On 09/19/11 08:18, G.W. Haywood wrote: > > Nah, after thirty-odd years I can do it in my head with dotted quads. :)
Yeah but I'll bet you imagine the bits still =) > But the point remains, this is a pretty obvious and easy target for > any scanner which is looking for malicious activity, so wouldn't it > make sense to take a shot at it? I can do something approximating to > what I think is needed with one or other of the Sendmail milters that > I run, but it would probably be a lot more effective (and potentially > a marketing coup) if ClamAV could do it. Don't try to match the representation, match the number. There are a few billion ways you can represent a single IP address; we can't have signatures for all of them. Convert it to an integer. _______________________________________________ Help us build a comprehensive ClamAV guide: visit http://wiki.clamav.net http://www.clamav.net/support/ml
