Page 1 of 1

SEO Expiration spam

Posted: 04 Oct 2017 14:07
by hiandras
Hi,

I got a lot of spams for my registered domains, about seo expiration.
So, I made a rule in /etc/mail/spamassassin/local.cf:

header BAD_WORD_SEO Subject =~ /(SEO|Expiration)/i
score BAD_WORD_SEO 4.0

Then you need to run "sa-compile" and "/etc/init.d/mailscanner restart".

Now, if subject contains SEO and Expiration it will get a score of 4.0.

(Similar works for other keywords as well.)

Regards,
Andras

Re: SEO Expiration spam

Posted: 05 Oct 2017 07:31
by budy
Ahh great - just what I needed… ;)

Thanks,
budy

Re: SEO Expiration spam

Posted: 06 Oct 2017 03:13
by pdwalker
I've never had to do an sa-compile to add new rules into my local.cf, so (and someone please correct me if I am wrong) I don't think it is necessary.

Re: SEO Expiration spam

Posted: 13 Oct 2017 14:04
by hiandras
Hi,

You are right. sa-compile is not required.

I also modified the rule:
header BAD_WORD_SEO Subject =~ /(Expiration SEO)/i

The original one filtered out everything with either expiration or SEO in it.
The new one just filters out if "Expiration SEO" is in the subject.

Regards,
Andras

Re: SEO Expiration spam

Posted: 13 Oct 2017 19:40
by pdwalker
There is a way to specify (A and B) rather then (A or B) or (A B) which may be more useful.

Have a look through the existing rule sets and you should be able to find the syntax.