Large volumes of spam from .ru/.pk (Regex filters)

[anniebrion]

Anyone, like me getting large volumes of spam with URLs from .ru/.pk can get rid of most with two regex filters:

Code: Select all

\bhttp:\/\/(?:www\.)?(?:[a-z0-9\-]{1,63}\.){1,2}(?:ru|pk)\/?(?:\?idaff=\d{1,3})?$\s{1,2}

and

Code: Select all

\.(?:ru|pk)\/\?.+=[0-9a-fA-F]{8,15}

Just thought I'd share my filters with the community

Full filters from filters.xml:

Code: Select all

  <Filter Name="www.*.ru" Enabled="True">
    <MatchAll>True</MatchAll>
    <Rating>-150</Rating>
    <Colour>#FF990099</Colour>
    <TextColour>White</TextColour>
    <OverrideDelete>True</OverrideDelete>
    <AutoDelete>False</AutoDelete>
    <Rule>
      <Field>Body</Field>
      <Operator>Contains</Operator>
      <Type>RegEx</Type>
      <Expression>\bhttp:\/\/(?:www\.)?(?:[a-z0-9\-]{1,63}\.){1,2}(?:ru|pk)\/?(?:\?idaff=\d{1,3})?$\s{1,2}</Expression>
    </Rule>
    <Rule>
      <Field>NotFriend</Field>
      <Operator>Contains</Operator>
      <Type>SpamToolMatch</Type>
      <Expression>
      </Expression>
    </Rule>
  </Filter>
  <Filter Name=".ru/?" Enabled="True">
    <MatchAll>True</MatchAll>
    <Rating>-150</Rating>
    <Colour>#FF990099</Colour>
    <TextColour>White</TextColour>
    <OverrideDelete>True</OverrideDelete>
    <AutoDelete>False</AutoDelete>
    <Rule>
      <Field>Body</Field>
      <Operator>Contains</Operator>
      <Type>RegEx</Type>
      <Expression>\.(?:ru|pk)\/\?.+=[0-9a-fA-F]{8,15}</Expression>
    </Rule>
    <Rule>
      <Field>NotFriend</Field>
      <Operator>Contains</Operator>
      <Type>SpamToolMatch</Type>
      <Expression>
      </Expression>
    </Rule>
  </Filter>