Aaron Street

Hi, I don't know if this is any use, but here is a regex expression that will parse an email address and check its format (I am not a regex guru so this is built from things I have pulled of the web). I know the realm is not strictly an email address but the syntax should be the same. I am sure some one if they wish can strip it to only check the realm part of the string. ^([a-z0-9]+)([._-]([0-9a-z_-]+))*@([a-z0-9]+)([.]([0-9a-z]+))*([.]([a-z0-9]+){2,4})$ It covers all the white space, double .. and single @. (?:ax.uk|ax.edu|@ac.uk|sc.uk|ac.edu|ac.u|b|.local|myabc.com|3gppnetworks.org|gmail.com|googlemail.com|hotmail.com|hotmail.co.uk|live.com|outlook.com|yahoo.com|yahoo.cn|unimail.com) matches any of the invalid realms. NOTE you still need a separate rule to then block own realm with out the ".ac.uk" But if you block any thing that matches these two regex from getting forwarded, you should in most cases be cleaning up most of the issues mentioned above. Many radius servers seem to accept regex as arguments in a policy, and for some people starting out in eduraom who are new to radius, writing a policy for all the above might seem a bit daunting. With a regex for validating the formatting of the realm, and one for stripping out known bad realms it will allow every one to be compliment right from the start. And if and when changes are made, if the regex is edited and republished its a quick copy and paste to insure your site is still compliant.