I'm assuming this should go into BombHeaderRe like: \nfrom:[^\r\n]+?\@.+\.fr[>\b] .+?\nto:[^\r\n]+?the_recipient\@your_domain\.com=>40 \nto:[^\r\n]+?the_recipient\@your_domain\.com.+?\nfrom:[^\r\n]+?\@.+?\.fr [>\b]=>40
I've got to be misunderstanding something with the relatively simply regex that you so kindly provided. Is ASSP doing some sort of simplification of the header before comparing first? As is, .I see how it would catch to:ouru...@ourcharity.org from:anyth...@wahtever.fr in any order, but how would this catch something where the header has something like: From: "B & H France" <newslet...@bandh.fr> To: "Our User" <ouru...@ourcharity.org> or even if there's just a space between the from and the email address To: ouru...@ourcharity.org or the email address is surrounded by < and > To: <ouru...@ourcharity.org> Aren't those all legal and likely? On Thu, Aug 29, 2019 at 2:13 AM Thomas Eckardt <thomas.ecka...@thockar.com> wrote: > \.fr[>\b] > > should do it > > # \nfrom:[^\r\n]+?\@.+\.fr[>\b] > .+?\nto:[^\r\n]+?the_recipient\@your_domain\.com > # \nto:[^\r\n]+?the_recipient\@your_domain\.com.+?\nfrom:[^\r\n]+?\@.+?\.fr > [>\b] > > > Thomas > > > > > Von: "K Post" <nntp.p...@gmail.com> > An: "ASSP development mailing list" < > assp-test@lists.sourceforge.net> > Datum: 29.08.2019 00:25 > Betreff: [Assp-test] Help requested scoring mail from .fr domains > to a specific user > ------------------------------ > > > > I've got a user who never communicates with France, but apparently is on a > French language fashion spam list. She's getting lots of messages from > email addresses ending in .fr and she doesn't want any. I've got as many > as I can in errors-spam, but my HMM/Bayes databases just doesn't have > enough French language content. > > Now, some users do need communicate with France, so it's not like I could > do a blanket block of all fr domains. > > Much of the mail comes out of bulk mailers like Constant Contact and > sendgrid in the US. Using geolocation isn't going to help here. > > So, I was thinking of doing something like what was proposed years ago in > this group, using a regex in BombHeaderRe to score messages from a .fr > address to this specific user using the template that was provided. > > #first case - from: before to: in the header > # > \nfrom:[^\r\n]+?\@sender_domain\.com.+?\nto:[^\r\n]+?the_recipient\@your_domain\.com > #second case - to: before from: in the header > # > \nto:[^\r\n]+?the_recipient\@your_domain\.com.+?\nfrom:[^\r\n]+?\@sender_domain\.com > > # > > So something like: > #first case - from: before to: in the header > # \nfrom:[^\r\n]+?\@.*\.fe.+?\nto:[^\r\n]+?the_recipient\@your_domain\.com > #second case - to: before from: in the header > # \nto:[^\r\n]+?the_recipient\@your_domain\.com.+?\nfrom:[^\r\n]+?\@*\.fr > # > > But, I believe that'll also block mail where the from is FRank.com. > Any suggestions on how to block domains ending in .fr? > should I be looking for > .fr> > .fr[^\r\n] > What else? > > OR, is there a better way to accomplish this? > I know that the lingua plugin isn't strong enough to detect the exact > romantic language, plus it needs to be just for this user.... > > THANK YOU > > > > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test > > > > > DISCLAIMER: > ******************************************************* > This email and any files transmitted with it may be confidential, legally > privileged and protected in law and are intended solely for the use of the > individual to whom it is addressed. > This email was multiple times scanned for viruses. There should be no > known virus in this email! > ******************************************************* > > _______________________________________________ > Assp-test mailing list > Assp-test@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/assp-test >
_______________________________________________ Assp-test mailing list Assp-test@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/assp-test
