Re: [vps-mail] html encoded link.

[Abigail Marshall <webmaster@xxxxxxxxxxxx>]

mcc> the IP these come from is most always different and
mcc> forged. Wonder why, however they always have a link in
mcc> them that looks like this.
mcc> aname.online-info-direct.com/cgi/file.cgi?sent to
mcc> address


In procmail:

# Test: More Spam URLs
:0 B
* online-info-direct\.com

/dev/null


----
You can write an SA recipe along the same lines, but it
really is a waste of system resources to run all the SA
tests on something so easy to spot.

If you do want an SA recipe, it would look like this:

uri CUSTOM_BADLINK        /online-info-direct\.com/i
describe CUSTOM_BADLINK   URI to site that spammers use
score CUSTOM_BADLINK      10.00



-Abigail

======================================================================
Technical questions regarding this list may be sent to
<vps-mail-owner@xxxxxxxxxxxx>. You may request an automated help
response by sending an email with the word 'help' (w/o quotes) in the
BODY of the message (subject is ignored) to <vps-mail-request@xxxxxxxxxxxx>.
======================================================================