On 10/23/06, Bret Miller <[EMAIL PROTECTED]> wrote:
>  I am using Spamassassin 3.1.3 on Fc3 along with Postfix + MailScanner
> + Dovecot + Clamav + Squirrelmail + Mailwatch.
>
> I have already configured rulesdujour for sa and also doing sa-learn
> for few mailboxes as only few mailboxes r configured as IMAP. There
> are about 50-60 users on my mailserver. The problem I am facing is
> that the users are receiving some spam mails like below

Which additional rules are you using?


I am using MailScanner and I haven't written or using any other rules
except using spam.blacklist of MailScanner for blocking spammers.


> Increase in sexual desire
>
> just best prices for top qulity meds
>
> Dominique chromatogram
>
> Wa tch out for this one, 76% increase in 4 days
>
> You won't lose with this one, 76% increase in 4 days
>
> Can't be a lover anymore?
>
> Pharmacy for everyone
>
> viagra letter for our subscribers!
>
> Re: Nice to see Glucophage you again.
>
> viagra at $1.59 per dose
>
>
> Play all your favorite games
>
>
>
> These are only the subject line. I want to know how to stop this kind
> of spam as the users are the POP3 users and once they download these
> mails, then the mails are not retained on the server.

That depends on what they contain. If the body is mostly image, try the
ImageInfo plugin from www.rulesemporium.com or FuzzyOCR.

I have installed and configured FuzzyOCR on the mailserver.


> Can I configure a mailbox where the POP3 users can send me these mails
> and I will do sa-learn on that mailbox but I don't want my real users
> to be added as spammers in sa ? What is the best way to stop these
> kind of spams.

There was code posted to this list recently that detaches e-mails from a
forwarded message so the original e-mail can be learned. Note that this
only works if your e-mail client can forward a message by enclosing it
in a new message. You can probably do that with Outlook/Express by
Forwarding from a list without a preview pane or by selecting multiple
messages to forward.

If you can't find the code in the list archive, I probably have it
somewhere.

If you can give me a hint about the software that will help me in
searching in the archives.

Bret



Thanks & Regards

Ankush Grover


Reply via email to