SEO Expiration spam

[hiandras]

Hi,

I got a lot of spams for my registered domains, about seo expiration.
So, I made a rule in /etc/mail/spamassassin/local.cf:

header BAD_WORD_SEO Subject =~ /(SEO|Expiration)/i
score BAD_WORD_SEO 4.0

Then you need to run "sa-compile" and "/etc/init.d/mailscanner restart".

Now, if subject contains SEO and Expiration it will get a score of 4.0.

(Similar works for other keywords as well.)

Regards,
Andras

[budy]

Ahh great - just what I needed…

Thanks,
budy

[pdwalker]

I've never had to do an sa-compile to add new rules into my local.cf, so (and someone please correct me if I am wrong) I don't think it is necessary.

[hiandras]

Hi,

You are right. sa-compile is not required.

I also modified the rule:
header BAD_WORD_SEO Subject =~ /(Expiration SEO)/i

The original one filtered out everything with either expiration or SEO in it.
The new one just filters out if "Expiration SEO" is in the subject.

Regards,
Andras

[pdwalker]

There is a way to specify (A and B) rather then (A or B) or (A B) which may be more useful.

Have a look through the existing rule sets and you should be able to find the syntax.