Gerry Maddock wrote:
McDonald, Dan wrote:
Since we're sharing rules for this recent Spam outbreak, here is my
rule:
body DRUG_SITE /www(\.|\
)*(med|meds|gen|pill|shop|via|cu|co|ba|da|bu|ba)[0-9]{2}(\.|\ )*(net|
com)/
You should avoid the use of *, as it allows spammers to consume all of
your memory and cpu. limit it using the {} syntax. You also should
tell perl to not keep the results of your () with (?:\.|\ ) instead of
(\.|\ ). And with single characters, the [ab] syntax is faster to
process than (?:a|b).
Perhaps you could attach an example showing exactly what your stating for
this rule?
This is my new rule. I think this is what he means:
body DRUG_SITE /www[\.\
]*(?:med|meds|gen|pill|shop|via|cu|co|ba|da|bu|ba)[0-9]{2}[\.\
]*(?:net|com)/
--
Dan Schaefer
Application Developer
Performance Administration Corp.
