Mod Security rules: /etc/apache2/conf.d/modsecurity/optional_rules/modsecurity_crs_42_comment_spam.conf
SecRule ARGS|ARGS_NAMES “(http:\/.*?){4}”
the {4} needs to be changed when posting >= 4 links per post.
This is now resolved! (Had nothing to do with wordpress 2.8!)