Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Require Paren in Email From BL
  FAQ FAQ  Forum Search   Register Register  Login Login

Require Paren in Email From BL

 Post Reply Post Reply
Author
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Topic: Require Paren in Email From BL
    Posted: 10 July 2003 at 8:08pm

Is a Pren ()  required if you use a RegEx in the From Email BlackList?

Example:  I want to use the following:

(\b[\d+]+([\-a-za-z0-9_\.\+])+@hotmail\.com)

Do I need to take the Paren's off or should I enter it as is?

Dan S

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 10 July 2003 at 9:06pm

Dan,

All RegEx's are to be enclosed in parenthesis anywhere they are allowed. Since all lists allow the use of RegEx and normal text search, the parser needs to be able to identify which is a RegEx and which is a normal string. The way it does this is by considering anything enclosed by parenthesis a RegEx.

If it doesn't work this way you may have just found a new bug... Please let us know if so.

Roberto Franceschetti
LogSat Software

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 10 July 2003 at 11:30pm

Roberto,

Thanks ... No, I havn't found a bug yet.  I just put on in before going to my daughters double header softball game and now I am home and will do a little testing before crashing (me that is ... not the software!). I will report any issues.

Dan

Back to Top
Jack View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Jack Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 11:14am
Dan - you are becoming the RegEx god - what does this do?  Have you found a way to safely block spam from hotmail addresses?
Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 11:33am

Jack,

 

The only "hotmail" I deal with are ones that, by hotmail's own information, never valid.  I am still refining that one to catch all invalid variations of hotmail addresses but the main one is to block addresses that start with a digit.  I have included that below.  Did you look at my mess in the post above?

(\b[\d+]+([\-a-za-z0-9_\.\+])+(@hotmail|@juno)\.com)

Try this in the RegEx test window of the SpamFilter application and you will see how it functions.

Regards,

Dan S.

Back to Top
Jack View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Jack Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 11:41am

I will try this one.

I did see your latest post, I'm currently tracking down an error from one of the regex I just added from an earlier post..

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 11:50am

Jack,

What RegEx and what is the error?

Here is an example of what the hotmail one rejects (about 55 / hour).  Every little bit helps!

marcus@mags.net 94iy5owglti1@hotmail.com How's.._.the.._.weather.._.gona.._.be.._.1ike.._.this.._.wekend.._.? kowyh 7/11/2003 9:15:34 AM EmailFrom is in local blacklist file 521 The EMail 94iy5owglti1@hotmail.com is Blacklisted.

 

Regards,

Dan S.

 

Back to Top
Jack View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Jack Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 11:54am

The error I'm getting is the generic "string matching error."

 I *think* it's this one, but I'm still putting them back in one at a time to be sure.

(http://\w{0,6}%[\d])

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 12:02pm

Jack,

I hope it isn't that one ... it is one that blocks a fair amount on my system and I am not getting the error.  Last 8 hours 1093 blocks and not a single error.  Please let me know.

Dan

 

Back to Top
Jack View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Jack Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 12:49pm

OK, I'm perplexed.  I removed and re-added one at a time, each of the following:

(http://\w{0,6}%[\d])
(<[!--]+[\x20]{0,1}[a-zA-Z0-9]{10,}[\x20]{0,1}[!--])
(<[!--]+[a-zA-Z0-9]{13,}(-->))
(href="http://+[\d])
((<font color="#ffffff">.*){3,8})

For a while I was convinced it was (http://\w{0,6}%[\d]) causing the error, but I added it back in just to make sure - no errors.  So now they are all in, and still no errors.  Strange.

I'll keep an eye on the log though to to be sure.

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 12:56pm

Jack,

If you missed an oppening or closing Paren, you may have gotten some strange results.

Are you fairly clear on what they do?  Also, did you see my warning about PayPal?

Dan

 

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 1:07pm

Jack,

Also try putting GSC-100 in you keyword list.  At least for now, it blocks something I can's seem to get with a RegEx ... ans a lot of them!

For all the good it will do, here is my current, very small, keyword list. I am still trying to disect the ones I don't get with my expressions.  I also do not want any false positives if I can help it and literal keywords seem to yield the most false blocks.

(<[!--]+[\x20]{0,1}[a-zA-Z0-9]{10,}[\x20]{0,1}[!--])
(href="http://+[\d])
(http://\w{0,6}%[\d])
(<[!--]+[a-zA-Z0-9]{2}(-->))
((<font color="#ffffff">.*){3,8})
text-decoration: blink
98207.biz
herbalpillsonline
pillsavings
CLICK HERE TO START
thousands of other email providers
GSC-100
img src=3D"http://ww
is a one time mailing
Generic Viagara
Generic V1agara

Dan

 

Back to Top
Jack View Drop Down
Guest Group
Guest Group
Post Options Post Options   Thanks (0) Thanks(0)   Quote Jack Quote  Post ReplyReply Direct Link To This Post Posted: 11 July 2003 at 2:03pm

Some of yours make a little sense to me, but not all. I'm new to RegEx, I'll get it eventually.

I also have these:

(v..gr.) 
(<font size =.0.>)
(<font size =.-1.>)

I have about 1000 literals - I pulled them from a list I found in the forum, I've not done any follow-up to see which are working and which are a waste, but I don't get too many compliants about false positives.  Plus, users can log in and re-queue them anyway.

 

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.125 seconds.