2
Spam Checks : Custom Rule w/ Regular Expression for TLD Filtering
Question asked by JJ M. - 10/28/2020 at 11:35 AM
Unanswered
Hello everyone,

I'm having trouble setting up a Regular Expression Custom Rule for Spam Check to assign a weight based on TLD on Build 7593.

I've set up the rule as shown in the attached image with an applicable weight and have it toggled on for Spool Filtering, but the rule seems to never be applied. I've tried stopping/restarting the service and other variations on the RegEx statement without luck.

Any helpful tips would be appreciated!

Thanks

2 Replies

Reply to Thread
0
Employee Replied
Employee Post
@JJ, I configured a custom spam rule as you configured above, and with the latest Build 7593, I am showing that the message is being scored. Below I included the delivery logs for both test@test.monster and test@test.top as well as the headers of one of the messages.  Can you provide delivery log and the spam check logs for any sessions where the custom rule is not running?

[2020.10.28] 14:51:47.114 [14954000] Delivery started for test@test.monster at 2:51:47 PM
[2020.10.28] 14:51:50.168 [14954000] Added to SpamCheckQueue (1 queued; 0/30 processing)
[2020.10.28] 14:51:50.176 [14954000] [SpamCheckQueue] Begin Processing.
[2020.10.28] 14:51:50.182 [14954000] Blocked Sender Checks started.
[2020.10.28] 14:51:50.185 [14954000] Blocked Sender Checks completed.
[2020.10.28] 14:51:50.204 [14954000] Spam Checks started.
[2020.10.28] 14:51:50.314 [14954000] Spam Check results: [_CUSTOMRULES: Top Level Domains: 999;]
[2020.10.28] 14:51:50.314 [14954000] Spam Checks completed.
[2020.10.28] 14:51:50.314 [14954000] Removed from SpamCheckQueue (0 queued or processing)
[2020.10.28] 14:51:53.180 [14954000] Added to LocalDeliveryQueue (1 queued; 0/50 processing)
[2020.10.28] 14:51:53.180 [14954000] [LocalDeliveryQueue] Begin Processing.
[2020.10.28] 14:51:53.203 [14954000] Starting local delivery to remmett@smartermail.io
[2020.10.28] 14:51:53.336 [14954000] Process delivery status notification step from local recipient success. Recipient: [remmett@smartermail.io], Notify: [], Delivered: [True], Forwarded: [False], Deleted: False
[2020.10.28] 14:51:53.354 [14954000] Delivery for test@test.monster to remmett@smartermail.io has completed (Delivered) Filter: Spam (Weight: 999), Action (Global Level): PrefixSubject
[2020.10.28] 14:51:53.354 [14954000] End delivery to remmett@smartermail.io (MessageID: <dbc7687634e547b5800093d566088596@com>)
[2020.10.28] 14:51:53.358 [14954000] Removed from LocalDeliveryQueue (0 queued or processing)
[2020.10.28] 14:51:56.191 [14954000] Removing Spool message: Killed: False, Failed: False, Finished: True
[2020.10.28] 14:51:56.192 [14954000] Delivery finished for test@test.monster at 2:51:56 PM    [id:202014954000]
[2020.10.28] 14:56:47.533 [14954001] Delivery started for test@test.top at 2:56:47 PM
[2020.10.28] 14:56:50.535 [14954001] Added to SpamCheckQueue (1 queued; 0/30 processing)
[2020.10.28] 14:56:50.536 [14954001] [SpamCheckQueue] Begin Processing.
[2020.10.28] 14:56:50.539 [14954001] Blocked Sender Checks started.
[2020.10.28] 14:56:50.541 [14954001] Blocked Sender Checks completed.
[2020.10.28] 14:56:50.541 [14954001] Spam Checks started.
[2020.10.28] 14:56:50.549 [14954001] Spam Check results: [_CUSTOMRULES: Top Level Domains: 999;]
[2020.10.28] 14:56:50.549 [14954001] Spam Checks completed.
[2020.10.28] 14:56:50.550 [14954001] Removed from SpamCheckQueue (0 queued or processing)
[2020.10.28] 14:56:53.538 [14954001] Added to LocalDeliveryQueue (1 queued; 0/50 processing)
[2020.10.28] 14:56:53.538 [14954001] [LocalDeliveryQueue] Begin Processing.
[2020.10.28] 14:56:53.542 [14954001] Starting local delivery to remmett@smartermail.io
[2020.10.28] 14:56:53.572 [14954001] Process delivery status notification step from local recipient success. Recipient: [remmett@smartermail.io], Notify: [], Delivered: [True], Forwarded: [False], Deleted: False
[2020.10.28] 14:56:53.575 [14954001] Delivery for test@test.top to remmett@smartermail.io has completed (Delivered) Filter: Spam (Weight: 999), Action (Global Level): PrefixSubject
[2020.10.28] 14:56:53.575 [14954001] End delivery to remmett@smartermail.io (MessageID: <1991ddbbe6264b50ab4b3cbf58a70bd7@com>)
[2020.10.28] 14:56:53.575 [14954001] Removed from LocalDeliveryQueue (0 queued or processing)
[2020.10.28] 14:56:56.541 [14954001] Removing Spool message: Killed: False, Failed: False, Finished: True
[2020.10.28] 14:56:56.541 [14954001] Delivery finished for test@test.top at 2:56:56 PM    [id:202014954001]

0
Patrick Mattson Replied
I am still using an older version and I see my blocks in my logs. I wanted to share the list I use, maybe someone can benefit.
.+\.accounting>$
.+\.asia>$
.+\.bid>$
.+\.best>$
.+\.buzz>$
.+\.click>$
.+\.club>$
.+\.country>$
.+\.cricket>$
.+\.cyou>$
.+\.date>$
.+\.download>$
.+\.faith>$
.+\.fun>$
.+\.gdn>$
.+\.guru>$
.+\.host>$
.+\.icu>$
.+\.loan>$
.+\.men>$
.+\.monster>$
.+\.online>$
.+\.party>$
.+\.rest>$
.+\.review>$
.+\.science>$
.+\.space>$
.+\.stream>$
.+\.study>$
.+\.top>$
.+\.trade>$
.+\.webcam>$
.+\.website>$
.+\.win>$
.+\.work>$
.+\.world>$
.+\.xyz>$
.+\.zw>$

Reply to Thread