| View previous topic :: View next topic |
| Author |
Message |
sordomundo@pobox.com
Guest IP: 66.75.*.*
|
Posted: Tue Jun 03, 2003 5:22 am Post subject: Filter Question |
|
|
I get a lot of spam from an alphabet spammer from
pobox.com. Most are the result of multiple unames
CC'd at pobox, such as "sxxxx@pobox.com", "syyy@
pobox.com", "sordomundo@pobox.com".
I have tried many, many configurations of expressions
to filter on "multiple instances of unames @pobox.com
with no luck what so ever. I would like to just dump any
mail with multiple personalities listed in the CC: area.
Would any of you expression experts care to generate
an expression to cure my ills. I'd be eternally grateful.
Bob
sordomundo@pobox.com
|
|
| Back to top |
|
 |
Ikeb
Special Response Team Forums Admin
 Joined: Apr 20, 2003 Posts: 16515
|
Posted: Tue Jun 03, 2003 5:47 am Post subject: |
|
|
I'm just learning about more advanced filter expressions so I'm not sure but how about
| Code: | | The 'CC' Field | contains RegExpr | (.+@pobox.com){5} |
Change the {5} to whatever number best suits your situation.
|
|
| Back to top |
|
 |
sordomundo@pobox.com
Guest IP: 66.75.*.*
|
Posted: Tue Jun 03, 2003 6:11 am Post subject: |
|
|
| wrote: | I'm just learning about more advanced filter expressions so I'm not sure but how about
| Code: | | The 'CC' Field | contains RegExpr | (.+@pobox.com){5} |
Change the {5} to whatever number best suits your situation. | Thanks, I'll give that a try....
Bob
|
|
| Back to top |
|
 |
sordomundo@pobox.com
Guest IP: 66.75.*.*
|
|
| Back to top |
|
 |
gary
Lieutenant
 Premium Member
 Joined: Dec 22, 2002 Posts: 260 Location: Dallas/Ft. Worth, USA
|
Posted: Tue Jun 03, 2003 4:52 pm Post subject: |
|
|
That should have done it for you. In fact, I just ran the TRegExpr test program, copied and pasted the expression and your CC line, and it worked. Would you mind checking your regular expression to be sure there are no spaces lurking around in there from when you pasted? _________________ Gary
|
|
| Back to top |
|
 |
sordomundo@pobox.com
Guest IP: 66.75.*.*
|
Posted: Tue Jun 03, 2003 5:26 pm Post subject: |
|
|
I just ran a couple test e-mails and it didn't work.
Therein lies my frustration after many tries. It seems only exact match word filters work.
|
|
| Back to top |
|
 |
sordomundo@pobox.com
Guest IP: 66.75.*.*
|
Posted: Tue Jun 03, 2003 5:38 pm Post subject: |
|
|
My apologies, my friends filter was blocking the operation and it does work as written. Thanks to both of you for your patience and help.
|
|
| Back to top |
|
 |
gary
Lieutenant
 Premium Member
 Joined: Dec 22, 2002 Posts: 260 Location: Dallas/Ft. Worth, USA
|
Posted: Tue Jun 03, 2003 5:42 pm Post subject: |
|
|
Hmm, that sounds like "contains" instead of "contains regExpr" is being used. If you're sure "contains regExpr" is selected under the "Edit Filter" dialog, can you take a look at the raw filter in the filters.txt file and tell us what it says? Maybe just copy that line into a response. _________________ Gary
|
|
| Back to top |
|
 |
TimeGhost
Captain

 Joined: Apr 11, 2003 Posts: 747 Location: USA
|
Posted: Tue Jun 03, 2003 8:03 pm Post subject: |
|
|
I wasn't aware that MWP supported the repeat count RegExp syntax. The FAQ does not mention it. I know {n} works in the MS RegExp library contained in vbscript.dll. Is that what MWP's RegExp is based on?
|
|
| Back to top |
|
 |
gary
Lieutenant
 Premium Member
 Joined: Dec 22, 2002 Posts: 260 Location: Dallas/Ft. Worth, USA
|
Posted: Tue Jun 03, 2003 8:26 pm Post subject: |
|
|
It's my understanding that it's based on a freeware library written by Andrey V. Sorokin, which is in turn a port of some Henry Spencer V8-routines, which implement a subset of Perl Regular Expressions. It will also handle some of the (?...) modifiers.
You can go here and get a test program, "TRegExpr", too!
http://anso.da.ru _________________ Gary
|
|
| Back to top |
|
 |
Ikeb
Special Response Team Forums Admin
 Joined: Apr 20, 2003 Posts: 16515
|
Posted: Tue Jun 03, 2003 8:58 pm Post subject: |
|
|
| TimeGhost wrote: | | I wasn't aware that MWP supported the repeat count RegExp syntax. The FAQ does not mention it. I know {n} works in the MS RegExp library contained in vbscript.dll. Is that what MWP's RegExp is based on? |
Good point. I just found out about it by looking at some of Gary's filters. It looks like FireTrust could take an example from Gary's most excellent documentation.
Gary, do you have the complete syntax documentation for the RegExpr used by MWP?
BTW, how do you use the TRegExpr test program?
|
|
| Back to top |
|
 |
sordomundo@pobox.com
Guest IP: 66.75.*.*
|
Posted: Tue Jun 03, 2003 9:01 pm Post subject: |
|
|
for Gary, line reads:
[enabled],"Multiple Pobox",Filtered,16711680,OR,Hidden,Delete,To,containsRE," (.+@pobox.com){3}",CC,containsRE," (.+@pobox.com){3}"
I had my own address in the Friends list which was over riding the action of the above filter expression.
All is well now and perhaps you may want to include a similar filter in your filter offering as alphabet spammers are quite popular, at least in my experience.
Thanks again to all......
|
|
| Back to top |
|
 |
|
|