You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@spamassassin.apache.org by bu...@spamassassin.apache.org on 2024/12/11 11:09:11 UTC

[Bug 8297] New: Patch to improve detection of SEO offering spam

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8297

            Bug ID: 8297
           Summary: Patch to improve detection of SEO offering spam
           Product: Spamassassin
           Version: unspecified
          Hardware: PC
                OS: Linux
            Status: NEW
          Severity: normal
          Priority: P2
         Component: Rules
          Assignee: dev@spamassassin.apache.org
          Reporter: kirill@korins.ky
  Target Milestone: Undefined

Created attachment 5982
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5982&action=edit
Suggested patch

For last weeks I had encountered quite a few missed SEO offering spam.

Here a trivial patch which:
 - adds .xzy as suspicious zone (namecheap sells this domain for ~€1)
 - extend PDS_SEO2 regex

An example of spam is attached as well.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 8297] Patch to improve detection of SEO offering spam

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8297

Kirill A. Korinsky <ki...@korins.ky> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |kirill@korins.ky

--- Comment #1 from Kirill A. Korinsky <ki...@korins.ky> ---
Created attachment 5983
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5983&action=edit
An example of spam

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 8297] Patch to improve detection of SEO offering spam

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8297

--- Comment #3 from Giovanni Bechis <gi...@paclan.it> ---
Created attachment 5985
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5985&action=edit
revised patch

use non capturing group

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 8297] Patch to improve detection of SEO offering spam

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8297

Kirill A. Korinsky <ki...@korins.ky> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|---                         |MOVED

--- Comment #6 from Kirill A. Korinsky <ki...@korins.ky> ---
Moved discussion to the list as suggested, see:
https://lists.apache.org/thread/tfpvopty0cgx5t8qbgr5xbhspgynf660

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 8297] Patch to improve detection of SEO offering spam

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8297

Giovanni Bechis <gi...@paclan.it> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
   Attachment #5982|0                           |1
        is obsolete|                            |

--- Comment #2 from Giovanni Bechis <gi...@paclan.it> ---
Created attachment 5984
  --> https://bz.apache.org/SpamAssassin/attachment.cgi?id=5984&action=edit
revised patch

use non capturing group

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 8297] Patch to improve detection of SEO offering spam

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8297

John Hardin <jh...@impsec.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |jhardin@impsec.org

--- Comment #5 from John Hardin <jh...@impsec.org> ---
Note: rules changes to improve performance are not, strictly speaking, *bugs*.

This discussion would be better on the SpamAssassin Users mailing list.

-- 
You are receiving this mail because:
You are the assignee for the bug.

[Bug 8297] Patch to improve detection of SEO offering spam

Posted by bu...@spamassassin.apache.org.
https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8297

--- Comment #4 from Kirill A. Korinsky <ki...@korins.ky> ---
Giovanni,

Do you think it is wise to add xyz into enlist_uri_host a few lines bellow?

-- 
You are receiving this mail because:
You are the assignee for the bug.