Thanks Andy. You come through again. I will be testing and will let you know
how it goes.
-Original Message-
From: "Andy Schmidt" <andy_schm...@hm-software.com>
Sent: Friday, August 26, 2016 5:10pm
To: community@mailsbestfriend.com
Subject: [MBF] Re: Help with
" BADHEADERS " is NOT a match for " HEADERS ", etc.
-Original Message-
From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On
Behalf Of John Tolmachoff
Sent: Friday, August 26, 2016 7:25 PM
To: community@mailsbestfriend.com
Subject: [MBF] Re: Help with P
pm
To: community@mailsbestfriend.com
Subject: [MBF] Re: Help with PCRE
What is a sample of the actual string you are searching? Are there any
separation characters we need to allow for?
-Original Message-
From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On
Behalf Of John
To: community@mailsbestfriend.com
Subject: [MBF] Re: Help with PCRE
That is not working either. It is wanting them to be consecutive
-Original Message-
From: "David Barker" <david.bar...@mailsbestfriend.com>
Sent: Friday, August 26, 2016 11:32am
To: community@mailsbestfriend.com
S
That is not working either. It is wanting them to be consecutive
-Original Message-
From: "David Barker" <david.bar...@mailsbestfriend.com>
Sent: Friday, August 26, 2016 11:32am
To: community@mailsbestfriend.com
Subject: [MBF] Re: Help with PCRE
Oooo, didn't think of d
Subject: [MBF] Re: Help with PCRE
(?:LASHBACK|PSKY|NEWERDOMAIN|HEADERS|ROUTING|MAILSPIKE-L|HELO|SORBS|SPAMCOP|DNS){4,}
Move the quantifier OUTSIDE your token list.
-Original Message-
From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On
Behalf Of John Tolmachoff
Not sure it can be done regex, hoping someone has the answer, but if not this
is how I would do it in Declude. Break the regex into separate lines as in the
example below and create a new filter with the declude directive.
--
MINWEIGHTTOFAIL 4
TESTSFAILED 1