JP Kelly wrote:
any takers on this?
On Feb 27, 2008, at 2:31 PM, Chip M. wrote:
The main thing that stands out (to me) is the China TLD in the URL.
We block all those on sight (unless they're in the recipient's domain
skip
list - so far, none of my users have any China TLDs in theirs).
Perhaps one of the regex gurus will whip you up a rule. :)
* Both should be run through a manual sa-learn. ( It would have caught
the first example )
* As Chip wrote earlier, each message has China based links in them.
Mark those.
* If this is a company server, I would certainly not have an issue with
blocking or adding a high score for the word "Whore" and could do
something with the word "Schoolgirl."
Randy Ramsdell
