Try this regex instead:
/^http:\/\/geocities\.yahoo\.com\.br\b/i
hahaha, this worked - and it tagged that broken autoresponder we've been
seeing.
boundary="--=ce94da72-0632-49d0-99bb-3f8c8149300b"
X-Virus-Scanned: by amavisd-new at mailgate.pbp.net
X-Spam-Status: Yes, score=9.704 t
Jonathan Nichols wrote:
Have you tried the 70_sare_specific.cf filter? I am not sure it will
catch that specific problem but it catches spam with geocities and
tripod url's for me.
Yeah, I'm using that list. It's been great, but the *.br one kept
getting through.
I DID see THIS in there,
Jonathan Nichols wrote:
>
>>
>> But that's not the format, there's nothing between the / and the
>> geocities.
>>
>> Try this regex instead:
>>
>> /^http:\/\/geocities\.yahoo\.com\.br\b/i
>
>
> Cool, I shall try that. Thanks! For some reason, I thought one had
> www.geocities.yahoo.com.br in it,
Jonathan Nichols wrote:
But that's not the format, there's nothing between the / and the
geocities.
Try this regex instead:
/^http:\/\/geocities\.yahoo\.com\.br\b/i
Cool, I shall try that. Thanks! For some reason, I thought one had
www.geocities.yahoo.com.br in it, but I could be mistak
But that's not the format, there's nothing between the / and the geocities.
Try this regex instead:
/^http:\/\/geocities\.yahoo\.com\.br\b/i
Cool, I shall try that. Thanks! For some reason, I thought one had
www.geocities.yahoo.com.br in it, but I could be mistaken.
Have you tried the 70_sare_specific.cf filter? I am not sure it will catch
that specific problem but it catches spam with geocities and tripod url's for
me.
Yeah, I'm using that list. It's been great, but the *.br one kept
getting through.
I DID see THIS in there, though..
headerSARE
On 12/15/2005 06:09 pm, Jonathan Nichols wrote:
> Ok, I gave it a shot..
>
> This rule *does* work.
>
> uri GEOCITIES /^http:\/\/[a-z0-9-]{1,30}\.geocities\.com\b/i
> describe GEOCITIESHigh amounts of spam from Geocities.
> score GEOCITIES 6.01
>
Have you tried the 70_sare_sp
Matt Kettler wrote:
Jonathan Nichols wrote:
Ok, I gave it a shot..
This rule *does* work.
uri GEOCITIES /^http:\/\/[a-z0-9-]{1,30}\.geocities\.com\b/i
describe GEOCITIESHigh amounts of spam from Geocities.
score GEOCITIES 6.01
This rule does NOT work.
uri GEOCITIES_YAH
Jonathan Nichols wrote:
> Ok, I gave it a shot..
>
> This rule *does* work.
>
> uri GEOCITIES /^http:\/\/[a-z0-9-]{1,30}\.geocities\.com\b/i
> describe GEOCITIESHigh amounts of spam from Geocities.
> score GEOCITIES 6.01
>
>
> This rule does NOT work.
>
> uri GEOCITIES_YAH
