I went with your theory, and added the ~s and =>0.5 but I'm still seeing no scores for bombDataRe:
May-01-10 03:07:45 04864-08078 [BombSubject] 204.8.217.139 <[email protected]> to: [email protected] [scoring:10] -- bombSubjectRe: 'Free' -- [Get 250 Business Cards Free]; May-01-10 03:07:45 04864-08078 [RWL] 204.8.217.139 <[email protected]> to: [email protected] [whiting] Received-RWL: listed by (exemptions.ahbl.org->127.0.0.2,trust=2; ) client-ip=204.8.217.139; May-01-10 03:07:46 04864-08078 [bombDataRe] 204.8.217.139 <[email protected]> to: [email protected] [scoring] -- bombDataRe: 'http://mail.freebusinesscardsonl'; May-01-10 03:07:46 04864-08078 204.8.217.139 <[email protected]> to: [email protected] ClamAV: scanned 4734 bytes in message - OK ; May-01-10 03:07:46 04864-08078 [MessageOK] 204.8.217.139 <[email protected]> to: [email protected] -- Message OK -- [Get 250 Business Cards Free] -> /usr/share/assp/okmail/Get_250_Business_Cards_Free__195.eml; On Fri, Apr 30, 2010 at 1:10 PM, Paul K. Dickson <[email protected]> wrote: > > Right, but if you don't have a score assigned to the regex.. Aka something > like: > > > ~(http\:\/\/|@)[^/\s]*\.NG(\s(\r|$)|\/|\.\s\s?\w|\.?\r)~=>0.5 > > Then that is probably why it isn't listing a score.. It's assumes the full > score and is just telling you it was scored because you have it set to > score, not block. Maybe someone else can confirm. > > > > From: Alex Davidson <[email protected]> > > Reply-To: For Users of ASSP <[email protected]> > > Date: Fri, 30 Apr 2010 12:32:41 -0600 > > To: For Users of ASSP <[email protected]> > > Subject: Re: [Assp-user] Fantastic regex > > > > I have 20 assigned to bombValancePB. > > In which case, I see no reason for this to be happening. > > > > Thanks for the updated RegEx, I Searched & Replaced :) > > > > On Fri, Apr 30, 2010 at 12:17 PM, Paul K. Dickson > > <[email protected]> wrote: > >> > >> I could be completely wrong, but if you don't have a score assigned, it > >> scores the highest possible. All bombre's use the bombValancePB. > >> > >> > >> Btw, that regex had a bug in it. This one works perfectly. You can do a > >> search and replace to replace the before and after of every item, or I can > >> send you my full list. > >> > >> (http\:\/\/|@)[^/\s]*\.NG(\s(\r|$)|\/|\.\s\s?\w|\.?\r) > >> > >> It also eliminates the false positive for PL matching perl scripts in urls. ------------------------------------------------------------------------------ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
