2010/9/14 Karsten Bräckelmann <guent...@rudersport.de>: > As for "there's no 'http' in the message" from the OP: SA does detect > URIs without protocol. A later normalization will add a version with the > protocol in that case, to help write URI rules -- weather or not the > spammer uses a protocol, it is always safe to use it in your rule.
Thank you. This is the explanation I was looking for. Now, to figure out how to not have SA scan messages from cron.
