best way to combat porn email

[Raymond Norton]

Randal, Phil wrote:
> All these emails contain links to websites hosted on <random
> name>.<letter>.interia.pl, so a high-scoring spamassassin uri rule can
> easily catch these.
>
> uri      MY_INTERIA     /^http:\/\/.{1,30}\.interia\.pl/i
> describe MY_INTERIA     Suspicious interia.pl links
> score	   MY_INTERIA	5
>
> They also all claim to be sent via Thunderbird ("User-Agent: Thunderbird
> 2.0.0.21 (Windows/20090302)"), so you could create a meta rule cobining
> both those factors.
>
>   


I will give that a try. I have never written a custom rule. Is local.cf 
the best place for it, or is a different location recommended.