After reviewing 2+ years of past mail, simply blocking anything that starts with "You've received" does the job just fine and should have any false positives. Trying to accurately parse all the variants seems to be a wasted effort and only creates a hole for things to slip through.
YMMV of course, but since all my spam goes to a catch all, it isn't the end of the world, at least for me. Doug Traylor wrote: > Kevin wrote: >> Add these lines to your BombRE, should take care of them. >> >> ---------- >> you\'ve.received.a.(postcard|greeting|ecard).from.a.(colleague|your.partner|family.member|neighbor|mate|school-mate|school.friend|worshipper|friend|partner) >> (colleague|your.partner|family.member|neighbor|mate|school-mate|school.friend|worshipper|friend|partner).has.sent.you.(a|an).(postcard|greeting|ecard) >> ---------- >> > "You've received a greeting *card* from a Neighbo*u*r" > "You've received a greeting *ecard* from a Neighbo*u*r" > "You've received *an* ecard from a Neighbo*u*r" > > > is missed by your line: > > you\'ve.received.a.(postcard|greeting|ecard).from.a.(colleague|your.partner|family.member|neighbor|mate|school-mate|school.friend|worshipper|friend|partner) > > should/can it be: > > you\'ve.received.(a|an).(postcard|greeting.(card|ecard)|ecard).from.a.(colleague|your.partner|family.member|neighb(o|ou)r|mate|school-mate|school.friend|worshipper|friend|partner) > > Just guessing. > > The two lines posted earlier are catching many of these, just > missing a few due to slight differences. > > Thanks, > > Doug (who knows not what he regex's) Traylor > > ------------------------------------------------------------------------ > > ------------------------------------------------------------------------- > This SF.net email is sponsored by: Splunk Inc. > Still grepping through log files to find problems? Stop. > Now Search log events and configuration files using AJAX and a browser. > Download your FREE copy of Splunk now >> http://get.splunk.com/ > ------------------------------------------------------------------------ > > _______________________________________________ > Assp-user mailing list > [email protected] > https://lists.sourceforge.net/lists/listinfo/assp-user > -- Do not meddle in the affairs of wizards, for they are subtle and quick to anger. -- Gildor Inglorion ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ Assp-user mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/assp-user
