<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1126" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV><FONT size=2>This is not a MS problem, but I have yet been able to find
anything in the SA archives and hope that someone using MS has done this before.
I'm not versed in Perl, so I sort of need assistance. The people of this
maillist really seem to be on the ball.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>We receive a lot of spam from a particular group. Each mailing
is from various sources, but all have the following line in them(actually a
reply link where I have replaced the real address with x's, y's,
etc):</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV> </DIV>
<DIV><FONT size=2><FONT size=3> visit at </FONT><A
href="http://www.xx-yyyyy.com/34606zzz.html"><FONT
size=3>http://www.xx-yyyyy.com/34606zzz.html</FONT></A></FONT></DIV>
<DIV><FONT size=2><FONT size=2></FONT></FONT> </DIV>
<DIV><FONT size=2>I would like to use a body or rawbody (uri or full maybe?)
rule to find "html://www.xx-yyyyy.com" and give it a score in SA by adding it to
my spam.assassin.prefs.conf file but have not yet figured out how to write it.
My Header rules work fine, but all of my attempts at this seem to be all for
nothing.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2>Any help would be appreciated and sorry for the non-MS
stuff.</FONT></DIV>
<DIV><FONT size=2></FONT> </DIV>
<DIV><FONT size=2><BR></FONT></DIV>
<DIV><FONT size=2>steve campbell</FONT></DIV>
<DIV><FONT size=2><A
href="mailto:campbell@cnpapers.com">campbell@cnpapers.com</A></FONT></DIV></BODY></HTML>