This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Question about using PCRE and antispam filtering

Hi.

I am using UTM 9.209-8 with the "full guard" option. Currently I try to get regex working within the antispam feature. 

I get tons of phishing/virus mails telling me to download a fake bill from my mobile telephone provider. The mail is written in html and there is a link to the bill called

"RG_750957840.zip" or "2014details_transaktion_87178717.zip" or similar. (All numbers are random)

The expression I play with is

([0-9kKuUnNdDeErRcChHgGmM]+\_[a-zA-Z0-9-._: ]+\.[zZiIpPdDfF]+)

and this pattern is checked with various online regex checkers like regex101. With this, everything looks well, but the UTM doesnt like / ignore it.

What exactly is checked? If I get HTML in my incomming mails - is the plain text checked or the HTML mail itself? What about (base64,eg) coded mails?

Is there anybody who uses regex to filter incomming mails? 

Any help would be great.

Thanks, Christian


This thread was automatically locked due to age.
Parents
  • Salut, Christain, and welcome to the User BB!

    Try [a-zA-Z0-9\-\.\_\: ]

    Any better luck with that?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Reply
  • Salut, Christain, and welcome to the User BB!

    Try [a-zA-Z0-9\-\.\_\: ]

    Any better luck with that?

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
Children
No Data