Hi! Thanks! I didnt find this info in Writing rules tutorial.
I see uri __KAM_SHORT /(\/|^|\b)(?:j\.mp|bit\.ly|goo\.gl|x\.co|t\.co|t\.cn|tinyurl\.com|hop\.kz|urla\.ru|fw\.to)(\/|$|\b)/i Seems a bit complicated. It would be to make this rule check that suffixes are at the end of URI. uri __TEST_URLS /\b(\.vn|\.pl|\.my|\.lu|\.vn|\.ar)\b/i I believe this does it, correct? uri __TEST_URLS /\b(\.vn$|\.pl$|\.my$|\.lu$|\.vn$|\.ar$)\b/i Thanks. Rob 2017-09-08 14:03 GMT-03:00 Kevin A. McGrail <kevin.mcgr...@mcgrail.com>: > On 9/8/2017 12:24 PM, Robert Boyl wrote: > >> Hello, everyone! >> >> Is there a way to create a Spamassassin rule that checks for a certain >> URL suffix such as .ru but makes sure it has to be at the end of the URI? >> Ends with string. >> >> Thanks! >> Rob >> > > Yes, it's called an anchor and Shane Williams a long time ago gave me some > advice on that I used in this rule: > > uri __KAM_SHORT /(\/|^|\b)(?:j\.mp|bit\.ly|goo > \.gl|x\.co|t\.co|t\.cn|tinyurl\.com|hop\.kz|urla\.ru|fw\.to)(\/|$|\b)/i > > Regards, > KAM > >