[MBF] Re: Help with PCRE

2016-08-29 Thread John Tolmachoff
Thanks Andy. You come through again. I will be testing and will let you know how it goes. -Original Message- From: "Andy Schmidt" <andy_schm...@hm-software.com> Sent: Friday, August 26, 2016 5:10pm To: community@mailsbestfriend.com Subject: [MBF] Re: Help with

[MBF] Re: Help with PCRE

2016-08-26 Thread Andy Schmidt
" BADHEADERS " is NOT a match for " HEADERS ", etc. -Original Message- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of John Tolmachoff Sent: Friday, August 26, 2016 7:25 PM To: community@mailsbestfriend.com Subject: [MBF] Re: Help with P

[MBF] Re: Help with PCRE

2016-08-26 Thread John Tolmachoff
pm To: community@mailsbestfriend.com Subject: [MBF] Re: Help with PCRE What is a sample of the actual string you are searching? Are there any separation characters we need to allow for? -Original Message- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of John

[MBF] Re: Help with PCRE

2016-08-26 Thread Andy Schmidt
To: community@mailsbestfriend.com Subject: [MBF] Re: Help with PCRE That is not working either. It is wanting them to be consecutive -Original Message- From: "David Barker" <david.bar...@mailsbestfriend.com> Sent: Friday, August 26, 2016 11:32am To: community@mailsbestfriend.com S

[MBF] Re: Help with PCRE

2016-08-26 Thread John Tolmachoff
That is not working either. It is wanting them to be consecutive -Original Message- From: "David Barker" <david.bar...@mailsbestfriend.com> Sent: Friday, August 26, 2016 11:32am To: community@mailsbestfriend.com Subject: [MBF] Re: Help with PCRE Oooo, didn't think of d

[MBF] Re: Help with PCRE

2016-08-26 Thread David Barker
Subject: [MBF] Re: Help with PCRE (?:LASHBACK|PSKY|NEWERDOMAIN|HEADERS|ROUTING|MAILSPIKE-L|HELO|SORBS|SPAMCOP|DNS){4,} Move the quantifier OUTSIDE your token list. -Original Message- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of John Tolmachoff

[MBF] Re: Help with PCRE

2016-08-26 Thread David Barker
Not sure it can be done regex, hoping someone has the answer, but if not this is how I would do it in Declude. Break the regex into separate lines as in the example below and create a new filter with the declude directive. -- MINWEIGHTTOFAIL 4 TESTSFAILED 1