Hmmm strict one should have caught it.. It seems that the ( ) 's cant be put in
just using \( must use \x28 and \x29 for them to catch... I've also noticed
that , and # must also be done using the hex value as well in the regex's
instead of just escaping them.
Here's updated regex:
(?:member|worshipper|colleague|friend|mate|partner|neighbou?r|\x28(?:[EMAIL
PROTECTED])?\x29).has.(?:sent.you|created).a?n?.?(?:\w+\W+){0,3}(?:post|e\-?)?card
Tested with mail analyzer.
Also a few minutes after I sent the initial one I had one come in with a email
address between the ( )'s above has been adjusted for that as well.
----- Original Message ----
From: Micheal Espinola Jr <[EMAIL PROTECTED]>
To: Questions and Answers for users of ASSP Anti-Spam SMTP Proxy
<[email protected]>
Sent: Monday, August 13, 2007 4:18:59 PM
Subject: Re: [Assp-user] greeting card spam changed again
Robert Sterba wrote:
> If you want to tag on body:
>
> (?:member|worshipper|colleague|friend|mate|partner|neighbou?r|\(\)).has.(?:sent.you|created).a?n?.?(?:\w+\W+){0,3}(?:post|e\-?)?card
>
> The above integrates the newer forms with the old ones. It's been
> catching all of mine that have not been snagged by message scoring.
>
> If you want to shorten it to not worry about the SOMBODY(), FAMILY
> MEMBER, etc just use:
>
> has.(?:sent.you|created).a?n?.?(?:\w+\W+){0,3}(?:post|e\-?)?card
Here's one of the latest variations that I have seen. Less strict
(second) regex will catch it, while the stricter (first) regex would
have to be modified.
Neighbour() has created Animated postcard for you at postcards.org.
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user
____________________________________________________________________________________
Sick sense of humor? Visit Yahoo! TV's
Comedy with an Edge to see what's on, when.
http://tv.yahoo.com/collections/222
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Assp-user mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/assp-user
