Back to Community Threads
Spam Checks : Custom Rule w/ Regular Expression for TLD Filtering
Question asked by JJ M. - 10/28/2020 at 11:35 AM
Unanswered
J
Hello everyone,

I'm having trouble setting up a Regular Expression Custom Rule for Spam Check to assign a weight based on TLD on Build 7593.

I've set up the rule as shown in the attached image with an applicable weight and have it toggled on for Spool Filtering, but the rule seems to never be applied. I've tried stopping/restarting the service and other variations on the RegEx statement without luck.

Any helpful tips would be appreciated!

Thanks

Employee Replied
10/28/2020 at 3:03 PM
Employee Post
@JJ, I configured a custom spam rule as you configured above, and with the latest Build 7593, I am showing that the message is being scored. Below I included the delivery logs for both test@test.monster and test@test.top as well as the headers of one of the messages.  Can you provide delivery log and the spam check logs for any sessions where the custom rule is not running?

[2020.10.28] 14:51:47.114 [14954000] Delivery started for test@test.monster at 2:51:47 PM
[2020.10.28] 14:51:50.168 [14954000] Added to SpamCheckQueue (1 queued; 0/30 processing)
[2020.10.28] 14:51:50.176 [14954000] [SpamCheckQueue] Begin Processing.
[2020.10.28] 14:51:50.182 [14954000] Blocked Sender Checks started.
[2020.10.28] 14:51:50.185 [14954000] Blocked Sender Checks completed.
[2020.10.28] 14:51:50.204 [14954000] Spam Checks started.
[2020.10.28] 14:51:50.314 [14954000] Spam Check results: [_CUSTOMRULES: Top Level Domains: 999;]
[2020.10.28] 14:51:50.314 [14954000] Spam Checks completed.
[2020.10.28] 14:51:50.314 [14954000] Removed from SpamCheckQueue (0 queued or processing)
[2020.10.28] 14:51:53.180 [14954000] Added to LocalDeliveryQueue (1 queued; 0/50 processing)
[2020.10.28] 14:51:53.180 [14954000] [LocalDeliveryQueue] Begin Processing.
[2020.10.28] 14:51:53.203 [14954000] Starting local delivery to remmett@smartermail.io
[2020.10.28] 14:51:53.336 [14954000] Process delivery status notification step from local recipient success. Recipient: [remmett@smartermail.io], Notify: [], Delivered: [True], Forwarded: [False], Deleted: False
[2020.10.28] 14:51:53.354 [14954000] Delivery for test@test.monster to remmett@smartermail.io has completed (Delivered) Filter: Spam (Weight: 999), Action (Global Level): PrefixSubject
[2020.10.28] 14:51:53.354 [14954000] End delivery to remmett@smartermail.io (MessageID: <dbc7687634e547b5800093d566088596@com>)
[2020.10.28] 14:51:53.358 [14954000] Removed from LocalDeliveryQueue (0 queued or processing)
[2020.10.28] 14:51:56.191 [14954000] Removing Spool message: Killed: False, Failed: False, Finished: True
[2020.10.28] 14:51:56.192 [14954000] Delivery finished for test@test.monster at 2:51:56 PM    [id:202014954000]
[2020.10.28] 14:56:47.533 [14954001] Delivery started for test@test.top at 2:56:47 PM
[2020.10.28] 14:56:50.535 [14954001] Added to SpamCheckQueue (1 queued; 0/30 processing)
[2020.10.28] 14:56:50.536 [14954001] [SpamCheckQueue] Begin Processing.
[2020.10.28] 14:56:50.539 [14954001] Blocked Sender Checks started.
[2020.10.28] 14:56:50.541 [14954001] Blocked Sender Checks completed.
[2020.10.28] 14:56:50.541 [14954001] Spam Checks started.
[2020.10.28] 14:56:50.549 [14954001] Spam Check results: [_CUSTOMRULES: Top Level Domains: 999;]
[2020.10.28] 14:56:50.549 [14954001] Spam Checks completed.
[2020.10.28] 14:56:50.550 [14954001] Removed from SpamCheckQueue (0 queued or processing)
[2020.10.28] 14:56:53.538 [14954001] Added to LocalDeliveryQueue (1 queued; 0/50 processing)
[2020.10.28] 14:56:53.538 [14954001] [LocalDeliveryQueue] Begin Processing.
[2020.10.28] 14:56:53.542 [14954001] Starting local delivery to remmett@smartermail.io
[2020.10.28] 14:56:53.572 [14954001] Process delivery status notification step from local recipient success. Recipient: [remmett@smartermail.io], Notify: [], Delivered: [True], Forwarded: [False], Deleted: False
[2020.10.28] 14:56:53.575 [14954001] Delivery for test@test.top to remmett@smartermail.io has completed (Delivered) Filter: Spam (Weight: 999), Action (Global Level): PrefixSubject
[2020.10.28] 14:56:53.575 [14954001] End delivery to remmett@smartermail.io (MessageID: <1991ddbbe6264b50ab4b3cbf58a70bd7@com>)
[2020.10.28] 14:56:53.575 [14954001] Removed from LocalDeliveryQueue (0 queued or processing)
[2020.10.28] 14:56:56.541 [14954001] Removing Spool message: Killed: False, Failed: False, Finished: True
[2020.10.28] 14:56:56.541 [14954001] Delivery finished for test@test.top at 2:56:56 PM    [id:202014954001]
P
Patrick Mattson Replied
11/6/2020 at 6:27 AM
I am still using an older version and I see my blocks in my logs. I wanted to share the list I use, maybe someone can benefit.
.+\.accounting>$
.+\.asia>$
.+\.bid>$
.+\.best>$
.+\.buzz>$
.+\.click>$
.+\.club>$
.+\.country>$
.+\.cricket>$
.+\.cyou>$
.+\.date>$
.+\.download>$
.+\.faith>$
.+\.fun>$
.+\.gdn>$
.+\.guru>$
.+\.host>$
.+\.icu>$
.+\.loan>$
.+\.men>$
.+\.monster>$
.+\.online>$
.+\.party>$
.+\.rest>$
.+\.review>$
.+\.science>$
.+\.space>$
.+\.stream>$
.+\.study>$
.+\.top>$
.+\.trade>$
.+\.webcam>$
.+\.website>$
.+\.win>$
.+\.work>$
.+\.world>$
.+\.xyz>$
.+\.zw>$
Back to Community Threads

Reply to Thread

Enter the verification text
Related Knowledge Base Articles
Key Feature and Version Milestones in SmarterMailSmarterMail
Set up Autodiscover for SmarterMailSmarterMail > Installation and Configuration
Deploying Rspamd For Use With SmarterMailSmarterMail > Server Configuration and Management
Legal Holds and LitigationSmarterMail > Installation and Configuration
Recommended SPAM SettingsSmarterMail > Antispam and Antivirus