On Monday 08 October 2007, Tobias Kreidl wrote: > Sloan wrote: > > Leonardo Rodrigues Magalhães wrote: > >> Tobias Kreidl escreveu: > >>> Rianto Wahyudi wrote on 2007-10-07 01:25: > >>>> | %yahoo.com% | > >>> > >>> Shouldn't that read "%yahoo.com" (no trailing "%")? > >> > >> Yeah ... the trailing % really seems to be a mistyped character. > >> Anyway, it would match even with that extra trailing %: > > > > It would also match e.g. yahoo.com.spammer.domain which is a common ruse > > - > > > > J > > To be completely correct, it should actually read: > > %.yahoo.com > > or otherwise, it'd let in things like fakeyahoo.com, ispam4yahoo.com, > etc. The trailing "%" is a bad idea for > any real domains, in any case, and the domain should be delimited in > front, as well.
I suspect that the trailing % was to catch domains like yahoo.co.uk, yahoo.in, etc. Given the other problems noted though I think it best to explictly list the known domains rather than add the trailing %. -- -- Michael
signature.asc
Description: This is a digitally signed message part.
------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________ policyd-users mailing list policyd-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/policyd-users
