Hi all,
I may be wrong about it but: A field delimiter is never a part of the field.
As by definition (RFC2821 - 2.3.7 Lines) the delimiter of any line or command in SMTP is CRLF the CRLF finishing any line should not be evaluated by transaction filtering.
Besides the current status not being logical I guess many users did a hostname* to get it to match which weakens the filter (well, at least I did so until using a packet sniffer today).
Workaround:
End the expression with "??" as in transaction filter H, "[heHE][heHE]LO hostname??", S, "own devices excempt from transaction filtering" to have exact matches
Solution:
- please correct in future relases.
Thank you, Rainer
P.S. Please enhance documentation in help file or have someone with inside knowledge write a KB article about regular expressions in Mercury (if I wanted to I ended up in endless trial-and-error-tests to find out what is required/evaluated how and where).
<P>Hi all,</P>
<P>I may be wrong about it but: A field delimiter is never a part of the field.
As&nbsp;by definition (RFC2821 - 2.3.7 Lines) the delimiter&nbsp;of&nbsp;<U>any</U> line or command in SMTP is CRLF the CRLF finishing any line should not be evaluated by transaction filtering.
Besides the current status not being logical I guess many users did a <EM>hostname</EM><STRONG><EM><U>*</U></EM></STRONG>&nbsp;to get it to match which weakens the filter (well, at least I did so until using a packet sniffer today). </P>
<P>Workaround:
End the&nbsp;expression with "??" as in&nbsp;transaction filter <EM>H, "[heHE][heHE]LO hostname<U><STRONG>??</STRONG></U>", S, "own devices excempt from transaction filtering"</EM> to have exact matches
Solution:
-&nbsp;please correct in future relases.</P>
<P>
Thank you, Rainer</P>
<P>P.S. Please enhance documentation in help file or have someone with inside knowledge write a KB article about regular expressions in Mercury (if I wanted to I ended up in endless trial-and-error-tests to find out what is required/evaluated how and where). </P>