Re: spamassassin rule set issue

2012-04-18 Thread Joseph Brennan
rawbody BLOCK_RULE2 /(\W|^)Orange(\W|^)/i Some good suggestions here already. While your original regexp should have worked in most cases, the optimal regexp for this situation is: /\borange\b/i And probably body, not rawbody. Rawbody won't match if the spammer obfuscates words with

Re: spamassassin rule set issue

2012-04-17 Thread Bowie Bailey
On 4/17/2012 8:03 AM, dhanushka ranasinghe wrote: > Hi.. guys > > i have following rule in place in spamassassin, > > rawbody BLOCK_RULE2 /(\W|^)Orange(\W|^)/i > score BLOCK_RULE2 50 > describe BLOCK_RULE2 Bad Word > > but one of my mails got blocked even-though its doesn't have word > "Orange" ,

Re: spamassassin rule set issue

2012-04-17 Thread Martin Gregorie
On Tue, 2012-04-17 at 15:18 +0200, Tom Kinghorn wrote: > > /\borange\b/i is what I'd use. > > > I should have added that the latest versions of grep understand Perl regex syntax, which can be useful for rapidly checking regexes before writing an SA rule. The main difference is that the regex shoul

Re: spamassassin rule set issue

2012-04-17 Thread Tom Kinghorn
On 17/04/2012 15:15, Martin Gregorie wrote: On Tue, 2012-04-17 at 14:39 +0200, Tom Kinghorn wrote: Indeed, and /^Orange$/i will only match Orange if it is the entire line. In fact, as SA converts each paragraph into one long line in body rules, it will only match a paragraph containing just the w

Re: spamassassin rule set issue

2012-04-17 Thread Martin Gregorie
On Tue, 2012-04-17 at 14:39 +0200, Tom Kinghorn wrote: > On 17/04/2012 14:18, dhanushka ranasinghe wrote: > > Hi.. guys.. > > > > I don't think regex is the issue , i tested the /(\W|^)Orange(\W|^)/i > > its correctly doing the exact word match > > > > > > Thank You > > Dhanushka > > > > Firstly,

Re: spamassassin rule set issue

2012-04-17 Thread RW
On Tue, 17 Apr 2012 14:39:41 +0200 Tom Kinghorn wrote: > On 17/04/2012 14:18, dhanushka ranasinghe wrote: > > Hi.. guys.. > > > > I don't think regex is the issue , i tested > > the /(\W|^)Orange(\W|^)/i its correctly doing the exact word match > > > > > > Thank You > > Dhanushka > > > > Firstly,

Re: spamassassin rule set issue

2012-04-17 Thread Tom Kinghorn
On 17/04/2012 14:18, dhanushka ranasinghe wrote: Hi.. guys.. I don't think regex is the issue , i tested the /(\W|^)Orange(\W|^)/i its correctly doing the exact word match Thank You Dhanushka Firstly, please do not "top post" Secondly, I disagree with you completely. The ^ (carat) ind

Re: spamassassin rule set issue

2012-04-17 Thread Swati R
Try testing below rules, if you are trying to flag the mails containing the exact 'orange' word only and not other such as orangecat. Rest will depend upon requirement. Thanks, Swati On Tue, Apr 17, 2012 at 5:48 PM, dhanushka ranasinghe < parakrama1...@gmail.com> wrote: > Hi.. guys.. > > I don'

Re: spamassassin rule set issue

2012-04-17 Thread dhanushka ranasinghe
Hi.. guys.. I don't think regex is the issue , i tested the /(\W|^)Orange(\W|^)/i its correctly doing the exact word match Thank You Dhanushka On 17 April 2012 17:44, Swati R wrote: > > > On Tue, Apr 17, 2012 at 5:39 PM, Tom Kinghorn > wrote: >> >> On 17/04/2012 14:03, dhanushka ranasinghe wr

Re: spamassassin rule set issue

2012-04-17 Thread Swati R
On Tue, Apr 17, 2012 at 5:39 PM, Tom Kinghorn wrote: > On 17/04/2012 14:03, dhanushka ranasinghe wrote: > >> >> Any idea why this is happening ? >> >> Thank You >> Dhanushka >> >> > Try > > /^Orange$/i > > The $ specifies end of the word. > > Regards > Tom > I think, this should work : /\bOrang

Re: spamassassin rule set issue

2012-04-17 Thread Tom Kinghorn
On 17/04/2012 14:03, dhanushka ranasinghe wrote: Any idea why this is happening ? Thank You Dhanushka Try /^Orange$/i The $ specifies end of the word. Regards Tom

spamassassin rule set issue

2012-04-17 Thread dhanushka ranasinghe
Hi.. guys i have following rule in place in spamassassin, rawbody BLOCK_RULE2 /(\W|^)Orange(\W|^)/i score BLOCK_RULE2 50 describe BLOCK_RULE2 Bad Word but one of my mails got blocked even-though its doesn't have word "Orange" , but when search via the mail spamassassin show mail has word Orang