Brooks Rimes wrote: > My email is through my website: www.rimesrv.net which is hosted on > www.totalchoicehosting.com and they use Spam Assassin for spam filtering. I > don't know a lot about SA. > > Over the last weeks or a month my spam has increased dramatically. What is > particularly frustrating is that I get many in the same day with the same or > near identical subject and body. Today it is "RE:Report" - ten came in this > morning. See example below. > > I'm careful where I put my email address. Apparently, not careful enough. > Many of these spams seem to be related to the stock market. > > - is there a way to track these down and stop them?
Spamcop is one way to _try_ to stop them. > - why doesn't Spam Assassin recognize all these with the same subject/body > as spam? SA uses many "rules" to recognize spam, both subject and body, plus relay history, heuristics, and other. > - any suggestions/advice? > > - is there anywhere else to seek help? Yes, your host doesn't seem to know SA, look below... But if you want to take matters into your own hands you could install something like SpamAware (an Outlook plugin -- I assume you use Outlook since Thunderbird has its own built-in filter). [snip] > X-Spam-Checker-Version: SpamAssassin 3.1.7 (2006-10-05) on > server38.tchmachines.com > X-Spam-Level: * > X-Spam-Status: No, score=1.4 required=5.0 tests=BAYES_00,RCVD_IN_NJABL_DUL, > RCVD_IN_SORBS_DUL autolearn=no version=3.1.7 Compare that to this: X-Spam-Status: Yes, hits=10.4, required=4.0, autolearn=no X-Spam-Report: * 2.0 DATE_IN_FUTURE_03_06 Date: is 3 to 6 hours after Received: date * 1.7 SARE_MLB_Stock1 BODY: SARE_MLB_Stock1 * 1.7 SARE_MLB_Stock2 BODY: SARE_MLB_Stock2 * 0.8 SARE_LWSHORTT BODY: SARE_LWSHORTT * 1.7 SARE_MLB_Stock6 BODY: Obfuscated ticker symbols * 2.6 This score was done by SpamAware with SARE rules added (on a message with the same subject). -- René Berber
