I created a
drop.conf file and filled it with something like:
But some names are similar together. For example, “ET DROP Dshield Block” and “ET DROP Spamhaus”. When I use
re: ET.Drop then which one applied?
These are regular expressions, so just be more specific with your expression.
ET.DROP will match both
ET DROP Dshield Block and
ET DROP Spamhaus. If you only want to convert the Samhaus rules, adjust your like to something more specific: