\b \bdiscount Discount Discount Or discount Don¹t register in the web interface or logs. Most recent stable. Paul K. Dickson Systems Administrator Interagency Information Technologies Frederick County Government Frederick,

Re: [Assp-user] Testre doesn't match in the web analyzer

I had to put in a PB value for bombtest to get a log entry. Not sure why. From: Paul K. Dickson pdick...@frederickcountymd.gov Reply-To: For Users of ASSP assp-user@lists.sourceforge.net Date: Wed, 02 Jun 2010 10:42:33 -0400 To: For Users of ASSP assp-user@lists.sourceforge.net Subject:

Re: [Assp-user] FW: Confused as to why mail got through as ok.

For Users of ASSP assp-user@lists.sourceforge.net schreibt: whiteRe: 'highest match: 'welcome (-5)' with valence: -5 - PB value = -5' matching whiteRe(file:files/whitere.txt): '\bwelcome\b' Is this a whitere with weight below 1? If not, it will whitelist.

Re: [Assp-user] FW: Confused as to why mail got through as ok.

Yes: \bwelcome\b=0.1 Paul K. Dickson Systems Administrator Interagency Information Technologies Frederick County Government Frederick, MD 21701 pdick...@frederickcountymd.gov 301-600-2399/x12399 From: Fritz Borgstedt f...@iworld.de Reply-To: For Users of ASSP

Re: [Assp-user] Regex help please.

Figured it out using one of Thomas's prior emails for reference. For anyone who is interested: (http\:\/\/|@)[^/\s]*(?=.*?(discount sale coupon ))\.(com|net|org)(\s(\r|$)|\/|\:\d{1,5}\/|\.\s\s?\w|\.?\r) Starting with (?=.*?( and ending with )) is the bit that did it. From: Paul K.

Re: [Assp-user] Regex help please.

NM. Still isn't working :( From: Paul K. Dickson pdick...@frederickcountymd.gov Reply-To: For Users of ASSP assp-user@lists.sourceforge.net Date: Wed, 02 Jun 2010 11:28:07 -0400 To: For Users of ASSP assp-user@lists.sourceforge.net Subject: Re: [Assp-user] Regex help please. Figured

Re: [Assp-user] Regex help please.

Just so that I understant, you're not looking for an email that has: Sales test Anotherword Stotoblock Ihatespam but instead anthing that is either: Sale test Sales anotherword etc... and you only want the regex to be multiline so that it's easier to edit in the admin interface? (I don't think

Re: [Assp-user] Regex help please.

For Users of ASSP assp-user@lists.sourceforge.net schreibt: Sales\s(\btest\b|anotherword|stufftoblock|ihatespam) Sales\s\btest\b Sales\sanotherword Sales\sstufftoblock Sales\sihatespam --

Re: [Assp-user] Regex help please.

Correct. There must be a way to do it. Paul K. Dickson Systems Administrator Interagency Information Technologies Frederick County Government Frederick, MD 21701 pdick...@frederickcountymd.gov 301-600-2399/x12399 From: K Post nntp.p...@gmail.com Reply-To: For Users of ASSP

Re: [Assp-user] Regex help please.

I don't think there is a way, especially if Fritz, the hands down expert, isn't giving you anything other than repeating sales at the beginning of each line. It's not like the parser can read your mind an know if you meant to continue from the last line or if you're starting a new expression...

Re: [Assp-user] Poll: What MTA do you use with ASSP?

Here is my running tally postfix 9 exchange5 notes 3 hmail 2 sendmail2 mailsite2 qmail 2 ipswitch2 fabio 1 eims1 scalix

Re: [Assp-user] Poll: What MTA do you use with ASSP?

On 2010-06-02 4:58 PM, bytehd wrote: do macs have an MTA? just curious. Postfix. most macs dont have the stones to be servers... Mostly not true. -- Best regards, Charles -- ThinkGeek and WIRED's GeekDad team up

Re: [Assp-user] Poll: What MTA do you use with ASSP?

http://www.top500.org/stats/list/35/os mac = missing i know, i just needed some flame today. -- View this message in context: http://old.nabble.com/Poll%3A-What-MTA-do-you-use-with-ASSP--tp28674012p28760247.html Sent from the assp-user mailing list archive at Nabble.com.

Re: [Assp-user] Poll: What MTA do you use with ASSP?

On 2010-06-02 5:11 PM, bytehd wrote: http://www.top500.org/stats/list/35/os mac = missing Totally irrelevant to 'having the stones'... i know, i just needed some flame today. One can never get enough flamage... ;) -- Best regards, Charles

Re: [Assp-user] Poll: What MTA do you use with ASSP?

as usual you are wrong again -- View this message in context: http://old.nabble.com/Poll%3A-What-MTA-do-you-use-with-ASSP--tp28674012p28760408.html Sent from the assp-user mailing list archive at Nabble.com. --