[MBF] Re: Help with PCRE

2016-08-26 Thread Andy Schmidt
Uh - okay. The problem is NOT the order (or the fact that the last item wouldn't have a whitespace character, which could be handled easily). The real problem is that a match will ONLY be made if every single "token" in your string is actually included in your list of alternatives. The problem

[MBF] Help with PCRE

2016-08-26 Thread John Tolmachoff
I am trying to create a Regex filter that will only trigger if 4 or more tests have failed. This is what I have so far but it is not working: (?i:LASHBACK|PSKY|NEWERDOMAIN|HEADERS|ROUTING|MAILSPIKE-L|HELO|SORBS|SPAMCOP|DNS{4,10}) It is triggering if only one has failed. I am trying to have it

[MBF] Re: Help with PCRE

2016-08-26 Thread David Barker
Not sure it can be done regex, hoping someone has the answer, but if not this is how I would do it in Declude. Break the regex into separate lines as in the example below and create a new filter with the declude directive. -- MINWEIGHTTOFAIL 4 TESTSFAILED 1

[MBF] Re: Help with PCRE

2016-08-26 Thread David Barker
Oooo, didn't think of doing it that way. Thought it only worked with letters. So test to be sure. Just to correct the syntax Declude, you want to use the following: (?:(LASHBACK|PSKY|NEWERDOMAIN|HEADERS|ROUTING|MAILSPIKE-L|HELO|SORBS|SPAMCOP|DNS){4,}) David Barker Mail’s Best Friend Email

[MBF] Re: Declude and DKIM

2016-08-26 Thread David Barker
Not in the existing Declude. David Barker Mail’s Best Friend Email : david.bar...@mailsbestfriend.com Web : www.mailsbestfriend.com Office: 866.919.2075 -Original Message- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of Michael

[MBF] Re: Declude and DKIM

2016-08-26 Thread David Barker
No Declude does not evaluate DKIM. If you are running SmarterMail we suggest using DKIM at the SmarterMail level. David Barker Mail’s Best Friend Email : david.bar...@mailsbestfriend.com Web : www.mailsbestfriend.com Office: 866.919.2075 -Original Message- From:

[MBF] Declude and DKIM

2016-08-26 Thread Michael Cummins
Does Declude evaluate DKIM signatures for pass/fail validity? - Michael Cummins # This message is sent to you because you are subscribed to the mailing list . To unsubscribe, E-mail to:

[MBF] Re: Help with PCRE

2016-08-26 Thread Andy Schmidt
What is a sample of the actual string you are searching? Are there any separation characters we need to allow for? -Original Message- From: community@mailsbestfriend.com [mailto:community@mailsbestfriend.com] On Behalf Of John Tolmachoff Sent: Friday, August 26, 2016 7:02 PM To:

[MBF] Re: Help with PCRE

2016-08-26 Thread John Tolmachoff
That is not working either. It is wanting them to be consecutive -Original Message- From: "David Barker" Sent: Friday, August 26, 2016 11:32am To: community@mailsbestfriend.com Subject: [MBF] Re: Help with PCRE Oooo, didn't think of doing it that way.

[MBF] Re: Help with PCRE

2016-08-26 Thread John Tolmachoff
OK this is working now, sort of: (?:LASHBACK\s|PSKY\s|NEWERDOMAIN\s|HEADERS\s|ROUTING\s|MAILSPIKE-L[1-5\s|HELO\s|SORBS\s|SPAMCOP\s|DNS\s){4,}) Here are examples PSKY IPNOTINMX MSGSIZE-0KB MSGSIZE-3KB ALLIGATETESTS SYMBOLSWORDSSUB That is in the Delude Logs. BUT it only works if there are no