You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Axb <ax...@gmail.com> on 2012/01/30 09:46:47 UTC

Re: wildcard http match

On 01/30/2012 09:40 AM, Tom Kinghorn wrote:
> Good morning list.
>
> Please forgive me my ignorance.
> The 2.5 hour drive to work has drained any remaining intelligence.
> As such, I cannot seem to figure this one out.
>
> I am receiving alot of spam with the body as follows
>
> <html>
> <head>
> </head>
> <body bgcolor="#ffffff" text="#000000">
> <a href="http://hNwXJKlHIH.page.tl">iddsw naolsnqjxq hbw z hetwe qjqaskbr
> bxkjwnfyz.</a>
> </body>
> </html>
>
> How would I go about matching anything with the domain of.tl (which is East
> Timor if anyone is interested)

uri	URI_PAGE_TL	/\w+\.page\.tl/

should do the trick for these spams

in SA 3.4 you will be able to safely blacklist the whole TLD





Re: wildcard http match

Posted by Tom Kinghorn <th...@gmail.com>.
On 30/01/2012 10:46, Axb wrote:
>
> uri    URI_PAGE_TL    /\w+\.page\.tl/
>
> should do the trick for these spams
>
> in SA 3.4 you will be able to safely blacklist the whole TLD
>

Perfect.!!

Thank you very much.
Much appreciated.

Tom