Rich, PCRE searches against BODY can be very expensive, particularly when you
do a .* expression, which will try to match very long strings.
You can give your CPU a break by changing .* to a judicious text size
restriction e.g. .{5,100}
body 0 PCRE (?i:^http\:\/\/.{5,100}\.(html|htm|php)$)
Andrew 8)
-----Original Message-----
From: Rick Davidson [mailto:[email protected]]
Sent: Tuesday, August 09, 2011 7:51 PM
To: [email protected]
Subject: RE: [Declude.JunkMail] regular expressions and "IS"
just looking for text emails with nothing more than a url in the body
David answered my question, I was over thinking it, by leading with the ^ and
ending with the $ that makes the RegEx an IS statement
body 0 PCRE (?i:^http\:\/\/.*\.(html|htm|php)$)
its working
--
Rick
-----Original Message-----
From: Nick Hayer [mailto:[email protected]]
Sent: Tuesday, August 09, 2011 6:12 PM
To: [email protected]
Subject: Re: [Declude.JunkMail] regular expressions and "IS"
BODY. CONTAINS. Bla bla
Is that what you are looking for?
-Nick
On Aug 9, 2011, at 3:26 PM, "David Barker" <[email protected]> wrote:
>
> The expression is the IS....
>
> Can you post a few examples of what you trying to catch ?
>
> -----Original Message-----
> From: Rick Davidson [mailto:[email protected]]
> Sent: Tuesday, August 09, 2011 2:34 PM
> To: [email protected]
> Subject: [Declude.JunkMail] regular expressions and "IS"
>
> I am working on a combo filter to catch the aol/hotmail/yahoo url spam
>
> is there a way to use a regular expression with "IS"
>
> body 0 IS/PCRE (?i:^http\:\/\/.*\.(html|htm|php)$)
>
> any suggestions welcome
>
> --
> Rick
>
>
> CONFIDENTIALITY NOTICE
>
> This e-mail message and any attachments contain confidential and/or
> privileged information for the sole use of the intended recipient. If you
> are not the intended recipient, you may not read, disseminate, distribute or
> copy this e-mail message or any attachments. Please notify the sender
> immediately by reply e-mail if you received this e-mail message by mistake
> and delete this e-mail message and any attachments from your system. E-mail
> transmission cannot be guaranteed to be secure or error-free as information
> could be intercepted, corrupted, lost, destroyed, delayed, incomplete, or
> contain viruses. The sender, therefore, does not accept liability for any
> errors or omissions in the contents of this e-mail message or any
> attachments, which arise as a result of e-mail transmission. If verification
> is required, please request a hard-copy version.
>
> -. .- -
>
>
> You have received this e-mail due to a past or current transaction or as a
> result of our efforts to keep you in touch with current developments
> affecting your industry. If you wish to unsubscribe from any future general
> information mailings, please click the 'Reply' button and add the word
> 'UNSUBSCRIBE' to the subject of your response.
> ---
> This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
> just send an E-mail to [email protected], and type "unsubscribe
> Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list. To
> unsubscribe, just send an E-mail to [email protected], and
> type "unsubscribe Declude.JunkMail". The archives can be found
> at http://www.mail-archive.com.
>
>
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [email protected], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
You have received this e-mail due to a past or current transaction or as a
result of our efforts to keep you in touch with current developments affecting
your industry. If you wish to unsubscribe from any future general information
mailings, please click the 'Reply' button and add the word 'UNSUBSCRIBE' to the
subject of your response.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [email protected], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
This message (and any associated files) may contain confidential, proprietary
and/or privileged material and access to these materials by anyone other than
the intended recipient is unauthorized. Unauthorized recipients are required to
maintain confidentiality. Any review, retransmission, dissemination or other
use of these materials by persons or entities other than the intended recipient
is prohibited and may be unlawful. If you have received this message in error,
please notify us immediately and destroy the original.
Ce message et tout document qui y est éventuellement joint peuvent contenir de
l’information confidentielle ou exclusive. L’accès à cette information par
quiconque autre que le destinataire désigné en est donc interdit. Les personnes
ou les entités non autorisées doivent respecter la confidentialité de cette
information. La lecture, la retransmission, la communication ou toute autre
utilisation de cette information par une personne ou une entité non autorisée
est strictement interdite. Si vous avez reçu ce message par erreur, veuillez
nous en aviser immédiatement et le détruire.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [email protected], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
