> The current SA tests don't seem to catch the very common Nigerian scam. You
> know "The assets of dictator So And So are frozen. We need your help. Send
> us your bank account number and we'll transfer a bunch of money there" (or
> something like that). Have others developed better tests to
I've put the following into /etc/mail/spamassassin/local.cf:
header FROM_RWC_NET Received =~ /from randomwalk.com/
describe FROM_RWC_NET From RWC internal network
score FROM_RWC_NET -100
Basically, a white list for connections made for internal mail.
The problem is that spamd doesn
