Yet more spam
A commenter on Ann Elisabeth’s site pointed out that our ex-mediavisor spammer has a consistent User-Agent line. If you set up User-Agent blocking as I explained in this post, try adding this:
\(compatible; MSIE 6\.0; Windows NT 5\.2; \.NET CLR 1\.1\.4322\)|
I have. The danger here is that we’ll block somebody legit… but no browser software I know has that as part of its User-Agent string.
And another bad referrer string:
hdic|