Regular Expression Repetition Operators {} Do Not Work in Content Filtering

Article:TECH156589  |  Created: 2011-03-25  |  Updated: 2011-04-25  |  Article URL http://www.symantec.com/docs/TECH156589
NOTE: If you are experiencing this particular known issue, we recommend that you Subscribe to receive email notification each time this article is updated. Subscribers will be the first to learn about any releases, status changes, workarounds or decisions made.
Article Type
Technical Solution

Product(s)

Issue



A regular expression using a repetition operator {} does not block messages.  For example the following regular expression should block messages that contains three digits:

\d {3 }

NOTE:  The above expression has a space character after the three.  This is due to an issue in the KB system.  The expression as entered in IM Manager does not contain spaces.

However a message with three digits is not blocked.

The following steps demonstrate how to reproduce this issue:

1. Add the regular expression to a content filtering list.

a. Open the IM Manager Administration Console.
b. Click on the Policies tab.
c. Click on the Edit icon for the General Content Filtering Phrase List (or any other phrase list).
d. Enter the following in the text box:

\d{3 }

NOTE:  The above expression has a space character after the three.  This is due to an issue in the KB system.  The expression as entered in IM Manager does not contain spaces.

e. Select Regular Expression from the drop down list and click the Add button.
f. Click the Submit button to close the content filtering list window.


2. Configure the action for the content filtering list to block the message.

a. Click the Edit icon for the Content Filtering Action: General policy (or any other phrase list).
b. Click the Enable Content Filtering checkbox.
c. Select the Block the message radio option.
d. Select any other options desired.
e. Click the Submit button to close the content filtering actions window.


3. Restart IM Manager services (or wait 30 minutes).
4. Send the message.  See it is not blocked.


Cause



IM Manager is not applying the repetition operator to messages.


Solution



Symantec is aware of this issue.

Workaround

Repeat the match term in the regular expression.  For example to block a sequence of three digits the following can be used:

\d\d\d

 


Supplemental Materials

SourceETrack
Value2330371


Article URL http://www.symantec.com/docs/TECH156589


Terms of use for this information are found in Legal Notices