Lint output: warning: description for KAM_EBAYREDIR is over 50 chars lint: 1 issues detected. please rerun with debug enabled for more information.
Need to shorten the description if you want to avoid seeing the lint warnings. (this is esp important if you use any SARE rulesets and rulesdujour script). Jim On Sun, 20 Feb 2005 08:45:52 -0500, Kevin A. McGrail wrote > In the meantime, here's an SA Rule to help catch it which I would appreciate > feedback about: > > # This rule is to mark emails using the exploit of the eBay redirector > uri KAM_EBAYREDIR /.*.ebay.com.*RedirectToDomain/i > describe KAM_EBAYREDIR Attempted use of eBay redirector - high > probability of fraud > score KAM_EBAYREDIR 7.0 -- EsisNet.com Webmail Client _______________________________________________ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [email protected] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
