[Esa-l] SoBig local rule - updated

John D. Hardin jhardin at impsec.org
Thu Aug 28 06:27:10 PDT 2003


On Tue, 26 Aug 2003, Sergey Latkin wrote:

> Here it goes.

For the "OR" rules you need to be using a weight of 9876543210
(include the zero).

>         * 9876543210^1 ^Content-(Type|Disposition):.*name *= 
> *"?(your_details|details|application|document.*|movie.*|wicked_scr|your_document|thank_you)\.(pif|scr)"?
>         * 9876543210^1 ^Content-(Type|Disposition):.*$.*name *= 
> *"?(your_details|details|application|document.*|movie.*|wicked_scr|your_document|thank_you)\.(pif|scr)"?

--
 John Hardin KA7OHZ    ICQ#15735746    http://www.impsec.org/~jhardin/
 jhardin at impsec.org                        pgpk -a jhardin at impsec.org
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  ...the Fates notice those who buy chainsaws...
                                              -- www.darwinawards.com
-----------------------------------------------------------------------
   65 days until Matrix Revolutions



More information about the esa-l mailing list