Print Page | Close Window

keyword filter

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5383
Printed Date: 26 December 2024 at 5:20am


Topic: keyword filter
Posted By: Zoro
Subject: keyword filter
Date Posted: 23 November 2005 at 4:50am
I add some words in keyword filter, but it seems not working.
I send a mail with a world in subject that I expect to be rejected, instead it is  regularly forwarded.
Thank you for any suggestion


Replies:
Posted By: LogSat
Date Posted: 23 November 2005 at 7:49am
Please post the entries you are adding to the keyword file, along with the original source of the email so we can try to help. Please note that Microsoft Outlook and a few other email clients will drastically change the email's content/format when they display it on screen, while SpamFilter will perform text searches in the original's email source.

-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP

Posted By: Zoro
Date Posted: 23 November 2005 at 11:10am
These are some words in my keyword filter

(\bsex\b)
(\bc[\s-_.]*i[\s-_.]*a[\s-_.]*l[\s-_.]*i[\s-_.]*s[\s-_.]*\b)
((?i)(\bcialis\b)|(\bc.i.a.l.i.s\b))
((?i)(you[\s-_.]*visit[\s-_.]*illegal[\s-_.]*websites))

the first expression works rejecting the word sex
the second one block cialis and some variants (c.i_a-l i s, etc)
I found the third in the forum, and it should work as the second, but it doesn't
I wrote the 4th to reject a full sentence occurrence: it doesn't.

Posted By: Zoro
Date Posted: 25 November 2005 at 4:37am
I learned to add 'Subject' to make SF find keywords in the mail subject:
(\bSubject:\b \bcialis\b)
will find the word cialis only if it's in the mail subject
while
(\bcialis\b) will find cialis only if it is in the mail body, won't if only in subject

Is this the right way?

Posted By: briandayton
Date Posted: 02 December 2005 at 6:39pm
Another thing that you need to take in consideration is that spammers also utilize unicode to get past filters. MS Outlook may show you a subject line with the word sex in it, but viewing the message header may show that the entire subject is in unicode format.  You are on the right path with prefixing your regex with 'subject:' that will give you a better chance to match what you are trying to block.

Posted By: Guests
Date Posted: 30 December 2005 at 4:33am

hi

Im facing the same problem. I do have prefixed "Subject" before those words, but mostly its not working. even the simple straight words are not filtering, and in some cases, it just prefix SPAM in the subject line and send that mail.

So please do help me, what should i do now.

Raja Raheel

Posted By: briandayton
Date Posted: 30 December 2005 at 10:48am
Be sure that the subject you are referring to is the one that is read from the headers and not the subject line you see when viewing the email in apps such as MS Outlook.  The email header information is where the regex matches against and this is where you may find your issue at.  When I configure regexes to filter on, I always copy the email header info in full and test against that for subject filter.


Print Page | Close Window