Completely agree with Joe. Normally if we did that we saw some situation
where they were using something other than a space perhaps a pipe or a plus
or a non-printable character or something else. So we made the rest of the
role like that to future proof it against other variants of the same spam.
On 4/23/21 2:52 PM, David B Funk wrote:
On Fri, 23 Apr 2021, Steve Dondley wrote:
I'm looking at KAM.cf. There is this rule:
body __KAM_WEB2 /INDIA based
IT|indian.based.website|certified.it.company/i
I'm wondering if there is a good reason why a singe period is used
instead of somethi
On Fri, 23 Apr 2021, RW wrote:
On Fri, 23 Apr 2021 13:52:40 -0500 (CDT)
David B Funk wrote:
On Fri, 23 Apr 2021, Steve Dondley wrote:
I'm looking at KAM.cf. There is this rule:
body__KAM_WEB2 /INDIA based
IT|indian.based.website|certified.it.company/i
I'm wondering if there is a good
On Fri, 23 Apr 2021 13:52:40 -0500 (CDT)
David B Funk wrote:
> On Fri, 23 Apr 2021, Steve Dondley wrote:
>
> > I'm looking at KAM.cf. There is this rule:
> >
> > body__KAM_WEB2 /INDIA based
> > IT|indian.based.website|certified.it.company/i
> >
> > I'm wondering if there is a good reason wh
On Fri, 23 Apr 2021, Steve Dondley wrote:
I'm looking at KAM.cf. There is this rule:
body__KAM_WEB2 /INDIA based
IT|indian.based.website|certified.it.company/i
I'm wondering if there is a good reason why a singe period is used instead of
something like \s+ which would catch multiple sp
On 2021-04-23 01:37 PM, Henrik K wrote:
On Fri, Apr 23, 2021 at 01:03:33PM -0400, Steve Dondley wrote:
I'm looking at KAM.cf. There is this rule:
body__KAM_WEB2 /INDIA based
IT|indian.based.website|certified.it.company/i
I'm wondering if there is a good reason why a singe period is used
On Fri, Apr 23, 2021 at 01:03:33PM -0400, Steve Dondley wrote:
> I'm looking at KAM.cf. There is this rule:
>
> body__KAM_WEB2 /INDIA based
> IT|indian.based.website|certified.it.company/i
>
> I'm wondering if there is a good reason why a singe period is used instead
> of something like \s+
On 23.04.21 13:03, Steve Dondley wrote:
I'm looking at KAM.cf. There is this rule:
body__KAM_WEB2 /INDIA based
IT|indian.based.website|certified.it.company/i
I'm wondering if there is a good reason why a singe period is used
instead of something like \s+ which would catch multiple space
I'm looking at KAM.cf. There is this rule:
body__KAM_WEB2 /INDIA based
IT|indian.based.website|certified.it.company/i
I'm wondering if there is a good reason why a singe period is used
instead of something like \s+ which would catch multiple spaces whereas
a singe period doesn't.
