I went with the RBL method. More than 1 way to skin a spammer. :-) Anyways, they put themselves into my bayes with the extra points of the china RBL. Life is good... Now I can back down on the China points some since my bayes will more likely catch this garbage.
Content preview: myrtis http://uk.geocities.com/Guillermo_Ratermann/?NKN7j=This_is_your_way_to_red u ce_the_outflow_on_tiptop_reemedies. bye :-) [...] Content analysis details: (11.3 points, 5.0 required) pts rule name description ---- ---------------------- ------------------------------------------------ -- 1.3 DATE_IN_FUTURE_06_12 Date: is 6 to 12 hours after Received: date 5.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 0.9999] 5.0 RCVD_IN_CHINA RBL: Received via China IP china.blackholes.us [58.33.99.179 listed in china.blackholes.us] > -----Original Message----- > From: Jonathan Nichols [mailto:[EMAIL PROTECTED] > Sent: Tuesday, August 09, 2005 2:36 PM > To: Kelson > Cc: SpamAssassin Users > Subject: Re: GeoCities Link-only spam > > > > > Of course, if you want to match *any* Geocities URL (which I think is a > > bit much for a 4-point score), you'd want something like this: > > > > uri GEOCITIES /\.geocities\.com\b/i > > > > or if you want to make sure it matches the domain name, > > > > uri GEOCITIES /^http:\/\/[a-z0-9-]{1,30}\.geocities\.com\b/i > > > > Cool! thanks. I think that will work a lot better. :) > > I got one today based on my previous feeble rule attempt. It got 4 > points.. my rule was the only one that it hit. > > Bloody Geocities. :| > > >
