diff options
Diffstat (limited to 'package/iptables/files/l7/smtp.pat')
| -rw-r--r-- | package/iptables/files/l7/smtp.pat | 22 |
1 files changed, 11 insertions, 11 deletions
diff --git a/package/iptables/files/l7/smtp.pat b/package/iptables/files/l7/smtp.pat index 1bab7a1..eb98ae7 100644 --- a/package/iptables/files/l7/smtp.pat +++ b/package/iptables/files/l7/smtp.pat @@ -1,22 +1,17 @@ # SMTP - Simple Mail Transfer Protocol - RFC 2821 (See also RFC 1869) -# Pattern quality: great fast +# Pattern attributes: great notsofast fast +# Protocol groups: mail ietf_internet_standard +# Wiki: http://www.protocolinfo.org/wiki/SMTP +# # usually runs on port 25 # -# This pattern has been tested and is believed to work well. If it does not -# work for you, or you believe it could be improved, please post to -# l7-filter-developers@lists.sf.net . This list may be subscribed to at -# http://lists.sourceforge.net/lists/listinfo/l7-filter-developers +# This pattern has been tested and is believed to work well. -smtp # As usual, no text is required after "220", but all known servers have some # there. It (almost?) always has string "smtp" in it. The RFC examples # does not, so we match those too, just in case anyone has copied them # literally. -^220[\x09-\x0d -~]* (e?smtp|simple mail) - -# This is ~3x faster if the stream starts with "220" -#^220.* (e?smtp|simple mail) - +# # Some examples: # 220 mail.stalker.com ESMTP CommuniGate Pro 4.1.3 # 220 mail.vieodata.com ESMTP Merak 6.1.0; Mon, 15 Sep 2003 13:48:11 -0400 @@ -37,3 +32,8 @@ smtp # RFC examples: # 220 xyz.com Simple Mail Transfer Service Ready (RFC example) # 220 dbc.mtview.ca.us SMTP service ready + +smtp +^220[\x09-\x0d -~]* (e?smtp|simple mail) +userspace pattern=^220[\x09-\x0d -~]* (E?SMTP|[Ss]imple [Mm]ail) +userspace flags=REG_NOSUB REG_EXTENDED |