Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 4 replies
  • Subscribers 1 subscriber
  • Views 1280 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

expression filter not working all the time

Barry_Foss
i have bit.ly in an expression filter under antispam  but have seen one particilar email that keeps getting in unfiltered yet the body has    WARNING i added the *** so you don't click it since i believe it is a virus.  Any ideas how i can quarintine all these.  Help me type in the correct syntax if bit.ly is not good enough, thank you.


This thread was automatically locked due to age.
  • 0
    Hi, Barry,

    We've gotten one yesterday and another today that have sneaked through the Astaro to our info@ address.  The one yesterday went to freescore360.com, and the one today to instantcheckmate.com.  You can go to http://bitly.com/ and click on Contact at the bottom of the page to report abuse to them - the form is easy to complete quickly and they're quick to respond.

    I haven't tried to block these links, but the correct REGEX would be: http://bit\.ly/

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    what you gave worked well and i added another one with https  but this one from yahoo keeps getting though   they are using HTtps://BiT.LY/(whatever)   and various caps in different places .  How do you make it caps insensitive  or maybe there is a nother reason.
    Let me know what you think thanks.
  • 0
    Those jerks.  I hope you're reporting those to bitly.com, hosting companies and registrars involved.

    The following should work:

    (H|h)(T|t)(T|t)(P|p)(S|s)?://(B|b)(I|i)(T|t)\.(L|l)(Y|y)/

    Cheers - Bob
     
    Sophos UTM Community Moderator
    Sophos Certified Architect - UTM
    Sophos Certified Engineer - XG
    Gold Solution Partner since 2005
    MediaSoft, Inc. USA
  • 0 in reply to BAlfson
    Same experience here. I've created an expression "Euro Dice" but mails containing these words are still getting through (prefetch is enabled). According to the help it should work, the help mentions 'Online dating' as an example. What am I doing wrong?

    Franc.
Share Feedback
×

Submitted a Tech Support Case lately from the Support Portal?