Can anyone tell me why the following string:

<STRONG><COMMENT></COMMENT>am Rem<COMMENT>mortgage

Matches the following rule?

body            AAA_MORTGAGE    /m0rt|m.ortgage|Mort\sgage|m�³age/I

I made this rule while trying to block mortgage terms with high ascii in
them and it seems to have gone berzerk.  It doesn't false positive anything
and the non-high ascii portions are working correctly but I cant figure out
how sa is interpreting this for the life of me.  

Reply via email to