On Thu, 8 Nov 2018, Amir Caspi wrote:
On Nov 8, 2018, at 7:41 PM, John Hardin <jhar...@impsec.org> wrote:
Sure, but I't also prefer to have a sample to test on before committing. I'll
see if I can get the pastebin to work (i.e. fix the boundary)
I can send you some new spamples via attachment, privately.
No, the pastebinned ones work unaltered.
Added to my sandbox with some minor tweaks:
Sending svn/trunk/rulesrc/sandbox/jhardin/20_misc_testing.cf
Transmitting file data .done
Committing transaction...
Committed revision 1846207.
I left it case-sensitive; is there some reason the entities cannot be
coded as (e.g.) n ? I kinda doubt it, so it should *probably* be
case-insensitive to avoid trivial bypass.
We'll see how it does tomorrow morning...
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
3 days until Veterans Day
