Help Question[+request]
{.set|agent|{.header|User-Agent.}.}
How do I check if it is Null ? if %agent% =
""I am getting triggers to my rules from null results, which I want to block. (Such as port scans.)
Trial & Error is getting tiresome
Thanks very much !
EDIT:
So it can be added to the rules
like this -- {.match|
NULL|{.^agent.}.}
How do I do this ?
EDIT2:
Ok, I thought of a 'work around' define NULL with something that could never exist,
LIKE SO = NULL could never exist in the header, lol
[+request]
{.set|NULL|{.header|NULL.}.}
SO, {.^NULL.} must always be
"" (null) - must be an easier way, (waiting for a reply) but at least my learning can move forward !
{.match|
{.^NULL.}|{.^agent.}.}
<- half right, has one major flaw, do you know ? Gives me the condition
if no User-Agent <- ^umm not exactly {whistle}