Thanks for that! On Mon, Apr 26, 2010 at 8:32 AM, Paul K. Dickson < [email protected]> wrote:
> For instance: > > Apr-26-10 10:13:39 91219-13449 [bombDataRe][sl] 216.34.181.88 > <[email protected]> to: [email protected] [spam > passed] -- passing because spamlover, otherwise blocked (bombDataRe: > 'http://hikari-navi.jp/ , http://xs.to/') -- [SPAM Dear assp user owner > Catch 77 discounts iriz] -> /usr/local/assp/spam/13449.eml; > > > Paul K. Dickson > Systems Administrator > Interagency Information Technologies > Frederick County Government > Frederick, MD 21701 > [email protected] > 301-600-2399/x12399 > > > > > From: "Paul K. Dickson" <[email protected]> > > Reply-To: For Users of ASSP <[email protected]> > > Date: Mon, 26 Apr 2010 09:43:30 -0400 > > To: For Users of ASSP <[email protected]> > > Subject: [Assp-user] Fantastic regex > > > > For catching foreign URL¹s or email addresses in the body of an email. > > Email¹s with foreign country codes can be blocked as part of ASSP¹s > native > > functionality, but that does not protect against a lot of phishing/viagra > > sales attempts that come from US domains(yahoo, hotmail), but that have > > obvious spam links in them. > > > > Put in bombDataRe. Score if you want. Obviously remove or comment out > > country codes that you don¹t want scored if in the body of an email. I > can > > send a full txt of all country specific domains if you want. Request off > > the list please. > > > > The following catches URL¹s or emails with the country code for Nigeria. > > > > (http\:\/\/|@)\S{1,255}\.NG(\s(\r|$)|\/|\.\s\w|\.?\r) > > > > > > Oh, and I suggest you comment out .PL. PL will likely match perl > scripts. > > > > > > > > > > > > Paul K. Dickson > > Systems Administrator > > Interagency Information Technologies > > Frederick County Government > > Frederick, MD 21701 > > [email protected] > > 301-600-2399/x12399 > ------------------------------------------------------------------------------ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
