> -----Original Message----- > From: Randal, Phil [mailto:[EMAIL PROTECTED] > Sent: 23 August 2008 2:05 a.m. > To: Jean-Paul Natola; users@spamassassin.apache.org > Subject: RE: e greeting exe link > > uri MY_EXECUTABLE_URI > /^(?:https?|ftp):\/\/[^\s?]{1,80}\/[^\s?]{1,80}\.(?:exe|scr|dll|pif|vbs| > wsh|cmd|bat)$/i > describe MY_EXECUTABLE_URI Links to an executable file > score MY_EXECUTABLE_URI 3.00 > > Mind the linewrap.
Hello Everyone, Does anyone have a rule that's not such a complex regex? I couldn't get this one to expand properly with the Regex Expander over at SARE (http://www.rulesemporium.com/cgi-bin/expand_regex.cgi) - even downloading the Perl script and running it locally produces unexpected results from this rule. I would be hoping to match the same sort of URL: http://ns1.shinwa-com.co.jp/~denso/card.exe But only match it from the last trailing / character. In other words, if the message carries a link to "card.exe" at any address, it will be marked up. My thoughts were that all I would need is a rule like: uri MY_EXE_URI /card.exe/i Or do I need to actually match all of the stuff before that, using a wildcard for example? Thanks in advance for any light shed upon the matter, Cheers, Michael Hutchinson Manux Solutions
