yes, the filters on source forge may make communication of Perlscan difficult :(
Remote host said: 550-This message matches a blacklisted regular expression ....


Andrew van Tilburg wrote:

Ok, thanks Doug. The quarrantine-attachments.txt file is attached. I had to
send to your address as the [EMAIL PROTECTED] mail
server complained about blacklisted regular expressions.

Andrew.

all your additions are 'badly' formed (in multiple ways). As is noted in the quarantine-attachments.txt file, the proper format is: # Format: three columns # filename<TAB>size (in bytes)<TAB>Description of virus/whatever # OR: # string<TAB>Header<TAB>Description of virus/whatever

your entries are (for example):
*Yiagra*.*              Virus-Subject:
(Y should be v in above...need to get past filter)

are missing the DESCRIPTION (not critical but...)
and the regex's also needs attention. A few examples to accomplish what
it looks like you're trying to do
(again...letter Y used in obvious places should be replaced):

(?i).*(Yiagra|Y i a g r a|Y1agra|Ylagra).*<TAB>Virus-Subject:<TAB>e-crap
(?i).*(Yhentermine|Yhenterm1ne|Yhentermlne).*<TAB>Virus-Subject:<TAB>e-crap
(?i).*(Yanax|Y a n a x).*<TAB>Virus-Subject:<TAB>e-crap

BTW...the reason the example email you sent was "caught" is likely due
to the fact that you have this rule:
*Peter*.*               Virus-Subject:
and the email contains:
Dear Peter,





-------------------------------------------------------
This SF.Net email is sponsored by The 2004 JavaOne(SM) Conference
Learn from the experts at JavaOne(SM), Sun's Worldwide Java Developer
Conference, June 28 - July 1 at the Moscone Center in San Francisco, CA
REGISTER AND SAVE! http://java.sun.com/javaone/sf Priority Code NWMGYKND
_______________________________________________
Qmail-scanner-general mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/qmail-scanner-general

Reply via email to