George,

I asked Roberto to pass my address to you also.  I want to discuss RexEx's some more without "Clogging" up the forum.  Once I get the bugs out of the expressions I am using, I may post them but I do not want to be responsible for causing a problem due to my stupidity.  Some of the expressions I am working on make me want to go back and "fix" the first 1 or 2 I have done.  I am also trying to get clear stats on how effective they are with respect to eachother and the VERY few actual keywords I do have.

I have a grand total of 9 RegEx's and 8 actual words.  I am truing for all Regular expressions and living with what else get by.

Dan S.

Dan,
I saw your posting on the RegEx codes and have copied them to my keyword list which I will post this evening.

Yes "Quarantining" is a word when spelled this way. :)

You are correct about LogSat's product. It is by far the best product out there for the $$$. The fact that it will work with just about any SMTP server is the biggest plus. Most of the other spam filtering products I looked at were way too expensive and were limited to certian SMTP servers. Too many companies are trying to take advantage/$$$ of this problem. The ones I have to laugh at are the ones that send out SPAM advertising thier products.

I am located in Ca /USE. Roberto has my permission to give you my email address. Don't want to post it here since I am sure if I did I would end up getting Flamed by spammers.

Dan,
I agree with you and also put your modified RegEx tag in to try it out. RegEx needs to be more logical.

The problem I ran into in the the way the Black/White lists work was even though an email address is in the black list that was set to not quarantine, it still got quarantined because it had keywords in the keyword list and that list is set to quarantine.

This a problem when you get a flood of email to accounts that don't exist. I just wanted to block them out right and disconnect the sender with out having the emails quarantined.

OK ... I am continuing to "Refine" this but I am using the following 3 in this order.  I am working on a way to make them more accurate and simpler but this is what I have for the moment:

(<[!--]+[a-hj-zA-HJ-Z0-9]{11,})
(<[!--]+[a-zA-Z0-9]{22,})
(<[!--]+[a-zA-Z0-9]{2}(-->))

Dan S.

the adjusted regex code you gave me seems to be working well. So far it seems to have only cought junk mail and not incredimail.

Thanks again for your help.
If you have any other helpful info I'm all ears.

Thanks.

For your own information, we have also found that some newsletters have tags that get nailed by that filter and we HAD further mods to help with them but took them out. The customers are simply going into the manager and sending them to themselves.  The additional tag is as follows:

<!--messageREACH-object-start-->

Now ... George made a post that I am going to respond to ... not here but from his post.

Dan S.

This is a problem that will require one of two things.
1) A keyword whitelist if it would work.(needed new feature)
2) if,then, else process in the RegEx filter.

In order for either one of these two ideas to work, SpamFilter will have to process things by priority, ie. Process White list items first then the Black list items. According to Roberto, "..but the setting for no rev DNS instead says "quarantined it". There is no way currently to tell SpamFilter which is the predominant quarantine yes/no rule.
 
Whatever filter triggers the reject first will determine if the email will be quarantined or not."

.. Nevermind, I see how it is different.

I'll let you know how it goes.