On Fri, 8 Sep 2017 13:03:57 -0400 Kevin A. McGrail wrote: > On 9/8/2017 12:24 PM, Robert Boyl wrote: > > Hello, everyone! > > > > Is there a way to create a Spamassassin rule that checks for a > > certain URL suffix such as .ru but makes sure it has to be at the > > end of the URI? Ends with string. > > > > Thanks! > > Rob > > Yes, it's called an anchor and Shane Williams a long time ago gave me > some advice on that I used in this rule: > > uri __KAM_SHORT > /(\/|^|\b)(?:j\.mp|bit\.ly|goo\.gl|x\.co|t\.co|t\.cn|tinyurl\.com|hop\.kz|urla\.ru|fw\.to)(\/|$|\b)/i
That doesn't look right, at least not in the context of the OP's question. In (\/|$|\b) the \b seems superfluous as it will match a boundary between a letter and a '.' so the rule will for example match goo.gl.example.com
