Additional info: When I assed my user what edgar-online was he replied this:
"It's a major site for locating SEC filings of public companies (been around for years--real bona fide site)" > -----Original Message----- > From: Mark A. DeMichele > Sent: Tuesday, March 09, 2004 8:01 AM > To: [EMAIL PROTECTED] > Subject: BigEvil and edgar-online > > A user of my mail system just sent me an FP that hit on BigEvilList_181. > It's from edgar-online.com. From what it looks like, he actually > subscribed to something. Is it possible that this uri should not be > part of the rule? For now, I guess I can either whitelist > [EMAIL PROTECTED], since that's where the email originated, or I can > change the score of this entire rule to 0. Any suggestions? > > uri BigEvilList_181 > /\b(?:extreme-rapes\.com|excaliburproducts\.com|evansezmoney\.estarnetwo > rk\.com|enjoyadvanced097\.org|emedorders\.com|email\.homemadesimple\.com > |ehostzzz\.net|e-g\.com|efreedomweb\.net|edgar-online\.fundinfo\.wilink\ > .com|edgar-online\.com|edgar-online\.ar\.wilink\.com|ecredibledeals\.com > |echofrompeople\.com|e\.1asphost\.com)\b/i > describe BigEvilList_181 Generated BigEvilList_181 > score BigEvilList_181 3.0 > > Thanks, > Mark DeMichele > > ------------------------------------------------------------ > Mail was checked for spam by the Freeware Edition of No Spam Today! > The Freeware Edition is free for personal and non-commercial use. > You can remove this notice by purchasing a full license! To order > or to find out more please visit: http://www.no-spam-today.com
