Print Page | Close Window

Regex question

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
Printed Date: 21 February 2019 at 1:41am

Topic: Regex question
Posted By: kspare
Subject: Regex question
Date Posted: 08 July 2010 at 5:40pm
I'm using ((?i)Subject: .*(((Rolex)|(Beitling))))::Honeypot to get rid of messages with the subject

Rolex, Beitling, Bvlgari, Cartier, Chanel, Tag Heuer, and lots more!

but it's not going to the honey pot. What am I doing wrong here?

Posted By: LogSat
Date Posted: 13 July 2010 at 9:32pm

I'm not able to replicate this... When using the keyword line you posted:

((?i)Subject: .*(((Rolex)|(Beitling))))::Honeypot

And sending a test email with this subject:
Subject: Rolex, Beitling, Bvlgari, Cartier, Chanel, Tag Heuer, and lots more!

In SpamFilter's activity logfile I do see the following (and verified that the IP does indeed get added to the BL_HoneypotBlockedIPs.txt file):

07/13/10 21:21:49:359 -- (292) Connection from:  -  Originating country : N/A
07/13/10 21:21:50:531 -- (292) - Added to honeypot blacklist
07/13/10 21:21:50:531 -- (292) Found Keywords: [((?i)Subject: .*(((Rolex)|(Beitling))))::Honeypot]
07/13/10 21:21:50:531 -- (292) EMail from to matches content filter rules - rejected.

If you can please zip me the section of SpamFilter's activity logfile showing the incoming email (please include a few extra minutes before and after the email to be sure to capture all events), along with the to/from email addresses involved, and the BL_HoneypotBlockedIPs.txt file (if SpamFilter Enterprise, please ensure to provide the file relative to either "ALL DOMAINS", or, if the recipient's domain has been configured not to use the default settings, relative to the domain in question)?

Roberto Franceschetti" rel="nofollow - LogSat Software" rel="nofollow - Spam Filter ISP

Print Page | Close Window