Hi,
The rule below works for me
Marc
rawbody V_VIAGRA_AD_01 /<!--.{10,18}--><a
href="http:\/\/www\..{5,12}\.com[\/a-zA-Z0-9]{0,7}"><img
src="http:\/\/www\..{5,12}\.com\/.{2,3}\.gif" border=0>/
describe V_VIAGRA_AD_01 Viagra Ad 1
score V_VIAGRA_AD_01 5.0
Geoff Soper wrote:
This one continually gets through, the image with panels with six drugs
inside them and a doctor on the right. It's always in the format:
<html><body>
<center><!--1ip9wBNFi6mIyVB--><a
href="http://www.excellentrxvalue.co";><img
src="http://img.excellentrxvalue.co/a2.jpg"; border=0></a></center>
<body></html>
which doesn't seem to trigger any of my installed rules.
Any suggestions?
Thanks,
Geoff
![http://img.excellentrxvalue.co/a2.jpg"](http://img.excellentrxvalue.co/a2.jpg"){kind=link}