Hi Pheniix,
Where can I download the WLC IPS custom signature file? Is cisco WLC support openLdap for user web or 802.1x authentication???! Jake
I found a Doc is located here
I believe the regex you want is:
[Mm][Aa][Ii][Ll][\t][Ff][Rr][Oo][Mm][:][\x21-\x7E]+[@][Ss][Ee][Xx].[Cc][Oo][Mm]
The + field allows for any printable characters (but there must be at least 1) in the senders' email address. You should use the SMTP state machine with the SMTP Commands state set, direction to service port 25.