ylist scan to look at last 3 days
Thomas
Von: "Scott MacLean"
An: "ASSP Development Mailing List"
Datum: 09.06.2022 16:54
Betreff:Re: [Assp-test] bombHeaderRe matching every email
Thank you Thomas,
I did not realize that it used the /s regex switch - t
st" , "ASSP Development Mailing List"
Datum: 07.06.2022 19:22
Betreff: Re: [Assp-test] bombHeaderRe matching every email
No, I did not. I know regex fairly well, and this to me looks like a bug
or otherwis
ot;ASSP Development Mailing List"
Datum: 07.06.2022 19:22
Betreff:Re: [Assp-test] bombHeaderRe matching every email
No, I did not. I know regex fairly well, and this to me looks like a bug
or otherwise unintentional operation. I've commented out these lines in
my BombHeader fo
Hi Scott,
Did you ever figure this out?
I'm no regex wiz like Thomas is, but what you have appears pretty simple to
me -- and I don't see anything wrong with it...
I tried
from\:.*\_
in testRE and see it matching everything too. I don't understand why. I
know this doesn't help you with why this
No, I did not. I know regex fairly well, and this to me looks like a bug
or otherwise unintentional operation. I've commented out these lines in
my BombHeader for now.
On 6/7/2022 10:58, K Post wrote:
Hi Scott,
Did you ever figure this out?
I'm no regex wiz like Thomas is, but what you have ap
I've been seeing a bunch of spam getting through my filter recently, and
they all have the same thing in common: an underscore at the beginning
of the "From" and/or "Subject" lines. This should be really easy to pick
up with bombHeaderRe, but something's not working.
Here's an example of the s
n your mind against
> this statement !!!
>
> preHeaderRe is for emergency blocking - if this matches, every mail
> will be blocked - regardeless any setting
>
> Thomas
>
>
>
>
> Von: Daniel Miller
> An: Thomas Eckardt
>
Or did I get that wrong...should have been
!!!N-W-L-I-!!!
--
Daniel
On 1/11/2015 12:29 AM, Daniel Miller wrote:
> Thank you - I never read that section before. I've added
>
> !!!N-W-LI-!!!
>
> To the top of all my regex files. Hopefully this gives me the results
> I want.
>
> --
> Daniel
>
>
Thank you - I never read that section before. I've added
!!!N-W-LI-!!!
To the top of all my regex files. Hopefully this gives me the results I
want.
--
Daniel
On 1/11/2015 12:07 AM, Thomas Eckardt wrote:
> Hi Daniel,
>
> >files/suspiciousre.txt[line 1]):
>
> What is the content of line 1 of
show a complete log example for such a mail.
Thomas
DISCLAIMER:
***
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the
individual to whom it i
Not sure why - I sender I used to receive from regularly is now being
blocked by regexes. They are in NoProcessing, sometimes also
Whitelist. I can see the noprocessing & whitelist matches in the log -
and then the regex scores it high enough to block it.
bombReNP, bombReWL, bombReLocal are a
Hi There,
Simple question - the default files/bombheaderre.txt contains two entries on
sourceforge. One of these lines has a number of Months in it. What is this
check designed to catch as I am seeing false positives?
What I am seeing is the regex matching regular Date: headers such as:
Thomas,
Since upgrading to 13080 through 13105 I have been tracking an issue
with BombHeaderRe, where BombHeaderOK returns (from log) "no Bomb found
in header", when the header text should have triggered a match.
In a particular case, the build 13105 system returned no bomb found.
I found the
ASSP development mailing list
schreibt:
>I am trying to filter many messages like
>
>From: "|Satellite TV|"
>
>I have in bombheaderre
>
>~From: "\|~=>100
>
>For some reason, ASSP does not find those strings in the header.
>
>Is the regex not coded correctly?
The regex is ok.
You can test that
Hi Michael,
strange.. i tested it here : http://regexpal.com/
Fritz or Thomas know better though.
Katip
Original Message
Subject: Re: [Assp-test] bombHeaderre issue
From: Michael Thomas
To: ASSP development mailing list
Date: Thu, 22 Mar 2012 13:09:04 -0400
>
>
uld match i think.
> Katip
>
> Original Message ----
> Subject: [Assp-test] bombHeaderre issue
> From: Michael Thomas
> To: ASSP development mailing list
> Date: Wed, 21 Mar 2012 22
From: \"\|
should match i think.
Katip
Original Message
Subject: [Assp-test] bombHeaderre issue
From: Michael Thomas
To: ASSP development mailing list
Date: Wed, 21 Mar 2012 22:46:40 -0400
> From: "
Hi,
I am trying to filter many messages like
From: "|Satellite TV|"
I have in bombheaderre
~From: "\|~=>100
For some reason, ASSP does not find those strings in the header.
Is the regex not coded correctly?
--
Michael Thomas
Mathbox
978-687-3300
Toll Free: 1-877-MATHBOX (1-877-628-4269)
Hi all,
a common spam tool uses the following or similar in the mail header
(message-id, subject, from, to, received ...)
%RNDDIGIT32
%RNDLCCHAR[1-5]
add the following line to 'bombHeaderRe' if you want to detect such mails
as spam
\%RND(?:DIGIT|[LU]CCHAR)\[?\d+\-*\d*\]?
Thomas
DISCLAIM
I am not sure which regex implementation is in use in ASSP, but this
may help:
http://www.gskinner.com/RegExr/
x-cgp-deliver-to:\ a5\-[a-zA-Z]\-[0-9]{1,3...@sc\.ru\.ru
You may need to add g and i to make it global and case insensitive,
not sure how ASSP treats that either.
For example, a5-z..
http://regexpal.com/ is handy for testing RegEx's also
http://www.spaweditor.com/scripts/regex/index.php
[0-99] will match a single character in range 0-9 (and the extra 9 is
useless).
[0-9]{1.2} would match 1 or two 0-9 characters
and watch out for . - it matches any character and needs a back
Thomas,
Do you have 5 minutes to start me off in the right direction?
I have no idea on how to do reg expressions.and I need to do this one
right first time
Some spam is slipping through both Spamborona and ASSPBayesian isnt
picking up eitherand I still cant get analysis to work
Fritz,
What does the default bombHeaderRe setting protect against?
On first glance it protects against invalid time zones, (i.e.
Time zones such as '+0960'), but why? Is this common?
I ask because I'm considering setting bomb headers to 'block'
instead of score to enforce the charset bombre.
23 matches
Mail list logo
