On Wed, Mar 17, 2010 at 07:11:33PM + or thereabouts, Martin Gregorie wrote:
> On Wed, 2010-03-17 at 13:26 -0500, Gary wrote:
> > Ok, I'll figure out a URI body rule from some examples on the SA website.
> >
> You're looking at this sort of pattern:
>
> uri RULENAME /(url1|url2|url3)/i
>
>
On Wed, 2010-03-17 at 13:26 -0500, Gary wrote:
> Ok, I'll figure out a URI body rule from some examples on the SA website.
>
You're looking at this sort of pattern:
uri RULENAME /(url1|url2|url3)/i
and don't forget to escape dots in the URL ( replace . with \. ), but be
warned, this approach ten
Hi Martin,
On Wed, 17 Mar 2010 16:35:11 + UTC(3/17/2010, 11:35 AM -0600 UTC my
time), Martin Gregorie wrote:
>> I have been seeing a lot of spam coming through with just one line of
>> spam, and just a URL link to such domains as
M> If there's nothing consistent or recognisable in the line o
On Wed, 2010-03-17 at 11:09 -0500, Gary wrote:
> I have been seeing a lot of spam coming through with just one line of
> spam, and just a URL link to such domains as
>
If there's nothing consistent or recognisable in the line of spam, or
the Subject: and From: headers that you can write a rule for
