On Tue, 22 Feb 2005 13:13:17 +0000, Marck D Pearlstone <[EMAIL PROTECTED]> wrote:
>I can try ... although you don't say which version you are using. Thank you Marck - I omitted I'm at v2.12.00 >Filter text matching is case insensitive by default. Aha, I thought so but my filtering results seemed contrary. >Ah - well, [] and Regex cannot be used together. And I'm not sure that >this applies in the same way to V3 filters. Sounds like you're using >v2. This is not going to make it easy since nobody can test your >filters or supply you with one. Nobody using v2 anymore? Mhhh... (I'm not going to repeat the discussion, but as long as there's no solution for a number of existing bugs and HTML editing isn't improving, I see no reason to spend -corporate- money) >That is a mess I'm afraid. You can't combine wildcards with regex as >you have done here. Yeah, I was afraid so :-\ > log-fw Sender Yes > alert Subject Yes > [scan|attack] dropped Text Yes The filter is now as above, let's see how that works out (I didn't try any text outside the []'s, as I thought that would really not work at all with the space in there) > ... > (+ Alternative) > ... I realized I could have used Alternatives, but that requires repeating the first two strings ... I hate redundancy :-) >Like I say - I don't have v1/2 or the v1/2 help file to verify any of >the advice here. Much appreciated anyway!! I'll update in a few hours (hopefully) -- Happy flappin'! Corne' (aka Cory, The Batdmin) ________________________________________________ Current version is 3.0.1.33 | 'Using TBUDL' information: http://www.silverstones.com/thebat/TBUDLInfo.html
