Have you tried the 70_sare_specific.cf filter? I am not sure it will catch
that specific problem but it catches spam with geocities and tripod url's for
me.
Yeah, I'm using that list. It's been great, but the *.br one kept
getting through.
I DID see THIS in there, though..
header SARE_SPEC_CLIENT_TOS2 From =~ m'[EMAIL PROTECTED]'i
describe SARE_SPEC_CLIENT_TOS2 known spammer address
score SARE_SPEC_CLIENT_TOS2 2.222
[EMAIL PROTECTED] is the AOL Postmaster feedback loop address. I don't think
that one oughta be in there.. unless spammers are forging it. Eeeek!
