If I'm reading that URL_EQUALS rule correctly, it seems that any URL with an attribute in the query string will be caught. If that's the case, I know I create lots of e-mails with links to asp pages with stuff in the query string, so wouldn't that rule be bad.
> LW> uri URL_EQUALS /www\.[0-9a-z\.\_]+\=[0-9a-z\.\_]+/i > LW> describe URL_EQUALS URL has equal sign in hostname > LW> score URL_EQUALS 4.4 > > LW> Thanks, > > LW> Loren > > >
