On Thu, 24 Feb 2005 23:39:55 -0500, Chris [EMAIL PROTECTED] wrote:
[attack dropped]|scan dropped]|[sppf dropped] TextYes
This probably isn't the problem, but you're missing a '[' before scan.
Yeah; I manually typed it into the msg - they're in the actual filter,
though.
--
Happy
On Tue, 22 Feb 2005 13:13:17 +, Marck D Pearlstone
[EMAIL PROTECTED] wrote:
log-fw Sender Yes
alert Subject Yes
[scan|attack] dropped TextYes
On v2.12.00 this did the trick:
log-fw Sender Yes
Cory @ 2005-Feb-24 4:27:14 AM
Help with filters please mid:[EMAIL PROTECTED]
[attack dropped]|scan dropped]|[sppf dropped] TextYes
This probably isn't the problem, but you're missing a '[' before scan.
--
Chris
Quoting when replying to this message is good for your karma.
Using
On Tue, 22 Feb 2005 13:13:17 +, Marck D Pearlstone
[EMAIL PROTECTED] wrote:
I can try ... although you don't say which version you are using.
Thank you Marck - I omitted I'm at v2.12.00
Filter text matching is case insensitive by default.
Aha, I thought so but my filtering results seemed
Hi @ll,
Could someone please give me a hint on how to work this out?
I want to set up filtering for log messages where sender and subject
contain similar strings, and body text contains (non-) capitalized
lowercase phrases like scan dropped and Attack Dropped.
The use of [] and | isn't all that
Dear Cory,
@22-Feb-2005, 11:16 +0100 (22-Feb 10:16 UK time) Cory [C] in
mid:[EMAIL PROTECTED] said:
C Could someone please give me a hint on how to work this out?
I can try ... although you don't say which version you are using.
C I want to set up filtering for log messages where sender and
C
6 matches
Mail list logo
