[Kungfu]

Originally Posted by d360

I'm trying to add a rule for sex and using one that currently works:

#Phones
regexp:a_sidekick:3:any:"/sidekick/i"

I've tried pasting all sorts of variations of this and none catch as spam and place it in the spam forum directory.

Here's my tests:

#Sex
regexp:a_badword:10:any:"/.com/i"
regexp:a_badword:10:any:"/i"
regexp:a_badword:10:any:"//i"


none of these work. any help would be appreciated.

first you need to make a variable for each regex.

## SpamBuster config file
# tests are in the format:
# type:name:score:section:expression

## Title tests
# title starts with free
regexp:t_free:3:title:"/^free/i"
# title starts with free and ends in an exclaimation mark
regexp:t_freebang:3:title:"/^free.*!$/i"
# title ends with three exclamation marks
regexp:t_3bangs:3:title:"/.*!!!$/i"

## Tests title and body
# contains a price in dollars
regexp:a_dollar:5:any:"/\$[\d\.]+/"
# lists a % discount offer
regexp:a_percent:3:any:"/\d+%/i"


#anything related to sex
regexp:a_viagra:3:any:"/viagra/i"
regexp:a_penis:3:any:"/penis/i"
regexp:a_erect:3:any:"/erect/i"
regexp:a_pussy:3:any:"/pussy/i"
regexp:a_barn:3:any:"/barn/i"
regexp:a_zoo:3:any:"/zoo/i"
regexp:a_porn:3:any:"/porn/i"
regexp:a_sex:3:any:"/sex/i"

#other things
regexp:a_drug:3:any:"/drug/i"
regexp:a_fedex:5:any:"/fedex/i"
regexp:a_dhl:5:any:"/dhl/i"
regexp:a_ups:5:any:"/ups/i"


#any link
regexp:a_url:10:any:"/http:\/\//i"
regexp:a_www_url:10:any:"/www\./i"
regexp:a_url2:10:any:"/[^="]http|ftp|gopher[^ \n\r]+(?=[\s\.,])/i"

#Phones
regexp:a_sidekick:3:any:"/sidekick/i"
regexp:a_nokia:3:any:"/nokia/i"
regexp:a_ericsson:3:any:"/ericsson/i"
regexp:a_motorola:3:any:"/motorola/i"
regexp:a_nextel:3:any:"/nextel/i"
regexp:a_kyocera:3:any:"/kyocera/i"


#computers
regexp:a_laptop:3:any:"/laptop/i"
regexp:a_dell:3:any:"/dell/i"
regexp:a_alienware:3:any:"/alienware/i"
regexp:a_apple:3:any:"/apple/i"
regexp:a_ipod:3:any:"/ipod/i"
regexp:a_toshiba:3:any:"/toshiba/i"
regexp:a_vaio:3:any:"/vaio/i"
regexp:a_ibm:3:any:"/ibm/i"
regexp:a_acer:3:any:"/acer/i"

#pills
regexp:a_meds:5:any:"/meds/i"
regexp:a_pharmacy:5:any:"/pharmacy/i"
regexp:a_clickhere:5:any:"/click here/i"

#consoles
regexp:a_xbox:3:any:"/xbox/i"
regexp:a_playstation:3:any:"/playstation/i"
regexp:a_playstation1:3:any:"/play station/i"

#Casino spam
regexp:t_cardstud:3:title:"/online seven card stud/i"
regexp:t_888casino:3:title:"/888 Casino/i"
regexp:t_freeslots:3:title:"/free slots/i"
regexp:t_onlinepoker:3:title:"/online poker tournament/i"
regexp:t_videopoker:3:title:"/video poker/i"
regexp:t_pokerrooms:3:title:"/online poker rooms/i"
regexp:t_freeslots:3:title:"/free slots/i"
regexp:t_baccarat:3:title:"/baccarat/i"
regexp:t_online7:3:title:"/online seven card stud/i"
regexp:t_roulette:3:title:"/roulette/i"
regexp:a_888:3:any:"/888\.com/i"
regexp:a_ajcarvelli:3:any:"/ajcarvelli\.com/i"
regexp:a_7cardstud:3:any:"/seven card stud/i"
regexp:a_stud:3:any:"/stud/i"
regexp:a_baccarat:5:any:"/baccarat/i"
regexp:a_casino:3:any:"/casino/i"
regexp:a_online:3:any:"/online/i"
regexp:a_free:3:any:"/free/i"
regexp:a_slots:3:any:"/slots/i"
regexp:a_keno:3:any:"/keno/i"

## Known spam sites
regexp:a_dotdeals:10:any:"/dotdeals\.com/i"
regexp:a_ekmas:10:any:"/ekmas\.com/i"
regexp:a_qckjmp:10:any:"/c\.qckjmp\.com/i"
regexp:a_websponsors:10:any:"/\.websponsors\.com/i"
regexp:a_wonderyears:10:any:"/\.wonderyears\.com/i"
regexp:a_lynxtrack:10:any:"/\.lynxtrack\.com/i"
regexp:a_getodp:10:any:"/\.getodp\.com/i"
regexp:a_actualdeals:10:any:"/\.actualdeals\.com/i"
regexp:a_pdv001:10:any:"/\.pdv001\.com/i"
regexp:a_eajmp:10:any:"/\.eajmp\.com/i"
regexp:a_aftrk.com:10:any:"/\.aftrk\.com/i"
regexp:a_lps999.com:10:any:"/\.lps999\.com/i"
regexp:a_e2save.com:10:any:"/\.e2save\.com/i"
regexp:a_qksrv.net:10:any:"/\.qksrv\.net/i"
regexp:a_dse500.com:10:any:"/\.dse500\.com/i"
regexp:a_bag1881.com:10:any:"/\.bag1881\.com/i"
regexp:a_esrmtech.com:10:any:"/\.esrmtech\.com/i"
regexp:a_jokescratchcards:10:any:"/jokescratchcards/i"
regexp:a_83332:10:any:"/83332/i"
regexp:a_eaziit:10:any:"/eazi\.it/i"
regexp:a_bravehost:10:any:"/bravehost\.com/i"
regexp:a_dailyunique:10:any:"/dailyunique\.com/i"
regexp:a_en+++++:10:any:"/en+++++\.com/i"
regexp:a_putzamare2004:10:any:"/putzamare2004/i"
regexp:a_cpsasales:10:any:"/cpsasales\.co\.uk/i"
regexp:a_madhouse21:10:any:"/madhouse21/i"
regexp:a_raelian:10:any:"/rael\.org/i"
regexp:a_speedflip:10:any:"/speedflip\.com/i"
regexp:a_fredphones:10:any:"/fredphones/i"
regexp:a_watchgem:10:any:"/watchgem\.com/i"
regexp:a_250free:10:any:"/250free\.com/i"
regexp:a_bagluxury:10:any:"/bagluxury\.com/i"
regexp:a_greatnow:10:any:"/greatnow\.com/i"
regexp:a_ampd:10:any:"/ampd\.com/i"
regexp:a_remster5:10:any:"/remster5/i"
regexp:a_tipcell:10:any:"/tipcell\.com/i"
regexp:a_hotxxxstuff:10:any:"/hotxxxstuff\.com/i"
regexp:a_pochrist:10:any:"/thepassionofthechrist/i"
regexp:t_feelsad:10:title:"/This picture may make some of you feel sad/i"
regexp:a_winme:10:any:"/win-me\.biz/i"
regexp:a_pharmacy1010:10:any:"/pharmacy1010\.com/i"
regexp:a_picfury:10:any:"/picfury\.com/i"
regexp:a_mightybody:10:any:"/mightybody\.com/i"
regexp:a_winantispyware:10:any:"/winantispyware\.com/i"
regexp:a_systemdoctor:10:any:"/systemdoctor\.com/i"
regexp:a_rogalik:10:any:"/rogalik\.net/i"
regexp:a_aapurse:10:any:"/aapurse\.com/i"
regexp:a_freepay:10:any:"/freepay\.com/i"

# Other string based stuff
regexp:a_pochrist:10:any:"/thepassionofthechrist/i"
regexp:t_feelsad:10:title:"/This picture may make some of you feel sad/i"

regexp:a_email:10:any:"/\b[A-Z0-9._%-]+@[A-Z0-9.-]+\.[A-Z]{2,4}\b/i"

note i have

regexp:a_url:10:any:"/http:\/\//i"
regexp:a_www_url:10:any:"/www\./i"
regexp:a_url2:10:any:"/[^="]http|ftp|gopher[^ \n\r]+(?=[\s\.,])/i"


for some reason the first one would not work but my second one does. Looks complicated but basically it trys to find http ftp or gopher. you can also do something like

regexp:a_url2:10:any:"/[^="]http|ftp|gopher|com|www[^ \n\r]+(?=[\s\.,])/i"
but note on the www. its /www\./i, btw the i is to ignore case. So it basically converts it to lowercase and then checks. But its /www\./ because of the period. otherwise you could do /www/i which will find that exact value unless you have a unique character like a period then you have to do something like shown above.