OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
Re: "Potted" regexquestion

From: WC -Sx- Jones (WC-Sx-Jonesinsecurity.org)
Date: Sat Apr 17 2004 - 09:13:20 CDT

Tony Earnshaw wrote:
> The spam comes (jwhois) from Madritel ES 213.37.150.0 - 213.37.251.255.
> So I make a fine pcre regexp for Madritel:
>
> /(?:^Received:\s{1,2}from\s+.+213\.37\.(?:(?:(?:1(?:[5-9][0-9])|(?:2(?:0|1|2|3|4)[0-9])|(?:25[0-1]))))\.\d{1,3})/

I have never seen such a site - however - wouldn't you be more
interested in mostly the section within the [] ?

At least you have the main logic worked out :)

--
_Sx_ http://youve-reached-the.endoftheinternet.org/ _____
      http://jaxpm.insecurity.org/
      http://cis4dl.insecurity.org/