Re: blogspot spam

[Yet Another Ninja]

On 3/19/2008 1:24 PM, Arvid Ephraim Picciani wrote:

On Wednesday 19 March 2008 13:21:20 James E. Pratt wrote:

Hi. I'm seeing lots of these get by:

http://pastebin.com/m8520d64

anyone have a rule for these?

The last one I put up is at:

http://pastebin.com/m159c02de

Thanks,

Jamie

yeah exactly my issue. the site is in uribl already but sa doesn't work with uribl and subdomains. see previous posts. SARE_OEM helps a little.

it does work!

if runing > SA 3.2.3 add to local.cf:

util_rb_2tld blogspot.com