Hi Travis -

Thanks for helping me with this -

Using filtering, headers test should work.

Agreed!

So, if you had a list of ips... you would add these lines:
HEADERS  5 CONTAINS  xxx.xxx.xxx.xxx

where xxx = ip address.

Doesn't work. Do not know why. I even put ip's in an ipfile and added TESTFAILED 0 CONTAINS <name of ipfile> nada. never triggers. [For the latter maybe ipfiles trigger after filters so that may be the cause there.]

I sent my global.cfg and a very wordy description of what I am trying to accomplish to Declude David directly. He offered to help and I took him up on it!

Regards,

-Nick
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to