On 4/7/2015 3:07 PM, Asai wrote:
Thanks, Bowie and Noel,
Here's a couple of example spams that are the kind which are slipping
through constantly. Some of the them get caught, others do not.
http://pastebin.com/UH5BA6zs
http://pastebin.com/esEz1a4J
Neither of those is matching on much of anything useful. I ran them
through my systems and they both hit on quite a few network tests
(blacklists, DCC, etc), but not much else. The network tests may or may
not have hit when you first received the message. Are you running with
the network tests active? Are you using DCC and Razor?
The second message hit on the KAM_MEDICARE rule from KAM.cf. You may
want to add that that rule set to your SA config if you are not using it
already.
http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf
Also, make sure you are running the latest SA (3.4.0) and that you are
running sa-update on a regular basis to keep the rules updated.
--
Bowie