Hi!
He's on 2.64 currently.
You don't say what version of SA you are referring to. The best thing is to upgrade to latest SA which does a terrific job using several URL black lists. This is a new feature in SA that looks for URLs in spam. This will likely stop your problem without having to write special rules.
You dont happen to have the SURBL plugin installed i guess? Would be wise to upgrade to SA 3.x or install the plugin for SURBL.
See: http://sourceforge.net/projects/spamcopuri/
I am positive it will block most of the crap that you now see passing the filters.
Bye, Raymond.