Getting a lot of spam recently with text like this: > We have visited www.zanshin.com and found it a thoughtfully-designed one > with much helpful information but poorly listed in many search engines. > It's time to do something. Find a most effective way of advertising, > find FULLPROMOTE=21 Best Service, lowest cost=21 Fullpromote will > instantly submit your website to all the famous searching engines around > the world.=20 To check our pricelist and submit www.zanshin.com to > 500,000 search engines in the world, go to www.fullpromote.com.We will > try our best to publicize your website.
(I know advertising this stuff is not new, but we've just started getting the spam.) I've been using this rule for a while: body PROMOTE_YOUR_BUSINESS /(?:(?:advert|public)i[sz]e|promote|increase|grow|expand|boost)\s+.{0,15}\b(?:(?:web)?site|business|offer(?:ing)?|(?:down|power)line|exposure)/i describe PROMOTE_YOUR_BUSINESS Wants to help promote your business score PROMOTE_YOUR_BUSINESS 3.0 The score of 3.0 is not entirely arbitrary -- it was chosen to be high enough to push any of the false-negatives I'd seen at the time, into the positives. However, the search engine promotion quoted above was still a false negative (matched only DEAR_SOMEBODY at -0.5 plus the rule above). Does anybody already have a "submit to search engine" rule they'd like to share? Oh: test PROMOTE_YOUR_BUSINESS ok publicize your website test PROMOTE_YOUR_BUSINESS ok grow your business test PROMOTE_YOUR_BUSINESS ok Increase your Business Sales! test PROMOTE_YOUR_BUSINESS ok Fwd:Promote any business test PROMOTE_YOUR_BUSINESS ok boost your Internet exposure Sorry, no "fail" tests at the moment ... _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk