What exactly are SA headers supposed to look like? I’m still getting quite a bit of spam coming through. It’s blocking quite a bit but I’m not so sure SA is even doing its job. Is there maybe a way to just block everything from anything .us? Stuff like this is being missed (what’s really amusing is this list blocked my original response because IT sure seems to know what spam is!) :
Received: from smtp.phhwtechnology.com (10.0.1.7) by mail.phhwtechnology.com (10.0.1.5) with Microsoft SMTP Server id 14.3.195.1; Mon, 18 Aug 2014 10:56:42 -0500 Received: from localhost (localhost [127.0.0.1]) by smtp.phhwtechnology.com (Postfix) with ESMTP id 0F1811948379 for <gledf...@phhwtechnology.com<mailto:gledf...@phhwtechnology.com>>; Mon, 18 Aug 2014 10:45:28 -0500 (CDT) X-Virus-Scanned: Debian amavisd-new at smtp.phhwtechnology.com X-Spam-Flag: NO X-Spam-Score: 0.138 X-Spam-Level: X-Spam-Status: No, score=0.138 tagged_above=-100 required=5 tests=[MISSING_MID=0.14, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001] autolearn=no autolearn_force=no Received: from smtp.phhwtechnology.com ([127.0.0.1]) by localhost (smtp.phhwtechnology.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id f63HgJVgBWwg for <gledf...@phhwtechnology.com<mailto:gledf...@phhwtechnology.com>>; Mon, 18 Aug 2014 10:45:23 -0500 (CDT) Received-SPF: pass (onlyfastsloans.us: 107.158.196.226 is authorized to use 'quick.apprv...@onlyfastslans.us' in 'mfrom' identity (mechanism 'a' matched)) receiver=spamfilter; identity=mailfrom; envelope-from="quick.approv...@onlyfastslans.us<mailto:quick.approv...@onlyfastslans.us>"; helo=onlyfastslans.us; client-ip=107.158.196.226 Received: from onlyfastslans.us (items.onlyfastslans.us [107.158.196.226]) by smtp.phhwtechnology.com (Postfix) with ESMTP id A4EE81948385 for <gledf...@phhwtechnology.com<mailto:gledf...@phhwtechnology.com>>; Mon, 18 Aug 2014 10:45:23 -0500 (CDT) Date: Mon, 18 Aug 2014 08:45:25 -0700 Subject: Fnds Up to 5000dollars on 8-18-2014. Notic #14258781 From: Fast-Funds684 <quick.apprv...@onlyfastslans.us<mailto:quick.apprv...@onlyfastslans.us>> To: <gledf...@phhwtechnology.com<mailto:gledf...@phhwtechnology.com>> Message-ID: <20140818154528.0f1811948...@smtp.phhwtechnology.com<mailto:20140818154528.0f1811948...@smtp.phhwtechnology.com>> MIME-Version: 1.0 Content-Type: text/plain Return-Path: quick.apprv...@onlyfastslans.us<mailto:quick.apprv...@onlyfastslans.us> X-MS-Exchange-Organization-AuthSource: WEBSERVER01.mail.phhwtechnology.com X-MS-Exchange-Organization-AuthAs: Anonymous >>Use sa_tag_level_deflt = -100; >>All your emails will have the SpamAssassin headers. >Changed and Amavis has been restarted. I’ll check the headers on the next >piece of spam to come through. Thanks
