RE: [Declude.JunkMail] regular expressions and "IS"

2011-08-10 Thread Colbeck, Andrew 
Rich, PCRE searches against BODY can be very expensive, particularly when you 
do a .* expression, which will try to match very long strings.

You can give your CPU a break by changing .* to a judicious text size 
restriction e.g. .{5,100}

body 0 PCRE (?i:^http\:\/\/.{5,100}\.(html|htm|php)$)


Andrew 8)


-Original Message-
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Tuesday, August 09, 2011 7:51 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] regular expressions and "IS"


just looking for text emails with nothing more than a url in the body

David answered my question, I was over thinking it, by leading with the ^ and 
ending with the $ that makes the RegEx an IS statement

body 0 PCRE (?i:^http\:\/\/.*\.(html|htm|php)$)

its working

--
Rick


-Original Message-
From: Nick Hayer [mailto:n...@madriveraccess.com]
Sent: Tuesday, August 09, 2011 6:12 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] regular expressions and "IS"


BODY. CONTAINS. Bla bla

Is that what you are looking for?

-Nick



On Aug 9, 2011, at 3:26 PM, "David Barker"  wrote:

>
> The expression is the IS
>
> Can you post a few examples of what you trying to catch ?
>
> -Original Message-
> From: Rick Davidson [mailto:rdavid...@nat.com]
> Sent: Tuesday, August 09, 2011 2:34 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] regular expressions and "IS"
>
> I am working on a combo filter to catch the aol/hotmail/yahoo url spam
>
> is there a way to use a regular expression with "IS"
>
> body 0 IS/PCRE (?i:^http\:\/\/.*\.(html|htm|php)$)
>
> any suggestions welcome
>
> --
> Rick
>
>
> CONFIDENTIALITY NOTICE
>
> This e-mail message and any attachments contain confidential and/or 
> privileged information for the sole use of the intended recipient.  If you 
> are not the intended recipient, you may not read, disseminate, distribute or 
> copy this e-mail message or any attachments. Please notify the sender 
> immediately by reply e-mail if you received this e-mail message by mistake 
> and delete this e-mail message and any attachments from your system.  E-mail 
> transmission cannot be guaranteed to be secure or error-free as information 
> could be intercepted, corrupted, lost, destroyed, delayed, incomplete, or 
> contain viruses.  The sender, therefore, does not accept liability for any 
> errors or omissions in the contents of this e-mail message or any 
> attachments, which arise as a result of e-mail transmission.  If verification 
> is required, please request a hard-copy version.
>
> -. .- -
>
>
> You have received this e-mail due to a past or current transaction or as a 
> result of our efforts to keep you in touch with current developments 
> affecting your industry. If you wish to unsubscribe from any future general 
> information mailings, please click the 'Reply' button and add the word 
> 'UNSUBSCRIBE' to the subject of your response.
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe, 
> just send an E-mail to imail...@declude.com, and type "unsubscribe 
> Declude.JunkMail".  The archives can be found at http://www.mail-archive.com.
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to imail...@declude.com, and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
>



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



You have received this e-mail due to a past or current transaction or as a 
result of our efforts to keep you in touch with current developments affecting 
your industry. If you wish to unsubscribe from any future general information 
mailings, please click the 'Reply' button and add the word 'UNSUBSCRIBE' to the 
subject of your response.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


This message (and any associated files) may contain confidential, proprietary 
and/or privileged material and access to these materials by anyone other than 
the intended recipient is unauthorized. Unauthorized recipients are required to 
maintain confidentiality. Any review, retransmission, dissemination or other 
use of these materials by persons or entities other than the intended recipient 
is prohibited and may be unlawful. If you have received this message in error, 
please notify us immediately and destroy the original.


Ce message et tout document qui y est éventuellement joint peuvent contenir de 
l’information confidentielle ou exclusive. L’accès à cette information par 
quiconque autre que le destinataire désigné en est donc interdit. Les pe

[Declude.JunkMail] Declude 4.10.78 & Interceptor 3.4.10.508 Available

2011-08-10 Thread David Barker 
Please contact supp...@declude.com if you need assistance with your upgrade.




Version

Part

Type

Change


4.10.78

AVG

FIX

Update AVG Key license key Exp=2012-04-10


4.10.77

AV

ADD

Fixed virus emails being deleted instead of being held in the virus
directory, problem was introduced with 4.10.72. (IMail Only)


4.10.76

JM

FIX

Fixed crash due to buffer overflow (to many recipients) when the last action
is DELETE


4.10.75

DEC

FIX

Fixed ALLOWVULNERABILITIESFROM which was not working with certain
vulnerabilities, such as OBJECT DATA, Partial vulnerability and Outlook
'Blank Folding' vulnerability.


4.10.74

JM

FIX

Fixed emails being tagged by Declude as Outbound when should be Inbound.
Declude will exit from loading the domains name (host) to memory, when the
Aliases entry in the registry is missing from one of the domain. (IMail
only)


4.10.73

DEC

ADD

Added the Declude Key in the diags.txt file





David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
  dbar...@declude.com



Description: Description: Description: -declude Description: Description:
Description: -dnsstuff





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
<><>