> body UK_GEOCITIES /uk.geocities.com/i > describe UK_GEOCITIES Body contains spammed domain > score UK_GEOCITIES 5.0
Don't use sloppy regexps. A dot matches any character for example. Also, anchoring is a good idea. And in this particular case the URI is perhaps more appropriate than BODY: uri UK_GEOCITIES m'^http://uk\.geocities\.com\b'i Mark ------------------------------------------------------- SF.Net email is Sponsored by the Better Software Conference & EXPO September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf _______________________________________________ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
