For instance: Apr-26-10 10:13:39 91219-13449 [bombDataRe][sl] 216.34.181.88 <[email protected]> to: [email protected] [spam passed] -- passing because spamlover, otherwise blocked (bombDataRe: 'http://hikari-navi.jp/ , http://xs.to/') -- [SPAM Dear assp user owner Catch 77 discounts iriz] -> /usr/local/assp/spam/13449.eml;
Paul K. Dickson Systems Administrator Interagency Information Technologies Frederick County Government Frederick, MD 21701 [email protected] 301-600-2399/x12399 > From: "Paul K. Dickson" <[email protected]> > Reply-To: For Users of ASSP <[email protected]> > Date: Mon, 26 Apr 2010 09:43:30 -0400 > To: For Users of ASSP <[email protected]> > Subject: [Assp-user] Fantastic regex > > For catching foreign URL¹s or email addresses in the body of an email. > Email¹s with foreign country codes can be blocked as part of ASSP¹s native > functionality, but that does not protect against a lot of phishing/viagra > sales attempts that come from US domains(yahoo, hotmail), but that have > obvious spam links in them. > > Put in bombDataRe. Score if you want. Obviously remove or comment out > country codes that you don¹t want scored if in the body of an email. I can > send a full txt of all country specific domains if you want. Request off > the list please. > > The following catches URL¹s or emails with the country code for Nigeria. > > (http\:\/\/|@)\S{1,255}\.NG(\s(\r|$)|\/|\.\s\w|\.?\r) > > > Oh, and I suggest you comment out .PL. PL will likely match perl scripts. > > > > > > Paul K. Dickson > Systems Administrator > Interagency Information Technologies > Frederick County Government > Frederick, MD 21701 > [email protected] > 301-600-2399/x12399 > > > ------------------------------------------------------------------------------ > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user ------------------------------------------------------------------------------ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
