Block Mydoom port 1639...

"Kevin Reed" <[email protected]> Tue, 9 Nov 2004 12:45:50 -0700 (MST)
Newsgroups gmane.mail.exim.exiscan.user
Message-ID <[email protected]>
I'm trying to block URI's that have port 1639 in them.

I tried the uri below in Spam Assassin but had no luck.
I don't think the rule is good.

Anyone trying this with just a regex in Exiscan?

uri MYDOOM_PORT     /http:\/\/*\.*:1639\/index\.htm/i