BASTED Geocities spam from Brazil

[Dave Shariff Yadallee - System Administrator a.k.a. The Root of the Problem]

On Sun, Mar 05, 2006 at 12:06:58AM -0500, Michael S. wrote:
> We currently have the follow rules in place to stop these bloody Geocites
> spam messages;
> 
>  
> 
> # Geocities Crap
> 
> uri PROLO_PUBWEB_UKGEO_CHECK1 /^http:\/\/.*\.geocities\.com\//
> 
> score PROLO_PUBWEB_UKGEO_CHECK1 8.0
> 
> describe PROLO_PUBWEB_UKGEO_CHECK1 PROLO_PUBWEB_UKGEO_CHECK1, Body
> 
>  
> 
> The problem is, geocities.com.br spam is on the rise and all of those are
> being delivered.
> 
>  
> 
> Can somebody rewrite the rules above to include geocities.* and
> geocities.*.*
> 
>  
> 
> I think it would help a lot of people here.
> 
>  
> 
> Thank you.
>

In which file does this go into? 

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.