MXscan for ME - Spammy TLD filter

webshaun
Posts: 240
Joined: Wed May 25, 2005 8:37 pm
Location: NJ
Contact:

MXscan for ME - Spammy TLD filter

Postby webshaun » Thu Nov 03, 2016 5:38 pm

Took some time and research to get a reliable regular expression written to detect spam TLDs and assign a higher score to the message. I feel like I won and beat the demons with this filter. Here is the RegEx I used. TLD's may need different scores per your environment. TLD's can be adjusted following the format shown.

Filter Name: Top Spam TLDs
Score: 6

Code: Select all

Received: +from[^\n]*?\.(?:top|stream|bid|jp|co\.uk|party|science|win|link|click|download|gdn|accountant)\s\(\[([0-9\.]+)\]\)


Filter Name: Mostly Spam TLDs
Score 3

Code: Select all

Received: +from[^\n]*?\.(?:in|us|co|co\.nz|ru|date)\s\(\[([0-9\.]+)\]\)
---
Shaun Rieman
Advanced Micro Technologies, LLC

Who is online

Users browsing this forum: No registered users and 2 guests