How Do I Prevent Mail Containg "cheap" From Being Discarded?

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
3 messages Options
Reply | Threaded
Open this post in threaded view
|

How Do I Prevent Mail Containg "cheap" From Being Discarded?

Jay F. Shachter

Esteemed Colleagues:

I have a recurring problem with ASSP: it discards important incoming
mail that contains the word "cheap".  For example, if a client needs
me to fly somewhere in an emergency, and I reply, "where can I get a
cheap airplane ticket?" or words to that effect, and the client
replies to my mail, including my mail in his reply, the reply is apt
to be discarded because it contains the word "cheap", thus:

 16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] 209.85.220.170 <...@gmail.com> to: [hidden email] Regex:BombRe 'PB 20: for cheap'
 16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] [bombRe] 209.85.220.170 <...@gmail.com> to: [hidden email]  (bombRe 'cheap')
 16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] 209.85.220.170 <...@gmail.com> to: [hidden email] Message-Score: added 20 for Regex:BombRe 'PB 20: for cheap'  bombRe: 'cheap', total score for this message is now 21
 16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] [bombRe] 209.85.220.170 <...@gmail.com> to: [hidden email] [spam found] (Regex:BombRe 'PB 20: for cheap'  bombRe: 'cheap') [{redacted}] -> /opt/assp/discarded/6726--6440.eml;
 16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] 209.85.220.170 <...@gmail.com> to: [hidden email] [SMTP Error] 554 5.7.1 Delivery not authorized, message refused -- . (reason: Regex:BombRe 'PB 20: for cheap'  bombRe: 'cheap')

Now, bombRe is a good idea, I suppose, but I should be able to control
it.  How do I do that?  The word "cheap" does not appear anywhere in
assp.cfg.  In files/bombre.txt it appears only as "subject\: cheapest"
and that would not cause mail to be discarded that contains "cheap"
somewhere in its body.  CHEAP (all capitals) also appears in
files/tlds-alpha-by-domain.txt but that too, if I am not mistaken, would
not cause mail to be discarded that contains "cheap" somewhere in its
body.  It also appears several places in files/optRE/blackListedDomains.txt
-- e.g., "(?:quick)?usa|platform|cheap|now|2u)\.biz" -- but that too,
if I am not mistaken, would not cause mail to be discarded that
contains "cheap" somewhere in its body.

It is possible, I suppose, that there is some utterly cryptic regular
expression in some file that matches "cheap" without actually
containing the string "cheap", but that would be utterly perverse and
I refuse to believe that the universe is that malicious.  And yet, my
e-mails are unquestionably being discarded.  How do I forever prevent
that from happening?

Thank you in advance for any and all replies.  One more thing -- if
you do reply, please replace the word "cheap" with the word
"tangerine", otherwise your reply to me is apt to be discarded.  Thank
you again.


                        Jay F. Shachter
                        6424 N Whipple St
                        Chicago IL  60645-4111
                                (1-773)7613784   landline
                                (1-410)9964737   GoogleVoice
                                [hidden email]
                                http://m5.chicago.il.us

                        "Quidquid latine dictum sit, altum videtur"


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: How Do I Prevent Mail Containg "tangerine" From Being Discarded?

m.huijgen
Why don't you put e-mail addresses you rend/reply mail to on the
whitelist? That's what the autowhitelisting feature is for.


Martin


On 10/23/2016 09:16 PM, jay wrote:

> Esteemed Colleagues:
>
> I have a recurring problem with ASSP: it discards important incoming
> mail that contains the word "cheap".  For example, if a client needs
> me to fly somewhere in an emergency, and I reply, "where can I get a
> cheap airplane ticket?" or words to that effect, and the client
> replies to my mail, including my mail in his reply, the reply is apt
> to be discarded because it contains the word "cheap", thus:
>
>   16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] 209.85.220.170 <...@gmail.com> to: [hidden email] Regex:BombRe 'PB 20: for cheap'
>   16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] [bombRe] 209.85.220.170 <...@gmail.com> to: [hidden email]  (bombRe 'cheap')
>   16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] 209.85.220.170 <...@gmail.com> to: [hidden email] Message-Score: added 20 for Regex:BombRe 'PB 20: for cheap'  bombRe: 'cheap', total score for this message is now 21
>   16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] [bombRe] 209.85.220.170 <...@gmail.com> to: [hidden email] [spam found] (Regex:BombRe 'PB 20: for cheap'  bombRe: 'cheap') [{redacted}] -> /opt/assp/discarded/6726--6440.eml;
>   16-10-20.maillog.txt:2016-10-20 21:39:09 m1-17548-06726 [Worker_1] 209.85.220.170 <...@gmail.com> to: [hidden email] [SMTP Error] 554 5.7.1 Delivery not authorized, message refused -- . (reason: Regex:BombRe 'PB 20: for cheap'  bombRe: 'cheap')
>
> Now, bombRe is a good idea, I suppose, but I should be able to control
> it.  How do I do that?  The word "cheap" does not appear anywhere in
> assp.cfg.  In files/bombre.txt it appears only as "subject\: cheapest"
> and that would not cause mail to be discarded that contains "cheap"
> somewhere in its body.  CHEAP (all capitals) also appears in
> files/tlds-alpha-by-domain.txt but that too, if I am not mistaken, would
> not cause mail to be discarded that contains "cheap" somewhere in its
> body.  It also appears several places in files/optRE/blackListedDomains.txt
> -- e.g., "(?:quick)?usa|platform|cheap|now|2u)\.biz" -- but that too,
> if I am not mistaken, would not cause mail to be discarded that
> contains "cheap" somewhere in its body.
>
> It is possible, I suppose, that there is some utterly cryptic regular
> expression in some file that matches "cheap" without actually
> containing the string "cheap", but that would be utterly perverse and
> I refuse to believe that the universe is that malicious.  And yet, my
> e-mails are unquestionably being discarded.  How do I forever prevent
> that from happening?
>
> Thank you in advance for any and all replies.  One more thing -- if
> you do reply, please replace the word "cheap" with the word
> "tangerine", otherwise your reply to me is apt to be discarded.  Thank
> you again.
>
>
>                          Jay F. Shachter
>                          6424 N Whipple St
>                          Chicago IL  60645-4111
>                                  (1-773)7613784   landline
>                                  (1-410)9964737   GoogleVoice
>                                  [hidden email]
>                                  http://m5.chicago.il.us
>
>                          "Quidquid latine dictum sit, altum videtur"
>
>
> ------------------------------------------------------------------------------
> Check out the vibrant tech community on one of the world's most
> engaging tech sites, SlashDot.org! http://sdm.link/slashdot
> _______________________________________________
> Assp-user mailing list
> [hidden email]
> https://lists.sourceforge.net/lists/listinfo/assp-user


------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user
Reply | Threaded
Open this post in threaded view
|

Re: How Do I Prevent Mail Containg "cheap" From Being Discarded?

Thomas Eckardt/eck
In reply to this post by Jay F. Shachter
If I use the assp mail analyzer and analyze a mail containing this word, I
get.

• bombRe : 'highest match: "cheap" with valence: 100 - PB value = 70'
 • matching bombRe(file:files/bombre.txt[line 119]): 'c.?hea.?p'

So - I get the file (with a link to open and edit it), the line number (to
find it fast) and the content of the line. How easy!?

Autowhitelisting and the default setting for 'bombReWL'  (OFF) will skip
the bomb check.
'DoMSGIDsig' will detect a reply mail and bypass the bomb check with the
default setting for 'bombReWL' .
'NOTSPAMTAG' will give the sender the chance to resend the mail.
'noBombScript' will also skip the bomb check.

And there are much more options in assp to solve this "problem".

Thomas



DISCLAIMER:
*******************************************************
This email and any files transmitted with it may be confidential, legally
privileged and protected in law and are intended solely for the use of the

individual to whom it is addressed.
This email was multiple times scanned for viruses. There should be no
known virus in this email!
*******************************************************



------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Assp-user mailing list
[hidden email]
https://lists.sourceforge.net/lists/listinfo/assp-user