On Tue, 10 Apr 2007, John D. Hardin wrote:
> On Tue, 10 Apr 2007, Steven Stern wrote:
>
> > Just type www [.] pillking [.] org
> > Just type <FONT color=#ff0000>www</FONT> [.]
> > <STRONG><FONT color=#ff0000>pillking</FONT></STRONG> [.] <FONT
> > color=#ff0000>org</FONT></FONT>
> >
> > Just type www [dot] pilldoc [dot] org
> >
> > I suspect a rule that looks for "www*pill*org" would work. How do I turn
> > that into a regex?
>
> Perhaps something like:
>
> body OBFUSC_PILL_URI /\bwww\b.{3,50}\bpill.{3,50}\borg\b/i
Actually, body matches strip out HTML markup so you could tighten it
up a bit:
body OBFUSC_PILL_URI /\bwww\b.{3,10}\bpill.{3,15}\borg\b/i
--
John Hardin KA7OHZ http://www.impsec.org/~jhardin/
[EMAIL PROTECTED] FALaholic #11174 pgpk -a [EMAIL PROTECTED]
key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
Think Microsoft cares about your needs at all?
"A company wanted to hold off on upgrading Microsoft Office for a
year in order to do other projects. So Microsoft gave a 'free' copy
of the new Office to the CEO -- a copy that of course generated
errors for anyone else in the firm reading his documents. The CEO
got tired of getting the 'please re-send in XX format' so he
ordered other projects put on hold and the Office upgrade to be top
priority." -- Cringely, 4/8/2004
-----------------------------------------------------------------------
3 days until Thomas Jefferson's 264th Birthday
