BASTED Geocities spam from Brazil

[Raymond Dijkxhoorn]

Hi!

>> # Geocities Crap
>>
>> uri PROLO_PUBWEB_UKGEO_CHECK1 /^http:\/\/.*\.geocities\.com\//
>>
>> score PROLO_PUBWEB_UKGEO_CHECK1 8.0
>>
>> describe PROLO_PUBWEB_UKGEO_CHECK1 PROLO_PUBWEB_UKGEO_CHECK1, Body

>> The problem is, geocities.com.br spam is on the rise and all of those are
>> being delivered.

>> Can somebody rewrite the rules above to include geocities.* and
>> geocities.*.*
>>
>> I think it would help a lot of people here.

> In which file does this go into?

Usually somewhere in /etyc/mail/spamassassin ...
Most people use local.cf or a custom .cf

Bye,
Raymond.