Print Page | Close Window

Keyword filtering REGEX

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=2239
Printed Date: 07 December 2025 at 11:23pm


Topic: Keyword filtering REGEX
Posted By: Guests
Subject: Keyword filtering REGEX
Date Posted: 16 October 2003 at 5:13pm

We are getting more and more messages skating by our SpamFilter server by misspelling commonly filtered words.

Example: vi.agra

This might be very simple but I cannot get the regex to catch this scenario for whatever reason.  Probably because the " . " is some sort of operator for the regex statement.  Can someone provide me with an example regex that would catch the keyword "viagra" even with a " . " between the letters?


Replies:
Posted By: Desperado
Date Posted: 16 October 2003 at 10:01pm

Steve,

In a case like this, it really is best to try to find the pattern that the Spammers are using to obscure the message.  Ususally, there are a boat load of html tags and coments that break up the message so that normal, literal keyword filters won't find anything. Have you looked at any of my posts on regular expressions?  If so, did this particular message get past them?

If you want, I can e-mail you my latest RegEx filters.  LogSat Support can send me your address to mail to if you feel OK with that.

Dan S.

 

Posted By: Guests
Date Posted: 17 October 2003 at 11:50am

Dan,

I have tried some of your regexs from previous posts but they didn't seem to do anything.  I'm going to check on what version of SpamFilter I'm running since it might be different with a newer one.  If I'm behind, I plan to upgrade to the latest stable release.

You're right about the garbage HTML tags.  A closer look at the HTML source of the spam messages revealed that they are throwing random garbage tags in between letters of normally blocked words like you said (not that I doubted it). 

If you could send me the list of regexs you're running so I could try that in conjunction with an update to my SpamFilter if needed, that would be great.

Thanks,
Steve

Posted By: Desperado
Date Posted: 17 October 2003 at 12:11pm

Steve,

Send an email to mailto:support@logsat.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - support@logsat.com and ask Roberto to send Dan S's email address to you.

 

Posted By: Guests
Date Posted: 03 November 2003 at 4:18pm

Dan S. could you email me a copy of your RegEx filter as well?  I'd really like to have a good starting base for the Spamfilter I just enabled at our company to work from and tweak.

mailto:blewis@#REMOVEME#alexanders.net" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - blewis@#REMOVEME#alexanders.net

must take out #REMOVEME# from the above address

I appreciate it.

 


Print Page | Close Window