Page 1 of 1

Blocking content with ABE?

Posted: Mon Jun 02, 2014 11:17 am
by access2godzilla
Is blocking of requests based on its content possible with ABE? I know that I can do this:

Code: Select all

Site ^https?://.*exe
Accept from .sourceforge.net .mozilla.org
Deny
But what I'm trying to do can be perhaps described like this:

Code: Select all

# Block executables
Content /MZ.*PE/
Accept from .sourceforge.net .mozilla.org
Deny
Of course it does not help with zipped files or XORed payloads and such, but I was just wondering if it could be done...

Re: Blocking content with ABE?

Posted: Mon Jun 02, 2014 1:24 pm
by barbaz