> -----Original Message-----
> From: Arvid Ephraim Picciani [mailto:aep@ibcsolutions.de]
> Sent: Thursday, 20 March 2008 9:04 a.m.
> To: users@spamassassin.apache.org
> Subject: Re: blogspot spam
>=20
> On Wednesday 19 March 2008 20:48:00 Michael Hutchinson wrote:
> > For those that don't run SA 3.2.3, you could test this rule:
> > uri CST_URI_BLOGSPOT m,http://\w+\.blogspot\.com\b,
> > describe CST_URI_BLOGSPOT blogspot.com throwaway URI
> > score CST_URI_BLOGSPOT 3.4

>=20
> thanks Mike, does that match bloglinks like

myblog.blogspot.com/myentryxy
> ?


Apparently, yes I have not seen any come through since I employed the
rule. I am sure you'd be able to modify the RegExp if required, making
it match, say up to 12 characters (of anything) past the / after .com

I'm pretty sure you wont need to do that. Employ it and score it at 0.01
to test it

> if not it might be fine for around 1.0 points imo. i have sare_oem on

3.0
> becouse our entire company runs linux, so we don't talk about windows
> software anyway :P
> i'd prefer a working uribl though


HEH, I've just gone thru and rescored a pile of URIBL stuff.. this
combined with our recent addition of pyzor has started to score spam
hard.

Cheers,
Mike