Hi, >> http://pastebin.com/SkrKykYj > > You might want to look into the old Chickenpox rule.
Yes, big help. That did it, using the default scores. This was written a number of years ago. Do you think it's still safe to use the default scores? I still wish I had a better grasp on regex so I could write a correct rule to catch these, as I think that is probably the best approach. Maybe someone knows of a list of all the URL shorteners to be used in a combo uri/meta rule? Since the whole point is to shorten the URL, I bet I could write something that categorically checks for a URL that's short -- small host part plus small pathname... Thanks, Alex