On Wed, 16 May 2012, Joseph Acquisto wrote:

On 5/16/2012 at 8:53 PM, "Joseph Acquisto" <j...@j4computers.com> wrote:
On 5/16/2012 at 5:18 PM, Brent Gardner <bgardnermailingli...@gmail.com> wrote:

How about:

/\.ru\b/i

I will give that a try.

That worked.  But I imagine it may trigger on innocuous instances of .ru as 
well, so it should also include check for http:// and wildcard for domain.

What were you doing that _didn't_ detect that? The "proper" way is this:

   uri   URI_DOT_RU    /\.ru\b/i

...and let the body parser figure out the "link" context.

Is there some reason that won't work?

Could you post the rule you were originally using?

--
 John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
 jhar...@impsec.org    FALaholic #11174     pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
  If Microsoft made hammers, everyone would whine about how poorly
  screws were designed and about how they are hard to hammer in, and
  wonder why it takes so long to paint a wall using the hammer.
-----------------------------------------------------------------------
 2 days until SpaceX Dragon first mission to ISS

Reply via email to