body PILSPHARMNEW /pilspharmnew/ score PILSPHARMNEW 5 describe PILSPHARMNEW Body contains "/pilspharmnew/".
Untested, let me know if it works, but that should do it. On 01/01, Alex wrote: > Hi, > > I'm having difficulty catching a series of spams with just a text > component and a URL and hoped someone could help. I've included a few > samples on pastebin here: > > http://pastebin.com/raw.php?i=1Y5QCkfh > http://pastebin.com/raw.php?i=KdmZXM0d > > It only hits BAYES_50 usually, despite learning a few dozen of these > over the last week. It also appears to originate from yahoo.com. > > Any ideas greatly appreciated. > Thanks, > Alex > -- "Blessed are they who, in the face of death, think only about the front sight." http://www.ChaosReigns.com
