On Thu, 2009-08-27 at 12:38 -0400, MySQL Student wrote:
>
> I'm seeing an increase in Google Reader and yahoo
> groups/personals/profile spam.
>
> Any ideas on how to catch this one? For the Yahoo spam (with links to
> yahoo sites ending in '/1', I've created these:
>
Thus should catch your set and more:
uri LOC_YAHOO /^http:.{1,40}\.yahoo[.,]com/i
score LOC_YAHOO 0 1.5 0 1.5
describe LOC_YAHOO Contains *.yahoo.com uri
Or, if you want to be more specific, try this:
uri LOC_YAHOO /^http:\/\/(groups|profile|personals)\.yahoo[.,]com/i
score LOC_YAHOO 0 1.5 0 1.5
describe LOC_YAHOO Contains yahoo.com groups/profile/personals uri
Martin
