Support Forum
The Forums are a place to find answers on a range of Fortinet products from peers and product experts.
VTY
New Contributor

Profile Dictionary Help

I have a question with regards to using Regex for Pattern Type in dictionary.

 

I tried the following filter:

.*died.*charity.*donate.* < This was mentioned by the support to use for similar sentences

/p(p?)r(r?)(e|3)(e|3?)s(s?)c(c?)r(r?)(i|l|1)(i|l|1?)p(p?)t(t?)i(i?)(o|0)(o|0?)n(n?)/ig < Intended for "prescription" with potential typo for evaders

/您有待处理的待处理电子邮件/g < Intended for foreign spam mails

/.*@engineer.com.*/ig < Filter for specific mail links.

/I have very bad news for you(.?)/ig < This spam mail has been popping up a lot recently. Even BitCoin filter doesn't work against it.

 

All these got through to the inbox past the dictionary check as deemed safe, and I was using a mail that isn't inside the  "safe filter or whitelist" when sending test messages to the mail with Fortimail protection on it.

 

Am I doing something wrong here?

 

All the dictionary set are 1-10 Pattern Weight (min-Max), with enabled Maximum Pattern weight limit and both checked for header and body check with the dictionary check enabled.

0 REPLIES 0
Announcements

Select Forum Responses to become Knowledge Articles!

Select the “Nominate to Knowledge Base” button to recommend a forum post to become a knowledge article.

Labels
Top Kudoed Authors