Just a quick tutorial. As PCRE is much quicker than using regular line
matching I use the following when checking against REVDNS within filters:

Regular Filter line:
---------------------------

REVDNS          -5      ENDSWITH        .bigfootinteractive.com
REVDNS          -5      ENDSWITH        .bluehornet.com
REVDNS          -5      ENDSWITH        .constantcontact.com

PCRE Filter line:
---------------------------

REVDNS          -5      PCRE
(?i:\.(bigfootinteractive|bluehornet|constantcontact)\.com$)

1. The PCRE expression needs to be in parenthesis (  )

2. ?i: indicates case in-sensitive

3. As . is a special character meaning any character we use the \ to
indicate that it should just be a .

4. The | represents or 

5.The $ is also a special character which used here indicates the end of a
string

The above PCRE will match any of the 3 from the regular filter.

David Barker
VP Operations  |  Declude
Your Email Security is our business
O: 978.499.2933  x7007
F: 978.988.1311       
E: [EMAIL PROTECTED]



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to