Sloan wrote: > Leonardo Rodrigues Magalhães wrote: > >> Tobias Kreidl escreveu: >> >>> Rianto Wahyudi wrote on 2007-10-07 01:25: >>> >>> >>>> | %yahoo.com% | >>>> >>>> >>> Shouldn't that read "%yahoo.com" (no trailing "%")? >>> >>> >> Yeah ... the trailing % really seems to be a mistyped character. >> Anyway, it would match even with that extra trailing %: >> > > It would also match e.g. yahoo.com.spammer.domain which is a common ruse - > > J > To be completely correct, it should actually read:
%.yahoo.com or otherwise, it'd let in things like fakeyahoo.com, ispam4yahoo.com, etc. The trailing "%" is a bad idea for any real domains, in any case, and the domain should be delimited in front, as well. ------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/ _______________________________________________ policyd-users mailing list policyd-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/policyd-users
