This was discussed a week or 2 ago. Here is what I am using per somebody's post
uri GEOCITIES /^http:\/\/uk\.geocities\.com\b/i describe GEOCITIES GEOCITIES with uk.geocities.com score GEOCITIES 3.1 Brian ----- Original Message ----- From: "Jon Drukman" <[EMAIL PROTECTED]> To: <users@spamassassin.apache.org> Sent: Tuesday, August 16, 2005 3:47 PM Subject: URIDNSBL: found domain geocities.com in skip list | I'm getting a lot of spams slipping thru the net lately. They hit | BAYES_99 and nothing else, usually, because they contain almost no | content other than a URL: | | http://uk.geocities.com/Robt_Bright/?M0v=Make.your.day_enjoyable.without | | URIDNSBL is apparently skipping that due to it being geocities. | | debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x84e6960) | implements 'parsed_metadata' | debug: uri found: | http://uk.geocities.com/Robt_Bright/?M0v=Make.your.day_enjoyable.without | debug: URIDNSBL: found domain geocities.com in skip list | debug: URIDNSBL: domains to query: | | Does anyone have a good method for trapping these mails? | | The subject and body are not much help... here's what I have: | | Subject: re: concepcion | pamula | | http://uk.geocities.com/Robt_Bright/?M0v=Make.your.day_enjoyable.without | | bryce | | -jsd- | |
