While trying to improve my av script (which works fine for my standards.. I
even caught some unknown worms like Sobig yesterday) I noticed smth that
should be my mistake.. I just don't get it... (ok I'm dumb)
is
* name[ ]*=.*\.(bat|pif|vb[as]|scr|lnk|com|exe|{[-0-9a-f]+})("|[ ]*|$)
really that different from:
*
ame[ ]*=.*\.(bat("|[ ]*|$)|pif("|[ ]*|$)|vb[as]("|[ ]*|$)|scr("|[ ]*|$)
|lnk("|[ ]*|$)|com("|[ ]*|$)|exe("|[ ]*|$)|{[-0-9a-f]+}("|[ ]*|$))
obviously I want to catch things for example .com" or .com$ or .com[ ]*
BUT not .com/
Thank you for your time
Nikos
-------------------------------------------
signature text:
Nikos K. Kantarakias
URLs: http://www.nikant.tk/
http://www.skiathos.tk/
http://agriroot.aua.gr/
_______________________________________________
procmail mailing list
procmail(_at_)lists(_dot_)RWTH-Aachen(_dot_)DE
http://MailMan.RWTH-Aachen.DE/mailman/listinfo/procmail