Print Page | Close Window

How to RegEx only body of a message?

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6803
Printed Date: 05 February 2025 at 6:03pm


Topic: How to RegEx only body of a message?
Posted By: microtech
Subject: How to RegEx only body of a message?
Date Posted: 19 February 2010 at 7:48pm
Hi Everyone,
I have tested samfilter for a while and very happy with how it works. however, have a question hoping someone has an answer willing to share.

I have a Keyword RegEx filter that looks for numeric IP numbers in each inbound message:

((?i)http://+([\d]{1,3}[\.+]){3}[\d]{1,3})

a while back Barracuda spamfilter started to add IP-numbers to message header area - something like this ...

X-Barracuda-Connect: www1.ethostream.com[66.195.129.11]
X-Barracuda-URL: http://66.195.129.15:8000/cgi-bin/mark.cgi
X-Barracuda-Virus-Scanned: by Barracuda Spam Firewall at ethostream.com

Now, spamfilterISP generates more false positives when sender is using Barracuda. My question is:

Is there any directive that i can apply to my RegEx filter so filter scans only body of message (and ignore message header)? Please let us know.

Thank you.


Replies:
Posted By: LogSat
Date Posted: 22 February 2010 at 11:13pm
microtech,

By default SpamFilter will only check the "Received:" headers in an email - all other headers are skipped for the keyword checks. You can alter this default behavior via the following two settings in the SpamFilter.ini file:

;if ScanReceivedHeaders is set to 1 SpamFilter will add the "Received:" headers to the text examined for keywords and statistical Bayesian searches.

ScanReceivedHeaders=1

 

;if ScanAllHeaders is set to 1 SpamFilter will add all email's headers to the text examined for keywords and statistical Bayesian searches.

ScanAllHeaders=0




-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Print Page | Close Window