if you're using SA 3.4 it's really simple blacklist_uri_host webs.com
On 03/14/2014 12:44 PM, Stanislas LEVEAU wrote:
I wrote 2 spamassassin rules but that does not work obviously. Where is the mistake? Thanks in advance uri_detail __SPAMS_URI_6 raw =~ /%2Ewebs/ domain =~ /^webs\.com$/ type =~ /^a$/ describe __SPAMS_URI_6 url vers formulaire score __SPAMS_URI_6 15.0
to detect an uri just use uri RULENAME /\.webs\.com/
uri __SPAMS_URI_7 /^webs\.com\// describe __SPAMS_URI_7 url vers formulaire score __SPAMS_URI_7 15.0
/^webs\.com/ means the uri starts with "webs" so http://webs.com would be ignored.
h2h Axb
