> > > I am seeing other variations of this which are not hitting the default > rules. > > http://rd.yahoo.com/ckp/milodsidlnghe/*http://ido-want.com.br/ jaat/SonnyRealBBQ1604/index.htm
The default rule in 2.60 is (May wrap in your email viewer): uri YAHOO_REDIR /^https?\:\/\/rd\.yahoo\.com\/(?:[0-9]{4,}|partner\b|dir\b)/i describe YAHOO_REDIR Has Yahoo Redirect URI Which seems rather specific. Spammer could easily fool this. I agree with the earlier rule rewrite from Larry that simply looks for uri MY_URI_REDIRECT /https?:\/\/.*\/\*http:\/\//i --Chris Santerre ------------------------------------------------------- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.net is doing for the Open Source Community? Make a contribution, and help us add new features and functionality. Click here: http://sourceforge.net/donate/ _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk