Getting a lot of spam recently with text like this:

> We have visited www.zanshin.com and found it a thoughtfully-designed one
> with much helpful information but poorly listed in many search engines.
> It's time to do something. Find a most effective way of advertising,
> find FULLPROMOTE=21 Best Service, lowest cost=21 Fullpromote will
> instantly submit your website to all the famous searching engines around
> the world.=20 To check our pricelist and submit www.zanshin.com to
> 500,000 search engines in the world, go to www.fullpromote.com.We will
> try our best to publicize your website.

(I know advertising this stuff is not new, but we've just started getting 
the spam.)

I've been using this rule for a while:

body PROMOTE_YOUR_BUSINESS      
/(?:(?:advert|public)i[sz]e|promote|increase|grow|expand|boost)\s+.{0,15}\b(?:(?:web)?site|business|offer(?:ing)?|(?:down|power)line|exposure)/i
describe PROMOTE_YOUR_BUSINESS  Wants to help promote your business
score PROMOTE_YOUR_BUSINESS     3.0

The score of 3.0 is not entirely arbitrary -- it was chosen to be high
enough to push any of the false-negatives I'd seen at the time, into the
positives.  However, the search engine promotion quoted above was still a
false negative (matched only DEAR_SOMEBODY at -0.5 plus the rule above).

Does anybody already have a "submit to search engine" rule they'd like to 
share?

Oh:

test    PROMOTE_YOUR_BUSINESS   ok      publicize your website
test    PROMOTE_YOUR_BUSINESS   ok      grow your business
test    PROMOTE_YOUR_BUSINESS   ok      Increase your Business Sales!
test    PROMOTE_YOUR_BUSINESS   ok      Fwd:Promote any business
test    PROMOTE_YOUR_BUSINESS   ok      boost your Internet exposure

Sorry, no "fail" tests at the moment ...


_______________________________________________________________

Don't miss the 2002 Sprint PCS Application Developer's Conference
August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm

_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to