Print Page | Close Window

Regex Help

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=1413
Printed Date: 15 March 2025 at 4:34pm


Topic: Regex Help
Posted By: Guests
Subject: Regex Help
Date Posted: 17 July 2003 at 4:39pm

I need help with regex

I have put into my keywords   src="http  to block any email that has images that the source is a website, works great, the problem is that i need to exclude anything that has "atx" in the http://www." CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://www. address, ive tried a few things but i just cant get it right, any help would be greatly appreciated, Thanks




Replies:
Posted By: Desperado
Date Posted: 17 July 2003 at 4:52pm

Trinidad,

src="http   is way to general a block.  For example, just about everything you get from Microsoft will get blocked by this (which may or may not be a bad thing).  I have worked with several iterations of this kind of block.  I am still changing them as I gather more statistics but here is my latest:

The first on gets rid of url's using "Dotted IP" notation rather than FQDN's.  This can be dangerous but we have taken the stance that if you can't put a DNS host name on it, we don't want it.

(href=" http://+[\d" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://+" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - http://+ [\d])

This one detects http OR 3dhttp  Then //  Then 0 - 15 of ANY character Then a % OR an @  followed by just about anything.


((http|3dhttp)://.{0,15}( mailto:%|@)[(\d|\w" CLASS="ASPForums" TITLE="WARNING: URL created by poster. - %|@)[(\d|\w )])

While they don't drop all the "remote" refs, they are doing an excellent job with very few "False Positives"

Hope this helps.

Dan S.

 

 




Print Page | Close Window