On Fri, 15 May 2009, LuKreme wrote:

On 15-May-2009, at 12:46, Adam Katz wrote:
uri URI_HIDDEN /.{7}\/\../

That won't catch http://www.spammer.example.com/.../hidden-malware.asf,

How so? That rule matches "ple.com/.." in that URI.

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  A superior gunman is one who uses his superior judgment to keep
  himself out of situations that would require the use of his
  superior skills.
-----------------------------------------------------------------------
 6 days until the 5th anniversary of SpaceshipOne winning the X-prize

Reply via email to