Thomas, > The file, file:files/suspiciousvirus.txt is untouched by me.
Not my regex. Came with the installation package.... Michael Thomas Mathbox 978-687-3300 Toll Free: 1-877-MATHBOX (1-877-628-4269) > -----Original Message----- > From: Thomas Eckardt [mailto:[email protected]] > Sent: Tuesday, January 04, 2011 2:57 AM > To: ASSP development mailing list > Subject: [Assp-test] Antwort: Bad SuspiciousVirus regex > > Michael, > > >(Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9 > ]?)\.i=>4.6 > > please read the GUI section, at the bottom of the main page, > again! Check > all your regexes against this description. > > The syntax of this line is wrong! If you use at least one '|' in a > weighted regex, you have to use an '~' in front and at the end of the > regex ! > > ~(Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9 > ]?)\.i~=>4.6 > > This is also not perfect (but works), because $1 , $2 and $3 > would normaly > be captured by Perl inside the three (..) - better change this to: > > ~(?:Email|HTML|Sanesecurity)\.(?:Phishing|Spear|(?:Spam|Scam)[ > a-z0-9]?)\.i~=>4.6 > > These changes are not realy needed, because assp will do this for you > (internaly) - but it helps to write good regexes. > > Thomas > > > > Von: "Michael Thomas" <[email protected]> > An: "'ASSP development mailing list'" > <[email protected]> > Datum: 04.01.2011 08:02 > Betreff: [Assp-test] Bad SuspiciousVirus regex > > > > > Thomas, > > I just performed an upgrade to ASSP version 2.0.2(2.0.15). > First upgraded > assp.mod to latest. Then edited assp.pl per instructions and > copied file > to > target. Restarted. Good restart. > > While reviewing the startup in log, I noted the following: > > ============================== > 11-Jan-04 01:34:36 [startup] Error: weighted regex for > SuspiciousVirus is > invalid 'Scam)[a-z0-9]?)\.i=>4.6' - Unmatched ) in regex; > marked by <-- > HERE > in m/Scam) <-- HERE [a-z0-9]?)\.i/ at C:\ASSP\assp.pl line 36071. > 11-Jan-04 01:34:36 [startup] Warning: value for > SuspiciousVirus was not > changed - all changes are ignored > 11-Jan-04 01:34:36 [startup] Info: try to use unoptimized regex > SuspiciousVirus > 11-Jan-04 01:34:36 [startup] Error: weighted regex for > SuspiciousVirus is > invalid 'Scam)[a-z0-9]?)\.i=>4.6' - Unmatched ) in regex; > marked by <-- > HERE > in m/Scam) <-- HERE [a-z0-9]?)\.i/ at C:\ASSP\assp.pl line 36071. > 11-Jan-04 01:34:36 [startup] Warning: value for > SuspiciousVirus was not > changed - all changes are ignored > ============================== > > The file, file:files/suspiciousvirus.txt is untouched by me. > I think it is > complaining about nested parens in: > > (Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9] > ?)\.i=>4.6 > > Michael Thomas > Mathbox > 978-687-3300 > Toll Free: 1-877-MATHBOX (1-877-628-4269) > > > -------------------------------------------------------------- > ---------------- > Learn how Oracle Real Application Clusters (RAC) One Node > allows customers > to consolidate database storage, standardize their database > environment, > and, > should the need arise, upgrade to a full multi-node Oracle > RAC database > without downtime or disruption > http://p.sf.net/sfu/oracle-sfdevnl > _______________________________________________ > Assp-test mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be > confidential, legally > privileged and protected in law and are intended solely for > the use of the > > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > > ------------------------------------------------------------------------------ Learn how Oracle Real Application Clusters (RAC) One Node allows customers to consolidate database storage, standardize their database environment, and, should the need arise, upgrade to a full multi-node Oracle RAC database without downtime or disruption http://p.sf.net/sfu/oracle-sfdevnl _______________________________________________ Assp-test mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-test
