Sloan wrote:
> Leonardo Rodrigues Magalhães wrote:
>   
>> Tobias Kreidl escreveu:
>>     
>>> Rianto Wahyudi wrote on 2007-10-07 01:25:
>>>  
>>>       
>>>> | %yahoo.com%                |
>>>>     
>>>>         
>>> Shouldn't that read "%yahoo.com" (no trailing "%")?
>>>   
>>>       
>>    Yeah ... the trailing % really seems to be a mistyped character.
>> Anyway, it would match even with that extra trailing %:
>>     
>
> It would also match e.g. yahoo.com.spammer.domain which is a common ruse -
>
> J
>   
To be completely correct, it should actually read:

%.yahoo.com

or otherwise, it'd let in things like fakeyahoo.com, ispam4yahoo.com, 
etc.  The trailing "%" is a bad idea for
any real domains, in any case, and the domain should be delimited in 
front, as well.

-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems?  Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
policyd-users mailing list
policyd-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/policyd-users

Reply via email to