Re: EMERGENCY RULE: porntube redirect

2008-06-20 Thread Karsten Bräckelmann
On Fri, 2008-06-20 at 17:53 -0500, Chris wrote: > On Friday 20 June 2008 10:14 am, Karsten Bräckelmann wrote: > > That's the wrong way round, seriously. Do not restart SA after changes, > > unless --lint comes out clean. > > Hmm, I've always understood that SA needs to be restarted to get any new

Re: EMERGENCY RULE: porntube redirect

2008-06-20 Thread Chris
On Friday 20 June 2008 10:14 am, Karsten Bräckelmann wrote: > > I'd like to enjoy, stuck the above in my local.cf, restarted SA, ran > > spamassassin --lint and got: > > That's the wrong way round, seriously. Do not restart SA after changes, > unless --lint comes out clean. > > guenther Hmm, I've

Re: EMERGENCY RULE: porntube redirect

2008-06-20 Thread Karsten Bräckelmann
> I'd like to enjoy, stuck the above in my local.cf, restarted SA, ran > spamassassin --lint and got: That's the wrong way round, seriously. Do not restart SA after changes, unless --lint comes out clean. guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=

Re: EMERGENCY RULE: porntube redirect

2008-06-19 Thread Chris
On Thursday 19 June 2008 7:50 pm, Sahil Tandon wrote: > Chris <[EMAIL PROTECTED]> wrote: > > On Thursday 19 June 2008 9:33 am, Yet Another Ninja wrote: > > > Guys, you're being hit with hacked web site URIs showing up in a heavy > > > spam flood. I see Uribl.com got most of them, but in case: > > >

Re: EMERGENCY RULE: porntube redirect

2008-06-19 Thread Sahil Tandon
Chris <[EMAIL PROTECTED]> wrote: > On Thursday 19 June 2008 9:33 am, Yet Another Ninja wrote: > > Guys, you're being hit with hacked web site URIs showing up in a heavy > > spam flood. I see Uribl.com got most of them, but in case: > > > > rawbody GMD_R_DOT_HTML /\/r\.html$/ > > describe GMD_R_DO

Re: EMERGENCY RULE: porntube redirect

2008-06-19 Thread Chris
On Thursday 19 June 2008 9:33 am, Yet Another Ninja wrote: > Guys, you're being hit with hacked web site URIs showing up in a heavy > spam flood. I see Uribl.com got most of them, but in case: > > rawbody GMD_R_DOT_HTML /\/r\.html$/ > describe GMD_R_DOT_HTML Possible hacked site with porntube redi

Re: EMERGENCY RULE: porntube redirect

2008-06-19 Thread Raymond Dijkxhoorn
Hi! Message-id: Message-id: Message-id: Message-id: also, odd spaces: Date: Thu, 19 Jun 2008 17:04:32 +0200 Date: Thu, 19 Jun 2008 18:03:54 +0300 Date: Thu, 19 Jun 2008 17:03:49 +0200 Date: Thu, 19 Jun 2008 10:02:50 -0500 Yups... hits SPACED_DATE also ;) Bye, Raymond.

Re: EMERGENCY RULE: porntube redirect

2008-06-19 Thread Justin Mason
Jeff Chan writes: > On Thursday, June 19, 2008, 7:33:44 AM, Yet Ninja wrote: > > Guys, you're being hit with hacked web site URIs showing up in a heavy > > spam flood. I see Uribl.com got most of them, but in case: > > > rawbody GMD_R_DOT_HTML /\/r\.html$/ > > describe GMD_R_DOT_HTML Possible ha

Re: EMERGENCY RULE: porntube redirect

2008-06-19 Thread Jeff Chan
On Thursday, June 19, 2008, 7:33:44 AM, Yet Ninja wrote: > Guys, you're being hit with hacked web site URIs showing up in a heavy > spam flood. I see Uribl.com got most of them, but in case: > rawbody GMD_R_DOT_HTML /\/r\.html$/ > describe GMD_R_DOT_HTML Possible hacked site with porntube redirec

EMERGENCY RULE: porntube redirect

2008-06-19 Thread Yet Another Ninja
Guys, you're being hit with hacked web site URIs showing up in a heavy spam flood. I see Uribl.com got most of them, but in case: rawbody GMD_R_DOT_HTML /\/r\.html$/ describe GMD_R_DOT_HTML Possible hacked site with porntube redirect scoreGMD_R_DOT_HTML 3.5 Note: making it an uri rule doe