The spam module, does not seem to examine forum signatures against custom spam filters. Spammers have figured this out and just pour their junk links into their signatures. I am wondering how can I fix this loophole.
Presumably the content that passes the spam module filter is posted by bots. In that case, using one of the following modules (maybe in addition to the Spam module) may help (by letting the bots fill in hidden forms):