Re: [AMaViS-user] User complaints of spam

> body UK_GEOCITIES /uk.geocities.com/i
> describe UK_GEOCITIES Body contains spammed domain
> score UK_GEOCITIES 5.0

Don't use sloppy regexps.
A dot matches any character for example.
Also, anchoring is a good idea.
And in this particular case the URI is perhaps
more appropriate than BODY:

uri UK_GEOCITIES m'^http://uk\.geocities\.com\b'i

Mark


-------------------------------------------------------
SF.Net email is Sponsored by the Better Software Conference & EXPO
September 19-22, 2005 * San Francisco, CA * Development Lifecycle Practices
Agile & Plan-Driven Development * Managing Projects & Teams * Testing & QA
Security * Process Improvement & Measurement * http://www.sqe.com/bsce5sf
_______________________________________________
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/...fo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/