Permalink
Browse files

- spamfilter.conf Gaggle worm sigs were broken causing odd things to …

…match, this is because

  \\ now needs to be escaped as \\\\ due to the 3.2.3 conf change... didn't think of updating sigs.

--HG--
branch : unreal3_2_fixes
  • Loading branch information...
syzop
syzop committed Mar 20, 2005
1 parent c98ce4f commit a4c3553230e51a65f37134150181afbbf8684587
Showing with 4 additions and 2 deletions.
  1. +2 −0 Changes
  2. +2 −2 spamfilter.conf
View
@@ -775,3 +775,5 @@
- Corrected small doc typo in unreal32docs, reported by arbiter.
** 3.2.3 release **
- Fixed incorrect badword { } in conf causing a crash (should give an error).
+- spamfilter.conf Gaggle worm sigs were broken causing odd things to match, this is because
+ \\ now needs to be escaped as \\\\ due to the 3.2.3 conf change... didn't think of updating sigs.
View
@@ -155,14 +155,14 @@ spamfilter {
/* This is a 'general sig' which might have a tad more false positives, hence just 'block' is used */
spamfilter {
- regex "C:\\WINNT\\system32\\[][0-9a-z_-{|}`]+\.zip";
+ regex "C:\\\\WINNT\\\\system32\\\\[][0-9a-z_-{|}`]+\.zip";
target dcc;
action block;
reason "Infected by Gaggle worm?";
};
spamfilter {
- regex "C:\\WINNT\\system32\\(notes|videos|xxx|ManualSeduccion|postal|hechizos|images|sex|avril)\.zip";
+ regex "C:\\\\WINNT\\\\system32\\\\(notes|videos|xxx|ManualSeduccion|postal|hechizos|images|sex|avril)\.zip";
target dcc;
action dccblock;
reason "Infected by Gaggle worm";

0 comments on commit a4c3553

Please sign in to comment.