|
Thanks for the keyword list and feedback but we still aren't on the same page.
I started with your keyword list many months ago and we have continued to add and grow the list. Your keyword list was simply a starting poing and we had too much coming through so we continued to add to this list.
In your keyword list I don't see you using the "Subject:" in your list, why is this?
In our experience you need both keywords in the body and subject. If we put viagra in our keyword list it would NOT be blocked if it were in the subject line only so we have keywords listed for both instances sometimes.
Also there are only 3-4 lines of Regex in the entire keyword list. I understand Regex is powerful (if anyone can take the time to understand RegEx) but you must have more than this on your server?
I had to remove ((<font color="#ffffff">.*){5}) as people were complaining about HTML emails from valid companies like Home Depot, Staples etc being blocked.
I will PAY someone out there to mentor me on how to write the RegEx but in the meantime my original post was about emails that are getting through because the use very common subject lines that we cannot block and then source code to pull down an image from an external site. Here is the code I'm talking about:
<html><body>
<center><a href=" undefined" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://thethingsonline.com" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://thethingsonline.com "><img src=" http://www.thethingsonline.com/acq30LL2fy5gkpc.gif" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://www.thethingsonline.com/acq30LL2fy5gkpc.gif" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://www.thethingsonline.com/acq30LL2fy5gkpc.gif " border=0></a></center>
</body></html>
The subject line said "Hello"
We have started to block many of the href domains like thethingsonline.com
Is there a way to block these or do I just need to learn more about RegEx?
Take a look at this one.
What looked like Vicodin in simple text looked like this in the source code: V<kcumfutxe6xdp>i<kgx5xs2gg75172>co<kc3ohrq1xy3ea>din
Although you don't suggest our keyword list is around 1300 lines but it works other than the code above I'm trying to block. I'd like to learn more about RegEx so if someone can mentor me I'm happy to pay!
|