> 
> 
> I am seeing other variations of this which are not hitting the default
> rules.
> 
> http://rd.yahoo.com/ckp/milodsidlnghe/*http://ido-want.com.br/
jaat/SonnyRealBBQ1604/index.htm

The default rule in 2.60 is (May wrap in your email viewer):

uri     YAHOO_REDIR
/^https?\:\/\/rd\.yahoo\.com\/(?:[0-9]{4,}|partner\b|dir\b)/i
describe YAHOO_REDIR            Has Yahoo Redirect URI

Which seems rather specific. Spammer could easily fool this. I agree with
the earlier rule rewrite from Larry that simply looks for 

 uri      MY_URI_REDIRECT    /https?:\/\/.*\/\*http:\/\//i

--Chris Santerre



-------------------------------------------------------
This SF.net email is sponsored by: The SF.net Donation Program.
Do you like what SourceForge.net is doing for the Open
Source Community?  Make a contribution, and help us add new
features and functionality. Click here: http://sourceforge.net/donate/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to