You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Stanislas LEVEAU <st...@ac-caen.fr> on 2014/03/14 12:44:50 UTC

uri rules

Hi

I have lots of email like this one :

An example :

Vous avez un message, cliquez sur le lien pour lire
http://my-domain234567.webs.com/

You have a message click on the linkhttp://my-domain234567.webs.com/   to read


and I would like to block this url --> webs.com


I wrote 2 spamassassin rules but that does not work obviously. Where is 
the mistake?

Thanks in advance


uri_detail     __SPAMS_URI_6  raw =~ /%2Ewebs/ domain =~ /^webs\.com$/ 
type =~ /^a$/
describe   __SPAMS_URI_6   url vers formulaire
score   __SPAMS_URI_6  15.0

uri     __SPAMS_URI_7 /^webs\.com\//
describe __SPAMS_URI_7 url vers formulaire
score   __SPAMS_URI_7 15.0


Re: uri rules

Posted by Axb <ax...@gmail.com>.
On 03/14/2014 01:54 PM, Stanislas LEVEAU wrote:
> Thanks for your answer, yes it's really simple but I use spamassassin
> 3.3 :(

uri RULENAME    /\.webs\.com\//

should do the trick


Re: uri rules

Posted by Stanislas LEVEAU <st...@ac-caen.fr>.
Thanks for your answer, yes it's really simple but I use spamassassin 3.3 :(

Le 14/03/2014 12:52, Axb a écrit :
> if you're using SA 3.4 it's really simple
>
> blacklist_uri_host webs.com
>
> On 03/14/2014 12:44 PM, Stanislas LEVEAU wrote:
>
>> I wrote 2 spamassassin rules but that does not work obviously. Where is
>> the mistake?
>>
>> Thanks in advance
>>
>>
>> uri_detail     __SPAMS_URI_6  raw =~ /%2Ewebs/ domain =~ /^webs\.com$/
>> type =~ /^a$/
>> describe   __SPAMS_URI_6   url vers formulaire
>> score   __SPAMS_URI_6  15.0
>
> to detect an uri just use
>
> uri RULENAME    /\.webs\.com/
>
>> uri     __SPAMS_URI_7 /^webs\.com\//
>> describe __SPAMS_URI_7 url vers formulaire
>> score   __SPAMS_URI_7 15.0
>
> /^webs\.com/ means the uri starts with "webs" so http://webs.com would 
> be ignored.
>
> h2h
>
> Axb
>

-- 
Stanislas LEVEAU
*Stanislas LEVEAU**

*Rectorat de Caen
168, rue Caponière
B.P. 6184
14061 CAEN Cedex
	Direction des Systèmes d'Information de l'Académie de Caen
Département des infrastructures

stanislas.leveau@ac-caen.fr
  Tel : 02.31.30.17.86




Re: uri rules

Posted by Axb <ax...@gmail.com>.
if you're using SA 3.4 it's really simple

blacklist_uri_host webs.com

On 03/14/2014 12:44 PM, Stanislas LEVEAU wrote:

> I wrote 2 spamassassin rules but that does not work obviously. Where is
> the mistake?
>
> Thanks in advance
>
>
> uri_detail     __SPAMS_URI_6  raw =~ /%2Ewebs/ domain =~ /^webs\.com$/
> type =~ /^a$/
> describe   __SPAMS_URI_6   url vers formulaire
> score   __SPAMS_URI_6  15.0

to detect an uri just use

uri RULENAME	/\.webs\.com/

> uri     __SPAMS_URI_7 /^webs\.com\//
> describe __SPAMS_URI_7 url vers formulaire
> score   __SPAMS_URI_7 15.0

/^webs\.com/ means the uri starts with "webs" so http://webs.com would 
be ignored.

h2h

Axb