Matt Kettler wrote:
Jonathan Nichols wrote:Ok, I gave it a shot.. This rule *does* work. uri GEOCITIES /^http:\/\/[a-z0-9-]{1,30}\.geocities\.com\b/i describe GEOCITIES High amounts of spam from Geocities. score GEOCITIES 6.01 This rule does NOT work. uri GEOCITIES_YAHOO /^http:\/\/[a-z0-9-]{1,30}\.geocities\.yahoo\.com\.br\b/i describe GEOCITIES_YAHOO High amounts of spam from Geocities. score GEOCITIES_YAHOO 6.01 My regexp foo is non existent, but at least I *did* try. Can someone tell me what went wrong? :-)Can you post a sample URI that failed to match? If the first rule matches, and the second rule doesn't I can conclude that the URI is definitely does NOT contain the string geocities.yahoo.com.br. If it did, the first rule would not match.
I'll post it the next time one shows up.. the cron job that feeds spam to Bayes picked it up out of the training folder and ate it. :-)
