Re: SEO Spam

[Reindl Harald]

Am 19.05.2015 um 17:11 schrieb Alex Regan:

I'm wondering if anyone is interested in helping to develop a set of
rules to catch SEO spam? Here's one such example:

http://pastebin.com/S6Jeappj

It's those emails that talk about how they can improve your SEO such as:

..."diverse projects consisting of SEO, PPC, SMM, Affiliate
Marketing, Google Adsense, Blogging, Copy writing, Web Analytic, Local
Search Marketing, Lead Generation, Inbound Marketing, Screen Casting etc"

I've created a series of test rules like:

body    __SEOSPAM1  /Affiliate marketing/i

and meta'd them together, requiring at least three to hit, but it's
tough keeping up with them all and it's often not enough based just on
those types of keywords.

I thought it would fit well with other types of fraud rules, such as
LOTSA_MONEY and others

 5.5 CUST_DNSBL_4           RBL: zen.spamhaus.org (pbl.spamhaus.org)
                            [62.11.26.3 listed in zen.spamhaus.org]
 5.5 CUST_DNSBL_2           RBL: dnsbl.sorbs.net (dul.dnsbl.sorbs.net)
                            [62.11.26.3 listed in dnsbl.sorbs.net]
 4.5 CUST_DNSBL_7           RBL: b.barracudacentral.org
                            [62.11.26.3 listed in b.barracudacentral.org]
 7.5 BAYES_99               BODY: Bayes spam probability is 99 to 100%
                            [score: 1.0000]
 0.5 MARKETING_PARTNERS     BODY: Claims you registered with a partner
 0.0 HTML_MESSAGE           BODY: HTML included in message
 0.4 BAYES_999              BODY: Bayes spam probability is 99.9 to 100%
                            [score: 1.0000]

they are changing all the time and so hard to catch with rules but over the long bayes training should catch them

signature.asc
Description: OpenPGP digital signature