You can use bombSubjectRe, bombSenderRe and bomCharSets for the easy steps
like your regex.
How ever , I think something like that should do the tick.
'bombSkipHeaderTagRe','Regular Expression to Identify skipped Tags in
Header Part*',
'Regular Expression to define header tags, that will be skipped for
bombSuspiciousRe, bombHeaderRe, bombRe and blackRe - like
'DKIM-Signature|Domainkey-Signature' - the always followed collon (:) is
added by assp.
For example:
file:files/bombskipheadertagre.txt'
Thomas
Von: Michael Thomas <m...@mathbox.com>
An: ASSP development mailing list <assp-test@lists.sourceforge.net>,
Datum: 20.08.2013 10:35
Betreff: Re: [Assp-test] Antwort: Exclude DKIM-Signature from
bombheaderre matching
Thomas,
1. ASSP has a DKIM function that establishes whether or not the DKIM is
valid.
2. If one is using the DKIM function, then regex matching parts of the
DKIM Signature has no value for me or less value than false matches.
3. The DKIM signature contains a hash, which itself can contain any
letter a-z, in sufficient length and randomness, that matches can occur
on unwanted words or phrases.
Example, I have the word "dildo" (no quotes) as a regex.
dildo=>7
Which by chance, matched a sub-string in the DKIM hash, which is not
useful. However, if it matched in the From, To, Subject, or Received,
that is desirable. Yes, it is possible to write four complicated regex
to match only the desired combination.
Having considered and failed to come up with any reason I would attempt
to match a DKIM Signature, I thought it might be useful and possibly CPU
cycle saving, to optionally remove the DKIM before offering the headers
to bombheaderre processing.
Michael Thomas
Mathbox
978-687-3300
Toll Free: 1-877-MATHBOX (1-877-628-4269)
On 8/20/2013 2:43 AM, Thomas Eckardt wrote:
> Yes - it is possible, but why ? Simply write the rexec right - so that
is
> does not match a DKIM signature.
>
> Thomas
>
>
>
>
> Von: Michael Thomas <m...@mathbox.com>
> An: ASSP development mailing list <assp-test@lists.sourceforge.net>,
> Datum: 20.08.2013 03:35
> Betreff: [Assp-test] Exclude DKIM-Signature from bombheaderre
> matching
>
>
>
> Thomas,
>
> Would it be possible by supported check box or through personal code
> modification to exclude the DKIM-Signature from bombheaderre matching?
>
>
>
>
------------------------------------------------------------------------------
> Introducing Performance Central, a new site from SourceForge and
> AppDynamics. Performance Central is your source for news, insights,
> analysis and resources for efficient Application Performance Management.
> Visit us today!
>
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
>
>
>
> _______________________________________________
> Assp-test mailing list
> Assp-test@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/assp-test
>
------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and
AppDynamics. Performance Central is your source for news, insights,
analysis and resources for efficient Application Performance Management.
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************
------------------------------------------------------------------------------
Introducing Performance Central, a new site from SourceForge and
AppDynamics. Performance Central is your source for news, insights,
analysis and resources for efficient Application Performance Management.
Visit us today!
http://pubads.g.doubleclick.net/gampad/clk?id=48897511&iu=/4140/ostg.clktrk
_______________________________________________
Assp-test mailing list
Assp-test@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/assp-test
