Spamihilator

Hi!

You're wellcome! :)

Regards, Chactory

Sure Bro,

I am working over few other reg exps, based on over 300-400 spam mails from last month+, I will share them soon.

Hi,

that's a cool RegExp! It will filter "quick click", which sounds very specific for spam mails. You are using the "." sign as wildcard, but together with the "?" only, so I don't expect false positive recognitions. If you would permit me to use this idea, I would like to add it to my spam-word list.

Regards, Chactory

Yes indeed,

I do realise that, and that's why creating reg exps may come hard after few weeks... I modified this reg exp:

[code]\b([Qq]uick).?[Cc].?l.?[i1].?c.?k\b[/code]

Hi together,

in my opinion, you have to be careful not to use too general expressions, for this could yield to false positive filterings.
E.g., if you filter "here", you will filter many non-spam mails with the commonly used word "here" in them. Like Quellcore wrote, "(knock|click)here" is already much more specific.
The expression "bed(ing)" will in fact filter "bed" as well as "beding". If you create an expression simply "beding" (or completely: "(?i)\bbeding\b"), this will particularly filter your searched word.

Regards, Chactory

Thanks a lot,

it seems to match perfectly !

I got a 1x question ( I know I know I'm buggy) :D

I would like to filter out "beding" word but I don't want to filter "bed" word, so how should I set reg exp?

smthing like this:

[code]\bbed(ing)\b[/code]

or maybe there is other, better way with "." sign ??

[quote="HanSatan"]Tell me 1x thing, if I would like to disable lines like "knock here" or "click here" [/quote]
How about:
[code](?i)(knock|click)\shere\b[/code]

Regards,
Quellcore

Thanks for support Quellcore.

Tell me 1x thing, if I would like to disable lines like "knock here" or "click here" can I use such a reg exp:

[code](?i).\shere[/code]
Yes I know that it will also remove "same here",

or maybe

[code](?i)(knock)?(click)?\shere[/code]
Or maybe some other ideas/suggestions?

Hallo HanSatan!

I also tried it with Regex Coach and here it works (EDIT: if it's not at the very end of the searched string).
"/D" stands for any Non-Digit, without that the Regular expression would also kick in for "[i]New York, NY, 123456[/i]"
Sorry, it looks like it doesn't work at the very end of a text.
Try [code](?i)New\sYork,\sNY,\s[0-9]{5}\b[/code] instead.


Regards,
Quellcore

Indeed,

but lemme ask, why did you add \D in the end of the line ?

I checked it with regex coach but it doesn't seem to work with \D ;)

[quote="HanSatan"](?i)New\sYork,\sNY,\s[0123456789]{5,20}

But maybe there's some other (better way) to filter it out?[/quote]
The number part iat the end could be cleaned up:
[code](?i)New\sYork,\sNY,\s[0-9]{5}\D[/code]
This will require the ZIP Code part of your example to have exactly 5 digits.

Regards,
Quellcore

Hi,
my filter sequence is rather akin to your's. I just don't use the attachment filter. The AIR Filter caused false positive sieving with me, because in my company, there are listed similar mail addresses in non-spam mails often.
Yes, the Link Filter works as an url filter. I'm really enthusiastic about it!
You may want to try the DCC Filter. When you enter a higher threshold than default (I'm using 1200), then you won't achieve false positives often.
Regards, Chactory

[img]http://www.spamihilator.com/forum/download/file.php?id=81[/img]

Hi,

excuse me, the hyperlink is http://www.chactory.de/downloads/spampoints.zip, of course. The board likes it more, when you use BBCode to post hyperlinks: [url=http://www.chactory.de/downloads/spampoints.zip]spampoints.ini[/url].

Thank you for testing my spampoints.ini in the next days.

The cm.vtr.net server seems to be in Chile, the virtua.com is registered in Connecticut, US ... [quote="HanSatan"](my own e-mail address as sender)... I need to talk with server admin :)[/quote] :lol:

Regards, Chactory

I cant post links here I dunno why, board script doesn't lemme throught.

chactory.de/ownloads/spampoints.zip right? if yes I will check it throught few next days.

Concerning my spam emails, they come from many hosts pc-114-102-162-190.cm.vtr.net,
c9522df7.virtua.com . br etc. Anyway most of those cases could be solved if my mail server would be patched properly, because most of them contain:

From: "Kaanxmjgrm" <hansatan@hansatan.com>
Envelope-to: hansatan@hansatan.com

(my own e-mail address as sender)...

I need to talk with server admin :)

BTW

What do you think about following priority list:

[attachment=0]2009-02-21_144126.jpg[/attachment]

Is it fine? And 1x thing, url filter = link filter right ?

Hi,

[quote="HanSatan"]approx. 25-40% of my spam mails contain this line so it's helpfull ;)[/quote]this is strange ... where do those mails come from? :lol:

Regards, Chactory