Is a Pren ()  required if you use a RegEx in the From Email BlackList?

Example:  I want to use the following:

(\b[\d+]+([\-a-za-z0-9_\.\+])+@hotmail\.com)

Do I need to take the Paren's off or should I enter it as is?

Dan S

Dan,

All RegEx's are to be enclosed in parenthesis anywhere they are allowed. Since all lists allow the use of RegEx and normal text search, the parser needs to be able to identify which is a RegEx and which is a normal string. The way it does this is by considering anything enclosed by parenthesis a RegEx.

If it doesn't work this way you may have just found a new bug... Please let us know if so.

Roberto Franceschetti
LogSat Software

Roberto,

Thanks ... No, I havn't found a bug yet.  I just put on in before going to my daughters double header softball game and now I am home and will do a little testing before crashing (me that is ... not the software!). I will report any issues.

Dan

Jack,

The only "hotmail" I deal with are ones that, by hotmail's own information, never valid.  I am still refining that one to catch all invalid variations of hotmail addresses but the main one is to block addresses that start with a digit.  I have included that below.  Did you look at my mess in the post above?

(\b[\d+]+([\-a-za-z0-9_\.\+])+(@hotmail|@juno)\.com)

Try this in the RegEx test window of the SpamFilter application and you will see how it functions.

Regards,

Dan S.

I will try this one.

I did see your latest post, I'm currently tracking down an error from one of the regex I just added from an earlier post..

Jack,

What RegEx and what is the error?

Here is an example of what the hotmail one rejects (about 55 / hour).  Every little bit helps!

Regards,

Dan S.

The error I'm getting is the generic "string matching error."

 I *think* it's this one, but I'm still putting them back in one at a time to be sure.

( http://\w{0,6}%[\d" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http:// \w{0,6}%[\d])

Jack,

I hope it isn't that one ... it is one that blocks a fair amount on my system and I am not getting the error.  Last 8 hours 1093 blocks and not a single error.  Please let me know.

Dan

OK, I'm perplexed.  I removed and re-added one at a time, each of the following:

( http://\w{0,6}%[\d" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http:// \w{0,6}%[\d])
(<[!--]+[\x20]{0,1}[a-zA-Z0-9]{10,}[\x20]{0,1}[!--])
(<[!--]+[a-zA-Z0-9]{13,}(-->))
(href=" http://+[\d" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://+" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://+ [\d])
((<font color="#ffffff">.*){3,8})

For a while I was convinced it was ( http://\w{0,6}%[\d" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http:// \w{0,6}%[\d]) causing the error, but I added it back in just to make sure - no errors.  So now they are all in, and still no errors.  Strange.

I'll keep an eye on the log though to to be sure.

Jack,

If you missed an oppening or closing Paren, you may have gotten some strange results.

Are you fairly clear on what they do?  Also, did you see my warning about PayPal?

Dan

Jack,

Also try putting GSC-100 in you keyword list.  At least for now, it blocks something I can's seem to get with a RegEx ... ans a lot of them!

For all the good it will do, here is my current, very small, keyword list. I am still trying to disect the ones I don't get with my expressions.  I also do not want any false positives if I can help it and literal keywords seem to yield the most false blocks.

(<[!--]+[\x20]{0,1}[a-zA-Z0-9]{10,}[\x20]{0,1}[!--])
(href=" http://+[\d" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://+" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://+ [\d])
( http://\w{0,6}%[\d" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http:// \w{0,6}%[\d])
(<[!--]+[a-zA-Z0-9]{2}(-->))
((<font color="#ffffff">.*){3,8})
text-decoration: blink
98207.biz
herbalpillsonline
pillsavings
CLICK HERE TO START
thousands of other email providers
GSC-100
img src=3D" http://ww" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://ww" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://ww
is a one time mailing
Generic Viagara
Generic V1agara

Dan

Some of yours make a little sense to me, but not all. I'm new to RegEx, I'll get it eventually.

I also have these:

(v..gr.) 
(<font size =.0.>)
(<font size =.-1.>)

I have about 1000 literals - I pulled them from a list I found in the forum, I've not done any follow-up to see which are working and which are a waste, but I don't get too many compliants about false positives.  Plus, users can log in and re-queue them anyway.