>-----Original Message-----
>From: Nigel Kilner [mailto:[EMAIL PROTECTED]
>Sent: Friday, May 07, 2004 5:52 AM
>To: [EMAIL PROTECTED]
>Subject: Getting Hammered by Dating Sites
>
>
>I'm trying to make a rule to add to my local.cf
>
>I'm getting bombarded by emails from dating sites which have 
>urls in  the 
>message body:-
>
>http://lovetofind.com/web/?oc=53036293
>http://thesitefordating.com/confirm/?oc=53034693
>http://themansdatingsite.com/content/?ocT555904
>
>these email have X-RBL warnings in headers but don't score 
>under current SA 
>rules i'm using
>
>I'm just a beginner but this is what i've beem trying to 
>use..just get error 
>messages from SA.
>
>My rule is:-
>
>uri    DATING_01       (?:thesitefordating.com|themansdatingsite.com)/i
>describe DATING_01  Annoying Dating Sites
>score DATING_01     5.0
>
>casn anyone help
>

you are missing a slashs! Try this:

uri    DATING_01       /(?:thesitefordating\.com|themansdatingsite\.com)/i

or get funky with it:

uri    DATING_01       /\bthe(?:sitefordating|mansdatingsite)\.com\b/i

Welcome to the party!

Chris Santerre 
System Admin and SARE Ninja
http://www.rulesemporium.com
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
Charles Darwin 

>
>Nigel
>

Reply via email to