Ok let me setup a simple example to ask my question. If I want to block "bob" you put that in your keyword list.

Now if I wanted to block "bob" and "b o b" I put this line in my keywords:

(bs*os*b) the s looks for a space and * looks for zero or more spaces between letters

I've tested this and it works well but you have to be very careful using it.

Now I wanted to take it one more step using the "|" to stop things like b-o-b so I tried:

(b(s|-*)o(s|-*)b) and it worked great BUT it's not only going to block "b o b" but it will block "bob" also. So I tried to use a comma to add a keyword to the front or back of this and I cannot get it to work. eg:

(b(s|-*)o(s|-*)b),test

So it SHOULD block "bob test" or "b o b test"

But it's not working.

Am I using the proper syntax or the correct number of brackets or what?

I lost my mind this holiday season so any help would be appreciated.

Thanks,

Bob

Sorry for my rambling I think I'm getting close to an answer but here's another way to say it.

Say we are going to block "online drugs" we add:

online,drugs

to the keyword list but we also need the variations using cheap drugs and online pharmacy so it now would read

cheap|online,drugs|pharmacy or we could use brackets

(cheap|online),(drugs|pharmacy) now if I wanted to look for upper/lower case

((?i)(cheap|online),(drugs|pharmacy))

At this point everything is ok but if we take to the next level and block anyone putting a space or hypen between letters then I start getting string errors. I'll just use one word to as an example so this doesn't get too long

((?i)(c(s|-*)h(s|-*)e(s|-*)a(s|-*)p|online),(drugs|pharmacy))

When I do this I start getting string errors in my log and I'm pretty sure I'm not using the proper amount of brackets in the correct places?

Once I start adding (s|-*) between the letters of "cheap" do I need another set of brackets to enclose the word and then another set to enclose "cheap|online" ????

So back to my original post I have found this to work well between letters

(s|-*) as it will look for zero or more of both space and hypen but you have to be careful with it, if you put this in your keywords by itself

c(s|-*)h(s|-*)e(s|-*)a(s|-*)p

it will not only block any variation of "c h e A p" or "c-h-e-a-p" but it will also block the plain word "cheap" and now you have people upset with you.

So I tried to use this rule with "|" and "," to put more keywords together and that's where my troubles started.

Sorry for the long post but I hope this makes more sense.

Thanks,

Bob

Now we are on the same wave length and I wonder if this is the problem. You use comma's to separate keywords you want the filter to find anywhere in the email body. This is a function of SpamFilter coding not RegEx.

So the Million dollar question :-) that I'm trying to get to:

Can you use two different RegEx rules on the same line AND separate them by comma's so the rule will find two keywords in an email?

Does this help?

Roberto,

Can you give us some input here? I think Dan is saying the same this as me but clarify:

Is it ok to use comma's when seprating keywords EXCEPT when you use RegEx on both sides of the comma?

This is one of my top rules and obviously it's working well:

((?i)cheap|online,(d(\^|\s|-|\.*)r(\^|\s|-|\.*)u(\^|\s|-|\.*)g(\^|\s|-|\.*)s))

This rule first finds cheap or online THEN looks for any variation of the word "drug"

d r u g

d.r.u.g

d-r-u-g

or any variation

d.r u-g

But as soon as I try to add any RegEx to the "cheap or online" the rule stops working?

I'm still doing some testing and I think this will work but I'm not getting my escape brackets in the correct spot or enough/too many of them.

I'll post more as I find more but Roberto may have some better insight for us?

Dan or Roberto,

What RegEx would you use to replace a comma in the fashion I'm trying to use it to "AND" two "expressions" or keywords together in an email?

I'd love to use (\s*) between each letter of mortgage but using the * will also block the actual word "mortgage."

So I need to combine a couple keywords like

approved,((m(\s*)o(\s*)r(\s*)t(\s*)g(\s*)a(\s*)g(\s*)e))

What would you use to replace the comma?

Thanks in advance,

Bob