Billy Huddleston wrote: > Is their a way to get the URI's to look at stuff like this?? I'm seeing > more and more spam with these kinds of things in them to get by URI > detection.. > > http://asia.geocities.com/april19781matt1487 >
Do you mean URIBL's? Not likely without major change.. URIBLs only look up the domain name, not the subdomain, and not the path. To SA's URIBL tests, the above is just "geocities.com". This kind of thing is currently best covered by SARE's specific and uri rulesets.
