Ja tanks befor make rules, i've forgotten to use sa-update :-D
Let us try this first. LD On Tuesday 30 December 2008 18:54:42 John Hardin wrote: > On Tue, 30 Dec 2008, John Hardin wrote: > > You might make a rule for that type of URI obfuscation. Start with: > > > > body URI_OBFU_ES /\w{5,30}\s{,10}\(punto\)\s{,10}(?:com|net|org|info)/i > > Oops. Try: > > body URI_OBFU_ES /\w{5,30}\s{0,10}\(punto\)\s{0,10}(?:com|net|org|info)/i