[SPAM: 16.10/05.00] Re: another new rule set

[Jesse Houwing]

> # some spammers use yahoo for redirection
> uri      V_REDIR_YAHOO        
> /https?:\/\/drs.yahoo.com\/.{5,50}\*http/i
> describe V_REDIR_YAHOO          ad redirection via Yahoo!
> score    V_REDIR_YAHOO          2.0
>
> # the following is a more generic re for redirection
> uri      V_DOUBLE_URI          
> /https?.{3,9}[-a-z0-9\.]{1,60}\/.{1,80}(url=""> > describe V_DOUBLE_URI           URI contains 2nd URI
> score    V_DOUBLE_URI           1.5

I've written a ruleset specifically for Redirect scripts it can be found here:

 

http://www.exit0.us/index.php/ToAoMsRedirectRules

 

It also contains the two rules you've added to your set, though my scores a a bit lower.

 

Jesse