> > McDonald, Dan wrote:
>
> > Since we're sharing rules for this recent Spam outbreak, here is my
rule:
> > body DRUG_SITE /www(\.|\
> > )*(med|meds|gen|pill|shop|via|cu|co|ba|da|bu|ba)[0-9]{2}(\.|\ )*(net|
com)/
>
> You should avoid the use of *, as it allows spammers to consume all of
> your memory and cpu. limit it using the {} syntax. You also should
> tell perl to not keep the results of your () with (?:\.|\ ) instead of
> (\.|\ ). And with single characters, the [ab] syntax is faster to
> process than (?:a|b).
>
Perhaps you could attach an example showing exactly what your stating for
this rule?
CONFIDENTIALITY: This e-mail message is for the sole use of the intended
recipient(s) and may contain confidential and / or privileged information. Any
unauthorized review, use, disclosure or distribution of any kind is strictly
prohibited. If you are not the intended recipient, please contact the sender
via reply e-mail and destroy all copies of the original message. Thank you.
