On 09/08/2014 08:03 PM, Axb wrote:
On 09/08/2014 07:35 PM, Amir Caspi wrote:
Hi all,
One of my spammy URI template rules is, for some reason, not hitting
any more. Spample here:
http://pastebin.com/jy6WZhWW
In my local.cf sandbox I have the following:
uri __AC_STOPRANDDOM_URI1
/(?:stop|halt|quit|leave|leavehere|out|exit|disallow|discontinue|end)\.[a-z0-9-]{10,}\.(?:us|me|com|club|org|net)\b/
This is part of my AC_SPAMMY_URI_PATTERNS meta rule, which hits just
fine on other emails (including others of this particular format).
Debug output shows this subrule didn't hit anything (that is, the
rule isn't mentioned at all in the debug output), but regexpal.com
says it should have hit just fine.
Could the problem be with the \b delimiter at the end? I've noticed
that sometimes can cause issues in failing to hit, but usually only
when a URI ends with a slash... and this same rule hits other
matching URIs in other spams. However, this isn't the first time
I've noticed a failure to match... so any idea why it's not hitting?
Per the regex rules, it SHOULD be hitting fine unless it's the \b...
Any ideas?
imo, an URI rule shouldn't have a boundary delimiter
I'll remove that
uri __AC_STOPRANDDOM_URI1 isn't in 20_ac_rules_test.cf, right?
