Hi,
On 05/19/2015 11:40 AM, Reindl Harald wrote:
Am 19.05.2015 um 17:11 schrieb Alex Regan:
I'm wondering if anyone is interested in helping to develop a set of
rules to catch SEO spam? Here's one such example:
http://pastebin.com/S6Jeappj
It's those emails that talk about how they can improve your SEO such as:
..."diverse projects consisting of SEO, PPC, SMM, Affiliate
Marketing, Google Adsense, Blogging, Copy writing, Web Analytic, Local
Search Marketing, Lead Generation, Inbound Marketing, Screen Casting etc"
I've created a series of test rules like:
body __SEOSPAM1 /Affiliate marketing/i
and meta'd them together, requiring at least three to hit, but it's
tough keeping up with them all and it's often not enough based just on
those types of keywords.
I thought it would fit well with other types of fraud rules, such as
LOTSA_MONEY and others
they are changing all the time and so hard to catch with rules but over
the long bayes training should catch them
5.5 CUST_DNSBL_4 RBL: zen.spamhaus.org (pbl.spamhaus.org)
[62.11.26.3 listed in zen.spamhaus.org]
5.5 CUST_DNSBL_2 RBL: dnsbl.sorbs.net (dul.dnsbl.sorbs.net)
[62.11.26.3 listed in dnsbl.sorbs.net]
4.5 CUST_DNSBL_7 RBL: b.barracudacentral.org
[62.11.26.3 listed in b.barracudacentral.org]
These are the internal bogus addresses I used for this test.
7.5 BAYES_99 BODY: Bayes spam probability is 99 to 100%
[score: 1.0000]
0.5 MARKETING_PARTNERS BODY: Claims you registered with a partner
0.0 HTML_MESSAGE BODY: HTML included in message
I'm not sure I'd go so far as to change the default bayes to more than
double the default, and I've found too much ham to change
MARKETING_MESSAGE here.
Axb wrote:
> when you have a dozen or so and add them up, you should get them
> easily...
I've got more than a dozen now. It's a regular thing. I was just trying
to somehow gain support for somehow being more proactive with these.
I'll keep it going, so let me know if you'd like to help or would like
me to share the rules I have (there's probably 60 or more now).
Thanks,
Alex
