Antispam Custom Rules - Regex
Question asked by Jay Altemoos - January 5, 2017 at 12:04 PM
Unanswered
So I have a weird issue happening that maybe someone could shed some light on. I have a few RegEx custom rules setup for Anti-spam. One of the rules fire off on emails that don't include the regex words it looking for.
 
For example I have a regex setup to trap for the word viagra in the raw content of the message. The RegEx is as follows:
(?i)[v\\]+/?.?[i:1!\|]+.?[a@/]+\\?.?[gq]+.?r+.?[a@/]+\\?
 
I used a program I found online called RegEx Coach to test the rule and it appears to work in the software, but for whatever reason the SM Antispam claims the word viagra is in the raw content somewhere when it clearly is not. i view the raw content with a text editor(Notepad++) searched for viagra and also used the regex I placed above and found nothing in the message other than the listing that SM puts in the header for that rule which I have named Viagra-RC. For now I shut off the custom rules because now I can't trust them. Does SM use standard regex rules? Or is this feature broken in 15.4.6151?

2 Replies

Reply to Thread
1
Andrew Lupton Replied
I'm a little discouraged by the fact that there is so little information available on applying regex rules to SmarterMail custom filters. Very little in the forums and none at all in the knowledgebase. I have tried some of the suggested filters from other posts here as well as numerous variations of standard Regex entries and NONE work. No errors appear in the logs, no regex filter actions appear and I'm starting to wonder whether or not Enterprise 15 supports regex at all...? Regex is a powerful tool for this purpose and I don't understand why SmarterMail doesn't support it better.
 
Does ANYONE have a simple list of workable regex entries for TLDs as well as keywords in the header?
0
Matthew Leyda Replied
I'm in the same boat. In ver 15.7.6474 I tried the list below in a custom filter to block certain TLD's . I cant seem to get it working.
 
.+\.accountant>$
.+\.bid>$
.+\.br>$
.+\.cf>$
.+\.click>$
.+\.club>$
.+\.cricket>$
.+\.date>$
.+\.download>$
.+\.eu>$
.+\.faith>$
.+\.fr>$
.+\.ga>$
.+\.gq>$
.+\.link>$
.+\.lol>$
.+\.ml>$
.+\.ninja>$
.+\.party>$
.+\.pw>$
.+\.racing>$
.+\.review>$
.+\.rocks>$
.+\.rs>$
.+\.science>$
.+\.space>$
.+\.tk>$
.+\.top>$
.+\.tr>$
.+\.trade>$
.+\.wang>$
.+\.webcam>$
.+\.website>$
.+\.win>$
.+\.work>$
.+\.xyz>$
Kendra Support
http://www.kendra.com
support@kendra.com
425-397-7911
Junk Email filtered ISP

Reply to Thread