Re: [Assp-test] Regex bombdatare

2010-10-20 Thread Thomas Eckardt
Hi Dale, >would this trigger an email that came from a legitamate >source with the word news in it's domain name? No. It will match on http https ftp ftps ://any sub domain.flatfeehirenews.com in the data part of a mail. blackDomains would only trigger, if the mail is comming from this

[Assp-test] Regex bombdatare

2010-10-20 Thread Dale
Hi I have this in my bombdatare (?:ht|f)tps?\:\/\/(?:\w[\w\.\-]*\.)?flatfeehirenews\.com My question is, would this trigger an email that came from a legitamate source with the word news in it's domain name? If yes, what would be a better way of triggering the domain flatfeehirenews.com inste

Re: [Assp-test] Minor nit with the "razor" plugin

2010-10-20 Thread Thomas Eckardt
I saw this also - seems it is an empty line produced by the Razor modules. Thomas Von:"GrayHat" An: "ASSP development mailing list" Datum: 20.10.2010 10:33 Betreff:Re: [Assp-test] Minor nit with the "razor" plugin > [...] > Oct-20-10 10:07:55 msg-61969-01047 [Worker_1] 1

[Assp-test] new ASSP_AFC.pm Plugin 1.19

2010-10-20 Thread Thomas Eckardt
Hi all, a new release of ASSP_AFC.pm Plugin version 1.19 is available at SF CVS ASSP_AFCMSGSIZEscore,'Increase MSG-Score on MSG Size', 'You can increase the message score of a mail because of its size (in byte). Define the size and scores in a comma separated list using the syntax 'size=>scor

Re: [Assp-test] Minor nit with the "razor" plugin

2010-10-20 Thread GrayHat
> [...] > Oct-20-10 10:07:55 msg-61969-01047 [Worker_1] 11.22.33.44 > to: b...@example.com [Plugin] calling plugin ASSP_Razor > Oct-20-10 10:07:55 [Worker_1] > [...] Setting the razor log to verbose shows that the "blank" message is shown immediately before any message from razor, for example [.

[Assp-test] Minor nit with the "razor" plugin

2010-10-20 Thread GrayHat
After installing it, whenever the plugin is called there's an additional "blank" line in logs, like [...] Oct-20-10 10:07:55 msg-61969-01047 [Worker_1] 11.22.33.44 to: b...@example.com [Plugin] calling plugin ASSP_Razor Oct-20-10 10:07:55 [Worker_1] [...] that "[Worker_1]" line always appears im