That's right, I should have remove the parenthese, they serve nothing here. It's more in case of something comes later and add some "|" after reader, etc.
Don't know what you mean by (?:) and backtracking tho, I'll double check the wiki page about syntax ;) Thanks, Guillaume > Subject: Re: porn portal spammers v2 > Date: Fri, 25 Sep 2009 06:22:03 -0500 > From: dan.mcdon...@austinenergy.com > To: users@spamassassin.apache.org > > On Fri, 2009-09-25 at 09:30 +0200, Guillaume Gelle wrote: > > Dear all, > > > > As usual, spammers improved and instead of receiving profiles|groups| > > personnal.yahoo.com links, now, I'm being hit with > > www.google.com/reader links. > > (ie : <A > > href=3D"http://www.google.com/reader/item/tag:google.com,2005:reader/ite=m/69a282969886af5e";>Haste > > to come</A></FONT></DIV>) > > > > I took the firts rule submitted by SQL student (which worked great) > > and updated to this kind of google links : > > > > uri LOC_GOOGLE /^http:\/\/www.google[.,]com\/(reader)/i > > Why the parentheses? You only have one option, so parentheses are just > additional logic. You've also used the wrong sort of parentheses - (?:) > should be used to avoid enabling backtracking, since backtracking causes > significant performance impact... > > -- > Daniel J McDonald, CCIE # 2495, CISSP # 78281, CNX > www.austinenergy.com _________________________________________________________________ Hotmail: la nouvelle technologie anti-spam aide à bloquer les messages indésirables, ici vous pouvez régler votre filtre Spam. http://mail.live.com/mail/options.aspx?subsection=4
