LogSat Software

Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic

   We are getting more and more messages skating by our SpamFilter server by misspelling commonly filtered words.
Example: vi.agra
This might be very simple but I cannot get the regex to catch this scenario for whatever reason.  Probably because the " . " is some sort of operator for the regex statement.  Can someone provide me with an example regex that would catch the keyword "viagra" even with a " . " between the letters?

Author	Message Topic Search Topic Options Post Reply Create New Topic Printable Version Translate Topic
Steve Brown Members Profile Send Private Message Find Members Posts Add to Buddy List Guest Group	Post Options Post Reply Quote Steve Brown Thanks(0) Quote Reply Topic: Keyword filtering REGEX Posted: 16 October 2003 at 5:13pm
	We are getting more and more messages skating by our SpamFilter server by misspelling commonly filtered words. Example: vi.agra This might be very simple but I cannot get the regex to catch this scenario for whatever reason. Probably because the " . " is some sort of operator for the regex statement. Can someone provide me with an example regex that would catch the keyword "viagra" even with a " . " between the letters?

Desperado Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 27 January 2005 Location: United States Status: Offline Points: 1143	Post Options Post Reply Quote Desperado Report Post Thanks(0) Quote Reply Posted: 16 October 2003 at 10:01pm
	Steve, In a case like this, it really is best to try to find the pattern that the Spammers are using to obscure the message. Ususally, there are a boat load of html tags and coments that break up the message so that normal, literal keyword filters won't find anything. Have you looked at any of my posts on regular expressions? If so, did this particular message get past them? If you want, I can e-mail you my latest RegEx filters. LogSat Support can send me your address to mail to if you feel OK with that. Dan S.

Steve Brown Members Profile Send Private Message Find Members Posts Add to Buddy List Guest Group	Post Options Post Reply Quote Steve Brown Thanks(0) Quote Reply Posted: 17 October 2003 at 11:50am
	Dan, I have tried some of your regexs from previous posts but they didn't seem to do anything. I'm going to check on what version of SpamFilter I'm running since it might be different with a newer one. If I'm behind, I plan to upgrade to the latest stable release. You're right about the garbage HTML tags. A closer look at the HTML source of the spam messages revealed that they are throwing random garbage tags in between letters of normally blocked words like you said (not that I doubted it). If you could send me the list of regexs you're running so I could try that in conjunction with an update to my SpamFilter if needed, that would be great. Thanks, Steve

Desperado Members Profile Send Private Message Find Members Posts Add to Buddy List Senior Member Joined: 27 January 2005 Location: United States Status: Offline Points: 1143	Post Options Post Reply Quote Desperado Report Post Thanks(0) Quote Reply Posted: 17 October 2003 at 12:11pm
	Steve, Send an email to support@logsat.com and ask Roberto to send Dan S's email address to you.

Brian Lewis Members Profile Send Private Message Find Members Posts Add to Buddy List Guest Group	Post Options Post Reply Quote Brian Lewis Thanks(0) Quote Reply Posted: 03 November 2003 at 4:18pm
	Dan S. could you email me a copy of your RegEx filter as well? I'd really like to have a good starting base for the Spamfilter I just enabled at our company to work from and tweak. blewis@#REMOVEME#alexanders.net must take out #REMOVEME# from the above address I appreciate it.

LogSat Software

Site Navigation[Skip]

Spam Filter ISP Support Forum

Keyword filtering REGEX