Re: [Evolution] Filter not filtering....



Good thing I asked!  :-)

Thanks,
-Luke

On Tue, 2003-11-04 at 12:34, Jeffrey Stedfast wrote:
shouldn't that be ([0-7]){3,4} instead of [0-9][0-9][0-9]? :-)

Jeff

On Tue, 2003-11-04 at 12:24, Luke Scharf wrote:
Here's an improved version of this script.  It will also flag messages
containing in uuencoded messages, such as the ECAR message that Nessus
sends out:

#!/bin/bash
cat | egrep -i -e "^content-" -e "^begin[[:space:]][0-9][0-9][0-9][[:space:]]" \
    | egrep -i -e '\.exe' -e '\.pif"' -e '\.com' -e '\.bat' 2>&1 \
    >> /dev/null
exit $?




[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]