Re: [Declude.JunkMail] PCRE FILTERING

Would anyone be willing to share their regular expressions files (lines) with the group? I know this will be a valuable addition to Declude but most of us don't want to (or know how to) re-invent the wheel. Thanks. -- John Olden - Technology Manager Champaign Park District --- This E-mail

Re: [Declude.JunkMail] PCRE FILTERING

of good examples on their web site. Gary Original Message From: John Olden [EMAIL PROTECTED] Sent: Friday, March 16, 2007 4:58 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] PCRE FILTERING Would anyone be willing to share their regular expressions

RE: [Declude.JunkMail] PCRE FILTERING

security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, March 14, 2007 9:14 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] PCRE

Re: [Declude.JunkMail] PCRE FILTERING

I'm seeing hits in the attachments too. Triggered ANYWHERE PCRE filter REGEX-KEYWORDS : vHXAH51eG1ujzM (valium) It would be real nice to be able to search the body without the attachments like this. BODYONLY 25 PCRE (?i:v.{0,[EMAIL PROTECTED],2}[\|li1í\!].{0,2}[\|i1í\!].{0,2}[vu].{0,2}m)

Re: [Declude.JunkMail] PCRE FILTERING

also: Capital Firms cycle analysis - Original Message - From: Nick Hayer [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, March 14, 2007 8:14 AM Subject: Re: [Declude.JunkMail] PCRE FILTERING fyi - #CIALIS ANYWHERE 3 PCRE (?i:\bc.{0,2}[\|li1í\!].{0,[EMAIL

RE: [Declude.JunkMail] PCRE FILTERING

:15 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] PCRE FILTERING I'm seeing hits in the attachments too. Triggered ANYWHERE PCRE filter REGEX-KEYWORDS : vHXAH51eG1ujzM (valium) It would be real nice to be able to search the body without the attachments like this. BODYONLY 25

RE: [Declude.JunkMail] PCRE FILTERING

with some sort of $ amount David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, March 14, 2007 10:17 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] PCRE FILTERING also: Capital Firms cycle analysis

Re: [Declude.JunkMail] PCRE FILTERING

: [Declude.JunkMail] PCRE FILTERING I'm seeing hits in the attachments too. Triggered ANYWHERE PCRE filter REGEX-KEYWORDS : vHXAH51eG1ujzM (valium) It would be real nice to be able to search the body without the attachments like this. BODYONLY 25 PCRE (?i:v.{0,[EMAIL PROTECTED],2}[\|li1í\!].{0,2}[\|i1í

RE: [Declude.JunkMail] PCRE FILTERING

of an executable, a specific virus, or the header of a TIFF file. Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, March 14, 2007 9:21 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] PCRE FILTERING

RE: [Declude.JunkMail] PCRE FILTERING

This was an old, old feature request/bug fix from back in the Scott days, where it was desired not include encoded base64 I requested this as a change long ago for two reasons: 1) To avoid false positives where search text matches the MIME or UUENCODE formatting 2) To provide an

Re: [Declude.JunkMail] PCRE FILTERING

Just to clarify a bit on this, there is the conundrum regarding text or HTML base64 encoded attachments and other types of attachments where you want to search the text and HTML stuff in decoded format, but not the image, application and other MIME types. It is however less common to