RE: [Declude.JunkMail] regular expressions and "IS"
Rich, PCRE searches against BODY can be very expensive, particularly when you do a .* expression, which will try to match very long strings. You can give your CPU a break by changing .* to a judicious text size restriction e.g. .{5,100} body 0 PCRE (?i:^http\:\/\/.{5,100}\.(html|htm|php)$) Andrew 8) -Original Message- From: Rick Davidson [mailto:rdavid...@nat.com] Sent: Tuesday, August 09, 2011 7:51 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] regular expressions and "IS" just looking for text emails with nothing more than a url in the body David answered my question, I was over thinking it, by leading with the ^ and ending with the $ that makes the RegEx an IS statement body 0 PCRE (?i:^http\:\/\/.*\.(html|htm|php)$) its working -- Rick -Original Message- From: Nick Hayer [mailto:n...@madriveraccess.com] Sent: Tuesday, August 09, 2011 6:12 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] regular expressions and "IS" BODY. CONTAINS. Bla bla Is that what you are looking for? -Nick On Aug 9, 2011, at 3:26 PM, "David Barker" wrote: > > The expression is the IS > > Can you post a few examples of what you trying to catch ? > > -Original Message- > From: Rick Davidson [mailto:rdavid...@nat.com] > Sent: Tuesday, August 09, 2011 2:34 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] regular expressions and "IS" > > I am working on a combo filter to catch the aol/hotmail/yahoo url spam > > is there a way to use a regular expression with "IS" > > body 0 IS/PCRE (?i:^http\:\/\/.*\.(html|htm|php)$) > > any suggestions welcome > > -- > Rick > > > CONFIDENTIALITY NOTICE > > This e-mail message and any attachments contain confidential and/or > privileged information for the sole use of the intended recipient. If you > are not the intended recipient, you may not read, disseminate, distribute or > copy this e-mail message or any attachments. Please notify the sender > immediately by reply e-mail if you received this e-mail message by mistake > and delete this e-mail message and any attachments from your system. E-mail > transmission cannot be guaranteed to be secure or error-free as information > could be intercepted, corrupted, lost, destroyed, delayed, incomplete, or > contain viruses. The sender, therefore, does not accept liability for any > errors or omissions in the contents of this e-mail message or any > attachments, which arise as a result of e-mail transmission. If verification > is required, please request a hard-copy version. > > -. .- - > > > You have received this e-mail due to a past or current transaction or as a > result of our efforts to keep you in touch with current developments > affecting your industry. If you wish to unsubscribe from any future general > information mailings, please click the 'Reply' button and add the word > 'UNSUBSCRIBE' to the subject of your response. > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to imail...@declude.com, and type "unsubscribe > Declude.JunkMail". The archives can be found at http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to imail...@declude.com, and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. You have received this e-mail due to a past or current transaction or as a result of our efforts to keep you in touch with current developments affecting your industry. If you wish to unsubscribe from any future general information mailings, please click the 'Reply' button and add the word 'UNSUBSCRIBE' to the subject of your response. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. This message (and any associated files) may contain confidential, proprietary and/or privileged material and access to these materials by anyone other than the intended recipient is unauthorized. Unauthorized recipients are required to maintain confidentiality. Any review, retransmission, dissemination or other use of these materials by persons or entities other than the intended recipient is prohibited and may be unlawful. If you have recei
RE: [Declude.JunkMail] regular expressions and "IS"
just looking for text emails with nothing more than a url in the body David answered my question, I was over thinking it, by leading with the ^ and ending with the $ that makes the RegEx an IS statement body 0 PCRE (?i:^http\:\/\/.*\.(html|htm|php)$) its working -- Rick -Original Message- From: Nick Hayer [mailto:n...@madriveraccess.com] Sent: Tuesday, August 09, 2011 6:12 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] regular expressions and "IS" BODY. CONTAINS. Bla bla Is that what you are looking for? -Nick On Aug 9, 2011, at 3:26 PM, "David Barker" wrote: > > The expression is the IS > > Can you post a few examples of what you trying to catch ? > > -Original Message- > From: Rick Davidson [mailto:rdavid...@nat.com] > Sent: Tuesday, August 09, 2011 2:34 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] regular expressions and "IS" > > I am working on a combo filter to catch the aol/hotmail/yahoo url spam > > is there a way to use a regular expression with "IS" > > body 0 IS/PCRE (?i:^http\:\/\/.*\.(html|htm|php)$) > > any suggestions welcome > > -- > Rick > > > CONFIDENTIALITY NOTICE > > This e-mail message and any attachments contain confidential and/or > privileged information for the sole use of the intended recipient. If you > are not the intended recipient, you may not read, disseminate, distribute or > copy this e-mail message or any attachments. Please notify the sender > immediately by reply e-mail if you received this e-mail message by mistake > and delete this e-mail message and any attachments from your system. E-mail > transmission cannot be guaranteed to be secure or error-free as information > could be intercepted, corrupted, lost, destroyed, delayed, incomplete, or > contain viruses. The sender, therefore, does not accept liability for any > errors or omissions in the contents of this e-mail message or any > attachments, which arise as a result of e-mail transmission. If verification > is required, please request a hard-copy version. > > -. .- - > > > You have received this e-mail due to a past or current transaction or as a > result of our efforts to keep you in touch with current developments > affecting your industry. If you wish to unsubscribe from any future general > information mailings, please click the 'Reply' button and add the word > 'UNSUBSCRIBE' to the subject of your response. > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to imail...@declude.com, and type "unsubscribe > Declude.JunkMail". The archives can be found at http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to imail...@declude.com, and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. You have received this e-mail due to a past or current transaction or as a result of our efforts to keep you in touch with current developments affecting your industry. If you wish to unsubscribe from any future general information mailings, please click the 'Reply' button and add the word 'UNSUBSCRIBE' to the subject of your response. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] regular expressions and "IS"
BODY. CONTAINS. Bla bla Is that what you are looking for? -Nick On Aug 9, 2011, at 3:26 PM, "David Barker" wrote: > > The expression is the IS > > Can you post a few examples of what you trying to catch ? > > -Original Message- > From: Rick Davidson [mailto:rdavid...@nat.com] > Sent: Tuesday, August 09, 2011 2:34 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] regular expressions and "IS" > > I am working on a combo filter to catch the aol/hotmail/yahoo url spam > > is there a way to use a regular expression with "IS" > > body 0 IS/PCRE (?i:^http\:\/\/.*\.(html|htm|php)$) > > any suggestions welcome > > -- > Rick > > > CONFIDENTIALITY NOTICE > > This e-mail message and any attachments contain confidential and/or > privileged information for the sole use of the intended recipient. If you > are not the intended recipient, you may not read, disseminate, distribute or > copy this e-mail message or any attachments. Please notify the sender > immediately by reply e-mail if you received this e-mail message by mistake > and delete this e-mail message and any attachments from your system. E-mail > transmission cannot be guaranteed to be secure or error-free as information > could be intercepted, corrupted, lost, destroyed, delayed, incomplete, or > contain viruses. The sender, therefore, does not accept liability for any > errors or omissions in the contents of this e-mail message or any > attachments, which arise as a result of e-mail transmission. If verification > is required, please request a hard-copy version. > > -. .- - > > > You have received this e-mail due to a past or current transaction or as a > result of our efforts to keep you in touch with current developments > affecting your industry. If you wish to unsubscribe from any future general > information mailings, please click the 'Reply' button and add the word > 'UNSUBSCRIBE' to the subject of your response. > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to imail...@declude.com, and type "unsubscribe > Declude.JunkMail". The archives can be found at http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to imail...@declude.com, and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] regular expressions and "IS"
The expression is the IS Can you post a few examples of what you trying to catch ? -Original Message- From: Rick Davidson [mailto:rdavid...@nat.com] Sent: Tuesday, August 09, 2011 2:34 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] regular expressions and "IS" I am working on a combo filter to catch the aol/hotmail/yahoo url spam is there a way to use a regular expression with "IS" body 0 IS/PCRE (?i:^http\:\/\/.*\.(html|htm|php)$) any suggestions welcome -- Rick CONFIDENTIALITY NOTICE This e-mail message and any attachments contain confidential and/or privileged information for the sole use of the intended recipient. If you are not the intended recipient, you may not read, disseminate, distribute or copy this e-mail message or any attachments. Please notify the sender immediately by reply e-mail if you received this e-mail message by mistake and delete this e-mail message and any attachments from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, delayed, incomplete, or contain viruses. The sender, therefore, does not accept liability for any errors or omissions in the contents of this e-mail message or any attachments, which arise as a result of e-mail transmission. If verification is required, please request a hard-copy version. -. .- - You have received this e-mail due to a past or current transaction or as a result of our efforts to keep you in touch with current developments affecting your industry. If you wish to unsubscribe from any future general information mailings, please click the 'Reply' button and add the word 'UNSUBSCRIBE' to the subject of your response. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] regular expressions and "IS"
I am working on a combo filter to catch the aol/hotmail/yahoo url spam is there a way to use a regular expression with "IS" body 0 IS/PCRE (?i:^http\:\/\/.*\.(html|htm|php)$) any suggestions welcome -- Rick CONFIDENTIALITY NOTICE This e-mail message and any attachments contain confidential and/or privileged information for the sole use of the intended recipient. If you are not the intended recipient, you may not read, disseminate, distribute or copy this e-mail message or any attachments. Please notify the sender immediately by reply e-mail if you received this e-mail message by mistake and delete this e-mail message and any attachments from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, delayed, incomplete, or contain viruses. The sender, therefore, does not accept liability for any errors or omissions in the contents of this e-mail message or any attachments, which arise as a result of e-mail transmission. If verification is required, please request a hard-copy version. -. .- - You have received this e-mail due to a past or current transaction or as a result of our efforts to keep you in touch with current developments affecting your industry. If you wish to unsubscribe from any future general information mailings, please click the 'Reply' button and add the word 'UNSUBSCRIBE' to the subject of your response. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.