On Monday, August 28, 2006 at 7:53:40 AM, Whisky confabulated:
> There's a lot of spam lately, which contains urls with subdirectories, such
> as http://spamdomain.org/gal/ms/.
> I have thus set up the following rule:
> body BODY_ADDS_22
> /(\/za\/|\/wd\/|\/iu\/|\/xi\/|\/gal\|\/tx\/|\/nu\/)/i
> However, when I send a testmail that conatins the string "/gal" the rule is
> not triggered. What am I doing wrong here?
Are you using any network tests (specifically URIBL) and Razor2? Those
are what is catching most of these on our server here.
Here's the Spam status header from one of these messages:
X-Spam-Status: Hits:14.8 Bayes:0.5 Learn:disabled
Tests:RAZOR2_CF_RANGE_51_100,RAZOR2_CF_RANGE_E8_51_100,RAZOR2_CHECK,
UNPARSEABLE_RELAY,URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC_SURBL
--
"This message was sent using 100% recycled electrons."
