any idea why this rule never works for domain1 or domain2 but only domain3

header whitelist_from_luser From =~ /domain1\.com/i
header whitelist_from_luser From =~ /domain2\.com/i
header whitelist_from_luser From =~ /domain3\.com/i

score whitelist_from_luser -2.5


How do I log the score for each rule that is triggered?

-bazooka
Perhaps it's being overwritten by the 3rd rule? Try one of the following, depending on what your actual domain names are. I'm still learning REs, so please someone correct me if I'm wrong.

header whitelist_from_luser From =~ /(domain[1-3]\.com)/i

header whitelist_from_luser From =~ /(domain1\.com|domain2\.com|domain3\.com)/i



--
Dan Schaefer
Web Developer/Systems Analyst
Performance Administration Corp.

Reply via email to