Some of yours make a little sense to me, but not all. I'm new to RegEx, I'll get it eventually.

I also have these:

(v..gr.) 
(<font size =.0.>)
(<font size =.-1.>)

I have about 1000 literals - I pulled them from a list I found in the forum, I've not done any follow-up to see which are working and which are a waste, but I don't get too many compliants about false positives.  Plus, users can log in and re-queue them anyway.

Jack,

Also try putting GSC-100 in you keyword list.  At least for now, it blocks something I can's seem to get with a RegEx ... ans a lot of them!

For all the good it will do, here is my current, very small, keyword list. I am still trying to disect the ones I don't get with my expressions.  I also do not want any false positives if I can help it and literal keywords seem to yield the most false blocks.

(<[!--]+[\x20]{0,1}[a-zA-Z0-9]{10,}[\x20]{0,1}[!--])
(href="http://+[\d])
(http://\w{0,6}%[\d])
(<[!--]+[a-zA-Z0-9]{2}(-->))
((<font color="#ffffff">.*){3,8})
text-decoration: blink
98207.biz
herbalpillsonline
pillsavings
CLICK HERE TO START
thousands of other email providers
GSC-100
img src=3D"http://ww
is a one time mailing
Generic Viagara
Generic V1agara

Dan

Jack,

If you missed an oppening or closing Paren, you may have gotten some strange results.

Are you fairly clear on what they do?  Also, did you see my warning about PayPal?

Dan

OK, I'm perplexed.  I removed and re-added one at a time, each of the following:

(http://\w{0,6}%[\d])
(<[!--]+[\x20]{0,1}[a-zA-Z0-9]{10,}[\x20]{0,1}[!--])
(<[!--]+[a-zA-Z0-9]{13,}(-->))
(href="http://+[\d])
((<font color="#ffffff">.*){3,8})

For a while I was convinced it was (http://\w{0,6}%[\d]) causing the error, but I added it back in just to make sure - no errors.  So now they are all in, and still no errors.  Strange.

I'll keep an eye on the log though to to be sure.

Jack,

I hope it isn't that one ... it is one that blocks a fair amount on my system and I am not getting the error.  Last 8 hours 1093 blocks and not a single error.  Please let me know.

Dan

The error I'm getting is the generic "string matching error."

 I *think* it's this one, but I'm still putting them back in one at a time to be sure.

(http://\w{0,6}%[\d])

Jack,

What RegEx and what is the error?

Here is an example of what the hotmail one rejects (about 55 / hour).  Every little bit helps!

marcus@mags.net

94iy5owglti1@hotmail.com

How's.._.the.._.weather.._.gona.._.be.._.1ike.._.this.._.wekend.._.? kowyh

7/11/2003 9:15:34 AM

EmailFrom is in local blacklist file

521 The EMail 94iy5owglti1@hotmail.com is Blacklisted.

Regards,

Dan S.

I will try this one.

I did see your latest post, I'm currently tracking down an error from one of the regex I just added from an earlier post..

Jack,

The only "hotmail" I deal with are ones that, by hotmail's own information, never valid.  I am still refining that one to catch all invalid variations of hotmail addresses but the main one is to block addresses that start with a digit.  I have included that below.  Did you look at my mess in the post above?

(\b[\d+]+([\-a-za-z0-9_\.\+])+(@hotmail|@juno)\.com)

Try this in the RegEx test window of the SpamFilter application and you will see how it functions.

Regards,

Dan S.