CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 941
Comments: 25
block bottom
spacer spacer

How to add filters pasted from forum?

 
Post new topic   Reply to topic       All -> FavForums -> Mailwasher - Troubleshooting / General [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
IP: 199.123.*.*

Guest






PostPosted: Mon Nov 03, 2003 2:18 pm    Post subject: How to add filters pasted from forum?
Reply with quote

I tried to cut and paste filters I find her in my filter file. I use Notepad and turn word wrap off. I eliminate the line breaks (I think). But MWP does not recognize the pasted filter. I open the filter text file back up and the new filter is gone.
Is there an easy way to "decode" the filter so I can add it through the filter Add function?

Gotta be something simple.

Ken

Back to top
denn988

Guest
IP: 66.44.*.*






PostPosted: Mon Nov 03, 2003 2:39 pm    Post subject: Re: How to add filters pasted from forum?
Reply with quote

Anonymous wrote:
I tried to cut and paste filters I find her in my filter file. I use Notepad and turn word wrap off. I eliminate the line breaks (I think). But MWP does not recognize the pasted filter. I open the filter text file back up and the new filter is gone.
Is there an easy way to "decode" the filter so I can add it through the filter Add function?

Gotta be something simple.

Ken


First....is MWP running when you do the paste into 'filters.txt'???

If it is, that is your problem. Shutdown MWP first, then paste the filter in there. Make sure that you don't have any extra CR's or LF's in the file, either between filters or after the last filter.

Save the file...then restart MWP.

Maybe that will help.



As for decoding the filter....the best thing I can tell you is to look at what the filter is doing.


Example:

[enabled],"IANA RESERVED [HIDE]","IANA RESERVED",180,AND,Hidden,Delete,TakesPrecedence,EntireHeader,containsRE,"(?# list of IP blocks reserved by IANA - must be updated as required )^Received: from [^[]*?\[([1257]|2[37]|3[1679]|4[129]|5[089]|7\d|8[3-9]|9\d|1[01]\d|12[0-6](?# note to prevent scrolling during post -remove)|17[3-9]|18[0-79]|19[07]|22[3-9]|2[34]\d|25[0-5])(\.[1-2]?\d?\d?){3}\][^;:]*?"

Copy this filter into your 'filters.txt' file as instructed, save the file and then open MWP. Goto your filter sidebar (ctrl+F7 if not open) and select the 'Filters' TAB. You should see the filter "IANA -RESERVED [HIDE]" in the list.

Select that filter and click 'EDIT'. This will bring up the EDIT FILTER dialog box.

You can then see how the above filter is decoded from the 'filters.txt' file.

I would go on and explain how to decode it, but if you just look at the text in the file and compare it to what is shown in the dialog box you should be able to see what keywords in the text file correspond to functions in the dialog box, and how the expressions appear.

Back to top
tekwrite

Guest
IP: 199.123.*.*






PostPosted: Mon Nov 03, 2003 2:49 pm    Post subject:
Reply with quote

Thanks! Very helpful. And yes I was running MW when I tried to add the filters!

Ken

Back to top
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Mailwasher - Troubleshooting / General All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer