On Sun, 26 May 2002 the voices made Rob McMillin write:
> More mortgage spam. This one somehow evaded all the normal tests; I
> would propose the following modification to NORMAL_HTTP_TO_IP as a
> countermeasure:
>
> uri NORMAL_HTTP_TO_IP /https?\:\/\/\d+\.\d+\.\d+\.\d+/is
> describe NORMAL_
More mortgage spam. This one somehow evaded all the normal tests; I
would propose the following modification to NORMAL_HTTP_TO_IP as a
countermeasure:
uri NORMAL_HTTP_TO_IP /https?\:\/\/\d+\.\d+\.\d+\.\d+/is
describe NORMAL_HTTP_TO_IP Uses a dotted-decimal IP address in URL
This may slow
