Help with a spam pattern match?

[mholloway]

Within the last few months there's been a large amount of crap with just two lines. I might get over 100 of these in a day. The rules in the Spamcop webmail aren't getting all of them. The first line is a moderately long string of moderately obscene words related to ED pills without spaces. The very next line is a URL which is repeated in the next three spam and then replaced with another URL, and so on. Something like

?????????????????????????????*

http://*

should match it, but I'm uncertain of syntax needed. Can anyone help?

Would ?????????????????????????????* http://* work? Is there a way of having a line break in a rule? Do I enclose in quotes or brackets?

Thanks

[mholloway]

And another thing, are the rules in the webmail for procmail? Just need to know the syntax.

Thanks

[Farelf]

Can't help with those questions myself, hopefully others can. But it might help to post a tracking URL of an example. You never know, there may be other unsuspected but relevelant factors.