Mike Norton wrote:

> The only common thing with all these mails is that the url contains links to site%2Evoila%2Efr or site.voila.fr how can I create a custom rule to block these messages ?

Thanks

Mike

Hi Mike

A custom rule
uri      URI_BLACK /site\.voila\.fr/i
describe URI_BLACK Blacklisted URI
score    URI_BLACK 6.0

This mail hits the HOT_NASTY and HTTP_ESCAPED_HOST rule
Add a higher score to HOT_NASTY and HTTP_ESCAPED_HOST in user_prefs

// Max

Reply via email to