MakeClicky weirdness

Hello,

we have found a strange behaviour in …/html/RTIR/Elements/MakeClicky
we have traced to the “host” discovery (it goes away when commenting out
the ‘Fdomain’ regular expression) but are unable to identify.

We receive a lot of messages where the TLD of host names is all capital
letters, e.g. <host.domain.Sun.COM>. Now - these host names are
completely removed form messages when displayed in RTIR!

When they are <host.domain.sun.com>, this does not happen and MakeClicky
substitutes the correct Lookup URL. We initially suspected an
incompatibility with the ‘GRIPE’ entry [the only one checking for caps],
but commenting this one out does not resolve the issue.

Anyone any idea?

BTW: TLDs can have more than 3 chars by now, e.g. .info :wink:

< Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,3}], $cb{host} ],

Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,4}], $cb{host} ],

Best regards,

Ruediger Riediger

Dr. Ruediger Riediger Sun Microsystems GmbH
NSG - SunCERT Komturstr. 18a
mailto:Ruediger.Riediger@Sun.com D-12099 Berlin
NOTICE: This email message is for the sole use of the intended
recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution is prohibited.
If you are not the intended recipient, please contact the sender by
reply email and destroy all copies of the original message.
PGP 2048RSA/0x2C5020E9 964C E189 0FF0 8882 2BAB 65E2 6912 1FF2

Hello,

we have found a strange behaviour in …/html/RTIR/Elements/MakeClicky
we have traced to the “host” discovery (it goes away when commenting out
the ‘Fdomain’ regular expression) but are unable to identify.

We receive a lot of messages where the TLD of host names is all capital
letters, e.g. <host.domain.Sun.COM>. Now - these host names are
completely removed form messages when displayed in RTIR!

When they are <host.domain.sun.com>, this does not happen and MakeClicky
substitutes the correct Lookup URL. We initially suspected an
incompatibility with the ‘GRIPE’ entry [the only one checking for caps],
but commenting this one out does not resolve the issue.

Anyone any idea?

BTW: TLDs can have more than 3 chars by now, e.g. .info :wink:

< Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,3}], $cb{host} ],

Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,4}], $cb{host} ],

If you want that the capital letters are accepted on that regular
expression, you’ll have to write some like the following

Fdomain => [ q[(?:[\w-]+.)+[A-Za-z]{2,3}], $cb{host} ]

I think it’ll be enough to fix your matter.

Cheers,
Carlos
Carlos Fuentes Bermejo carlos@cert.ja.net
JANET-CERT

signature.asc (189 Bytes)

< Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,3}], $cb{host} ],

Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,4}], $cb{host} ],

If you want that the capital letters are accepted on that regular
expression, you’ll have to write some like the following

Fdomain => [ q[(?:[\w-]+.)+[A-Za-z]{2,3}], $cb{host} ]

I think it’ll be enough to fix your matter.

Ruediger, if that works for you, forward carlos’ mail to
rtir-bugs@fsck.com and we’ll get it checked in.

Jesse

< Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,3}], $cb{host} ],

Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,4}], $cb{host} ],

If you want that the capital letters are accepted on that regular
expression, you’ll have to write some like the following

Fdomain => [ q[(?:[\w-]+.)+[A-Za-z]{2,3}], $cb{host} ]

I think it’ll be enough to fix your matter.

Ruediger, if that works for you, forward carlos’ mail to
rtir-bugs@fsck.com and we’ll get it checked in.

Jesse, we had the same problem here, and that works for us, but if I
don’t remember bad, the RTIR 1.2 engine takes out this problem, because
its regular expression cares about the capital letters.

Cheers,
Carlos
A Spanish guy in JANET-CERT
Carlos Fuentes Bermejo carlos@cert.ja.net
JANET-CERT

signature.asc (189 Bytes)

BTW: TLDs can have more than 3 chars by now, e.g. .info :wink:

< Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,3}], $cb{host} ],

Fdomain => [ q[(?:[\w-]+.)+[a-z]{2,4}], $cb{host} ],

Don’t forget sTLDs such as .museum (six chars!).

~reed
Reed Loden - reed@reedloden.com

Jesse Vincent wrote:

If you want that the capital letters are accepted on that regular
expression, you’ll have to write some like the following

Fdomain => [ q[(?:[\w-]+.)+[A-Za-z]{2,3}], $cb{host} ]

I think it’ll be enough to fix your matter.

Did not check it a case issue as the next regex (starting with ‘(?-i:’)
would not make sense if it’s case sensitive anyway. Should have taken a
closer look.

Ruediger, if that works for you, forward carlos’ mail to
rtir-bugs@fsck.com and we’ll get it checked in.

indeed, this fixes the issue. I will send to the bug list.

Best regards,

Ruediger Riediger

Dr. Ruediger Riediger Sun Microsystems GmbH
NSG - SunCERT Komturstr. 18a
mailto:Ruediger.Riediger@Sun.com D-12099 Berlin
NOTICE: This email message is for the sole use of the intended
recipient(s) and may contain confidential and privileged information.
Any unauthorized review, use, disclosure or distribution is prohibited.
If you are not the intended recipient, please contact the sender by
reply email and destroy all copies of the original message.
PGP 2048RSA/0x2C5020E9 964C E189 0FF0 8882 2BAB 65E2 6912 1FF2