Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - String matching error
  FAQ FAQ  Forum Search   Register Register  Login Login

String matching error

 Post Reply Post Reply
Author
Shade View Drop Down
Groupie
Groupie
Avatar

Joined: 20 April 2006
Location: France
Status: Offline
Points: 45
Post Options Post Options   Thanks (0) Thanks(0)   Quote Shade Quote  Post ReplyReply Direct Link To This Post Topic: String matching error
    Posted: 06 May 2008 at 8:45am
Dear All,

I've got a "String matching error" in my logs. I know SF 4.x skip bad regex, but is there a way to know which regex doing this error ? I've got about 2000 differents complex regex lines, and it's a bit complex to check it all...

Thank you for replies !

Best regards,
Shade.

Back to Top
Desperado View Drop Down
Senior Member
Senior Member
Avatar

Joined: 27 January 2005
Location: United States
Status: Offline
Points: 1143
Post Options Post Options   Thanks (0) Thanks(0)   Quote Desperado Quote  Post ReplyReply Direct Link To This Post Posted: 06 May 2008 at 10:27am
Shade,
 
The log entry itself should indicate the expression but I need to go back a few months in my logs to find an example.
The Desperado
Dan Seligmann.
Work: http://www.mags.net
Personal: http://www.desperado.com

Back to Top
Shade View Drop Down
Groupie
Groupie
Avatar

Joined: 20 April 2006
Location: France
Status: Offline
Points: 45
Post Options Post Options   Thanks (0) Thanks(0)   Quote Shade Quote  Post ReplyReply Direct Link To This Post Posted: 06 May 2008 at 11:01am
Thank you for reply;

Here is some lines of my logs :

05/06/08 00:00:05:842 -- (948) String matching error for (received: from 99.150.191.217 by XXXX (spamfilter); thu, 6 may 2008 00:00:05 +0200 -- received: from [51.49.140.233] (helo=pdu) --     by adsl-99-150-191-217.dsl.sfldmi.sbcglobal.net with smtp (exim 4.62 (freebsd)) --     id 1k˜2k˜-0001op-2 --and-- (.) : TRegExpr(exec): Not Assigned Expression Property

But in fact, I can't see any expression of this type in my regex list...

Thank you for help... Again Big%20smile
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 06 May 2008 at 4:31pm
Shade,

I think the RegEx in your list causing issues is the following:

(.)
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Shade View Drop Down
Groupie
Groupie
Avatar

Joined: 20 April 2006
Location: France
Status: Offline
Points: 45
Post Options Post Options   Thanks (0) Thanks(0)   Quote Shade Quote  Post ReplyReply Direct Link To This Post Posted: 06 May 2008 at 6:53pm
Roberto,

You've got this list in my zip... As you can see, there's no (.)...
Thank you for help on this one ! :-)
Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4104
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 06 May 2008 at 10:27pm
Tricky one. Check your two keywords:

(. omari.com)
(. etcomvad.com)

They have a hidden #0A character (line feed) after the period. That confused the logging as well!
Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
Shade View Drop Down
Groupie
Groupie
Avatar

Joined: 20 April 2006
Location: France
Status: Offline
Points: 45
Post Options Post Options   Thanks (0) Thanks(0)   Quote Shade Quote  Post ReplyReply Direct Link To This Post Posted: 09 May 2008 at 1:51am
That was it ! Thank you again roberto !

Best regards.

Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.313 seconds.