Hi!
full PROLO_REDIR_ZDNET_CHECK_1 /http://.*chkpt.zdnet.com/chkpt/ score PROLO_REDIR_ZDNET_CHECK_1 8.0 describe PROLO_REDIR_ZDNET_CHECK_1 PROLO_REDIR-ZDNET CHECK_1_2_3, Body
URI tests are done on the toplevel domain, i dont want to block whole zdnet...
It's the network tests that are done on the registered domain. The entire URI is available to the uri-type tests.
Your rule above, using uri instead of full, works under both 3.0 and 3.1 (and probably older versions).
Of course, if you've got the time to spare, the full test isn't going to hurt anything (well your machine might blow up, but that's it!). :)
So how would it look like? I have no problem replacing it with a less CPU exhausting model ;)
Bye, Raymond.