Re: clever .exe match?

From: Ralf Hildebrandt (no email)
Date: Wed Oct 01 2003 - 02:47:39 EDT


* Peter H. Coffin <>:
> On Tue, Sep 30, 2003 at 11:15:31AM -0700, Dean Gibson (Mail Administrator) wrote:
> > raptor wrote on 2003-09-30 05:13:
> > >does someone tried .exe matches below...
> > >Or the order at which the regexes are tried may be different that
> > >specified in the xxx_checks files...
> > >
> > >/^TV[nopqr]....[AB]..A.A/i REJECT Email with EXE files attached denied
> > >/^M35[GHIJK].`..`..*````/i REJECT Email with EXE files attached denied
> >
> > I use just above two lines in body_checks, and the first one catches quite
> > a few. The order is not significant.
>
> Does the significance change if the order is reversed?

These regexp and pcre checks are searched / matched in a linear
fashion. So the answer is yes.

-- 
Ralf Hildebrandt                                 
my current spamtrap                              
http://www.arschkrebs.de/postfix/                Tel. +49 (0)30-450 570-155
Why you can't find your system administrators:
Outside having a smoke because it's illegal in the building. 







Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD