On Fri, 2009-07-10 at 11:39 -0400, Daniel Schaefer wrote: > McDonald, Dan wrote:
> Since we're sharing rules for this recent Spam outbreak, here is my rule:
> body DRUG_SITE /www(\.|\
> )*(med|meds|gen|pill|shop|via|cu|co|ba|da|bu|ba)[0-9]{2}(\.|\ )*(net|com)/
You should avoid the use of *, as it allows spammers to consume all of
your memory and cpu. limit it using the {} syntax. You also should
tell perl to not keep the results of your () with (?:\.|\ ) instead of
(\.|\ ). And with single characters, the [ab] syntax is faster to
process than (?:a|b).
--
Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX
www.austinenergy.com
signature.asc
Description: This is a digitally signed message part
