Hello, I created a drop.conf file and filled it with something like:
drop.conf
re: ET.Scan re: ET.Drop
But some names are similar together. For example, “ET DROP Dshield Block” and “ET DROP Spamhaus”. When I use re: ET.Drop then which one applied?
re: ET.Drop
Thank you.
These are regular expressions, so just be more specific with your expression. ET.DROP will match both ET DROP Dshield Block and ET DROP Spamhaus. If you only want to convert the Samhaus rules, adjust your like to something more specific:
ET.DROP
ET DROP Dshield Block
ET DROP Spamhaus
re: ET.DROP.Spam