Sorry, I don't use this file - so I never saw this mistake - but how
ever, nobody has told me about it ??? I'll change it in the distribution.
The new version of the file 'suspiciousvirus.txt' is published on SF-CVS
in folder files.
Thomas
Von: "Michael Thomas" <[email protected]>
An: "'ASSP development mailing list'"
<[email protected]>
Datum: 04.01.2011 09:20
Betreff: Re: [Assp-test] Antwort: Bad SuspiciousVirus regex
Thomas,
> The file, file:files/suspiciousvirus.txt is untouched by me.
Not my regex. Came with the installation package....
Michael Thomas
Mathbox
978-687-3300
Toll Free: 1-877-MATHBOX (1-877-628-4269)
> -----Original Message-----
> From: Thomas Eckardt [mailto:[email protected]]
> Sent: Tuesday, January 04, 2011 2:57 AM
> To: ASSP development mailing list
> Subject: [Assp-test] Antwort: Bad SuspiciousVirus regex
>
> Michael,
>
> >(Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9
> ]?)\.i=>4.6
>
> please read the GUI section, at the bottom of the main page,
> again! Check
> all your regexes against this description.
>
> The syntax of this line is wrong! If you use at least one '|' in a
> weighted regex, you have to use an '~' in front and at the end of the
> regex !
>
> ~(Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9
> ]?)\.i~=>4.6
>
> This is also not perfect (but works), because $1 , $2 and $3
> would normaly
> be captured by Perl inside the three (..) - better change this to:
>
> ~(?:Email|HTML|Sanesecurity)\.(?:Phishing|Spear|(?:Spam|Scam)[
> a-z0-9]?)\.i~=>4.6
>
> These changes are not realy needed, because assp will do this for you
> (internaly) - but it helps to write good regexes.
>
> Thomas
>
>
>
> Von: "Michael Thomas" <[email protected]>
> An: "'ASSP development mailing list'"
> <[email protected]>
> Datum: 04.01.2011 08:02
> Betreff: [Assp-test] Bad SuspiciousVirus regex
>
>
>
>
> Thomas,
>
> I just performed an upgrade to ASSP version 2.0.2(2.0.15).
> First upgraded
> assp.mod to latest. Then edited assp.pl per instructions and
> copied file
> to
> target. Restarted. Good restart.
>
> While reviewing the startup in log, I noted the following:
>
> ==============================
> 11-Jan-04 01:34:36 [startup] Error: weighted regex for
> SuspiciousVirus is
> invalid 'Scam)[a-z0-9]?)\.i=>4.6' - Unmatched ) in regex;
> marked by <--
> HERE
> in m/Scam) <-- HERE [a-z0-9]?)\.i/ at C:\ASSP\assp.pl line 36071.
> 11-Jan-04 01:34:36 [startup] Warning: value for
> SuspiciousVirus was not
> changed - all changes are ignored
> 11-Jan-04 01:34:36 [startup] Info: try to use unoptimized regex
> SuspiciousVirus
> 11-Jan-04 01:34:36 [startup] Error: weighted regex for
> SuspiciousVirus is
> invalid 'Scam)[a-z0-9]?)\.i=>4.6' - Unmatched ) in regex;
> marked by <--
> HERE
> in m/Scam) <-- HERE [a-z0-9]?)\.i/ at C:\ASSP\assp.pl line 36071.
> 11-Jan-04 01:34:36 [startup] Warning: value for
> SuspiciousVirus was not
> changed - all changes are ignored
> ==============================
>
> The file, file:files/suspiciousvirus.txt is untouched by me.
> I think it is
> complaining about nested parens in:
>
> (Email|HTML|Sanesecurity)\.(Phishing|Spear|(Spam|Scam)[a-z0-9]
> ?)\.i=>4.6
>
> Michael Thomas
> Mathbox
> 978-687-3300
> Toll Free: 1-877-MATHBOX (1-877-628-4269)
>
>
> --------------------------------------------------------------
> ----------------
> Learn how Oracle Real Application Clusters (RAC) One Node
> allows customers
> to consolidate database storage, standardize their database
> environment,
> and,
> should the need arise, upgrade to a full multi-node Oracle
> RAC database
> without downtime or disruption
> http://p.sf.net/sfu/oracle-sfdevnl
> _______________________________________________
> Assp-test mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
>
>
>
> DISCLAIMER:
> *******************************************************
> This email and any files transmitted with it may be
> confidential, legally
> privileged and protected in law and are intended solely for
> the use of the
>
> individual to whom it is addressed.
> This email was multiple times scanned for viruses. There should be no
> known virus in this email!
> *******************************************************
>
>
>
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment,
and,
should the need arise, upgrade to a full multi-node Oracle RAC database
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Learn how Oracle Real Application Clusters (RAC) One Node allows customers
to consolidate database storage, standardize their database environment, and,
should the need arise, upgrade to a full multi-node Oracle RAC database
without downtime or disruption
http://p.sf.net/sfu/oracle-sfdevnl
_______________________________________________
Assp-test mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-test
