Re: GeoCities Link-only spam

[Jonathan Nichols]

Of course, if you want to match *any* Geocities URL (which I think is a 
bit much for a 4-point score), you'd want something like this:

uri GEOCITIES             /\.geocities\.com\b/i

or if you want to make sure it matches the domain name,

uri GEOCITIES             /^http:\/\/[a-z0-9-]{1,30}\.geocities\.com\b/i


Cool! thanks. I think that will work a lot better. :)

I got one today based on my previous feeble rule attempt. It got 4 
points.. my rule was the only one that it hit.

Bloody Geocities. :|