« Return to Thread: EMERGENCY RULE: porntube redirect

Re: EMERGENCY RULE: porntube redirect

by Chris-394 :: Rate this Message:

Reply to Author | View in Thread

On Thursday 19 June 2008 9:33 am, Yet Another Ninja wrote:

> Guys, you're being hit with hacked web site URIs showing up in a heavy
> spam flood. I see Uribl.com got most of them, but in case:
>
> rawbody  GMD_R_DOT_HTML /\/r\.html$/
> describe GMD_R_DOT_HTML Possible hacked site with porntube redirect
> score GMD_R_DOT_HTML  3.5
>
> Note: making it an uri rule doesn't hit them all.
>
> enjoy
I'd like to enjoy, stuck the above in my local.cf, restarted SA, ran
spamassassin --lint and got:

[chris@cpollock ~]$ spamassassin --lint
[25034] warn: config: failed to parse line, skipping, in
"/etc/mail/spamassassin/local.cf": score    GMD_R_DOT_HTML  3.5
[25034] warn: config: warning: description exists for non-existent rule
GMD_R_DOT_HTML
[25034] warn: lint: 2 issues detected, please rerun with debug enabled for
more information

I know it can't be that hard to c/p a rule, though it seems I either messed
something up or SA didn't like the rule.

--
Chris
KeyID 0xE372A7DA98E6705C


attachment0 (204 bytes) Download Attachment

 « Return to Thread: EMERGENCY RULE: porntube redirect