Re: Paragraph Length Limit (new rule)

On 3 Aug 2016, at 17:07, Ruga wrote: New tests lead me to the following rule. It works and is now deployed on production servers. full B_PLL /(?:(?!<\/p>).){2000}/msi describe B_PLL Paragraph Length Limit score B_PLL 1.5 rawbody has a hidden bug: it breaks the above rule too. That is

Re: Paragraph Length Limit (new rule)

Am 03.08.2016 um 21:22 schrieb Ruga: I cannot post the original spam message. Protonmail checks the outgoing messages: if they are spammy, then the sender is banned that is why you where asked *as first response* to put it on pastebin signature.asc Description: OpenPGP digital signature

Re: Paragraph Length Limit (new rule)

> On Aug 3, 2016, at 4:37 PM, John Hardin wrote: > > On Wed, 3 Aug 2016, Ryan Coleman wrote: > >> So your script dings my websites because I use .php as an extension without >> doing SEO? >> >> That seems really silly. Many websites use internal pages without SEO >>

Re: Paragraph Length Limit (new rule)

On Wed, 3 Aug 2016, Ryan Coleman wrote: So your script dings my websites because I use .php as an extension without doing SEO? That seems really silly. Many websites use internal pages without SEO because of the royal PITB they can be to program all the little variables. For crying out loud

Re: Paragraph Length Limit (new rule)

So your script dings my websites because I use .php as an extension without doing SEO? That seems really silly. Many websites use internal pages without SEO because of the royal PITB they can be to program all the little variables. For crying out loud most unsubscribe links are scripts with

Re: Paragraph Length Limit (new rule)

New tests lead me to the following rule. It works and is now deployed on production servers. full B_PLL /(?:(?!<\/p>).){2000}/msi describe B_PLL Paragraph Length Limit score B_PLL 1.5 rawbody has a hidden bug: it breaks the above rule too. I am re-writing all local rules to "full" until

Re: Paragraph Length Limit (new rule)

On Wed, 3 Aug 2016, Ruga wrote: Pointless. Why set the "multiple" flag if you're going to set "maxhits=1"?? To really stop at the first match. That is the behavior if the "multiple" flag is not provided. "multiple" exists specifically to allow you to *NOT* stop at the first match. --

Re: Paragraph Length Limit (new rule)

>Looks like a SA bug to me. At last... > rawbody __B_PLL /(?:(?!).){999}/msi Well done. >> tflags __B_PLL multiple maxhits=1 >Pointless. Why set the "multiple" flag if you're going to set "maxhits=1"?? To really stop at the first match. > simply having a paragraph longer than 999 characters

RE: Paragraph Length Limit (new rule)

Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357 From: Ruga [mailto:r...@protonmail.com] Sent: Wednesday, August 03, 2016 11:22 AM To: Matus UHLAR - fantomas; users@spamassassin.apache.org Subject: Re: Paragraph Length Limit (new rule) I cannot post the original spam

Re: Paragraph Length Limit (new rule)

I cannot post the original spam message. Protonmail checks the outgoing messages: if they are spammy, then the sender is banned. I managed to send you a stripped version of the original without loosing my account. Be happy with it, because it is as close as you will ever get to the ugliness of

Re: Paragraph Length Limit (new rule)

Sent from ProtonMail Mobile On Wed, Aug 3, 2016 at 6:59 PM, Matus UHLAR - fantomas <'uh...@fantomas.sk'> wrote: On 03.08.16 12:42, Ruga wrote: >This is the stripped test. The number of characters is reduced to 72 >from the original 999: make your own choice. The attached e-mail >triggers the

Re: Paragraph Length Limit (new rule)

On 3 Aug 2016, at 6:07, Ruga wrote: Hello, We received a new type of spam, twice, and we are not willing to give them a third chance. The body includes a long html paragraph (...) of headlines from the news. The following works at the command line: perl -p0e

Re: Paragraph Length Limit (new rule)

On 03.08.16 12:42, Ruga wrote: This is the stripped test. The number of characters is reduced to 72 from the original 999: make your own choice. The attached e-mail triggers the rule *if* I remove at least one "example" string. Perl: 5.22.2 SA: 3.4.1 rawbody B_PLL m|(?:(?!).){72,}|msi describe

Re: Paragraph Length Limit (new rule)

Why are you doing a "tflags __B_PLL multiple maxhits=1" ? If you have "maxhits=1" what's the point of "multiple" at all? On 03.08.16 12:31, Ruga wrote: To limit the number of possible matches to a single one. you did not get it. what you describe is the standard behaviour. you need "tflags

Re: Paragraph Length Limit (new rule)

> Use a 'full' not 'rawbody' rule. I do not need to parse the header. >Why are you doing a "tflags __B_PLL multiple maxhits=1" ? >If you have "maxhits=1" what's the point of "multiple" at all? To limit the number of possible matches to a single one.

Re: Paragraph Length Limit (new rule)

Use a 'full' not 'rawbody' rule. IE: full B_PLL /(?:(?!<\/p>).){999,}<\/p>/msi Why are you doing a "tflags __B_PLL multiple maxhits=1" ? If you have "maxhits=1" what's the point of "multiple" at all? On Wed, 3 Aug 2016, Ruga wrote: Hello, We received a new type of spam, twice, and we are

Re: Paragraph Length Limit (new rule)

OK Sent from ProtonMail Mobile On Wed, Aug 3, 2016 at 12:58 PM, Ryan Coleman <'ryan.cole...@cwis.biz'> wrote: Keep in mind we do not know that. It is better to not reply and wait a few hours than get Reindl worked up. :) > On Aug 3, 2016, at 5:55 AM, Ruga wrote: > > I

Re: Paragraph Length Limit (new rule)

Am 03.08.2016 um 12:55 schrieb Ruga: I am AWAY for my office then reply when you are back Real spam truly unnecessary says who in case of writing a sane rule? to understand the context it is necessary and in any case prefered to dig in the dark with some isolated stuff On Wed, Aug

Re: Paragraph Length Limit (new rule)

Keep in mind we do not know that. It is better to not reply and wait a few hours than get Reindl worked up. :) > On Aug 3, 2016, at 5:55 AM, Ruga wrote: > > I am AWAY for my office. > Real spam truly unnecessary. > > Sent from ProtonMail Mobile > > > On Wed, Aug 3,

Re: Paragraph Length Limit (new rule)

I am AWAY for my office. Real spam truly unnecessary. Sent from ProtonMail Mobile On Wed, Aug 3, 2016 at 12:51 PM, Reindl Harald <'h.rei...@thelounge.net'> wrote: Am 03.08.2016 um 12:49 schrieb Ruga: > echo "$( cat /dev/urandom | env LC_CTYPE=C tr -dc 'a-zA-Z0-9' | fold > -w 999 | head -n 1 )"

Re: Paragraph Length Limit (new rule)

Am 03.08.2016 um 12:49 schrieb Ruga: echo "$( cat /dev/urandom | env LC_CTYPE=C tr -dc 'a-zA-Z0-9' | fold -w 999 | head -n 1 )" >example.txt spamassassin -t -D B_LLL.rule you where asked for a real *mail* example instead some generic stuff On Wed, Aug 3, 2016 at 12:15 PM, Axb

Re: Paragraph Length Limit (new rule)

echo "$( cat /dev/urandom | env LC_CTYPE=C tr -dc 'a-zA-Z0-9' | fold -w 999 | head -n 1 )" >example.txt spamassassin -t -D B_LLL.rule wrote please pastebin a sample msg

Re: Paragraph Length Limit (new rule)

On 08/03/2016 12:07 PM, Ruga wrote: Hello, We received a new type of spam, twice, and we are not willing to give them a third chance. The body includes a long html paragraph (...) of headlines from the news. The following works at the command line: perl -p0e

Re: Paragraph Length Limit (new rule)

>I would be most grateful if you could spot the but in the above rule. The *bug*, sorry.

Paragraph Length Limit (new rule)

Hello, We received a new type of spam, twice, and we are not willing to give them a third chance. The body includes a long html paragraph (...) of headlines from the news. The following works at the command line: perl -p0e 's/((?:(?!<\/p>).){999,}<\/p>)/-->$1<--/msig' example.eml perl -n0e