[mod-security-users] How do I block mail attempts?

[Mark <ad...@as...>]

How do I block mail attempts, like below?

    "POST http://67.234.73.188:25/ HTTP/1.1"

Would this do it?

    SecFilter "\:25\/"

Also, speaking of SecFilter, I have this:

    SecFilter "(\.com|\.exe|\.cmd|\.bat)"

Can I add $ at the end of SecFilter? Like so:

    SecFilter "(\.com|\.exe|\.cmd|\.bat)$"

I only want to match on patterns ending in this!

Thanks,

- Mark