On 4/7/2015 3:07 PM, Asai wrote:
Thanks, Bowie and Noel,

Here's a couple of example spams that are the kind which are slipping through constantly. Some of the them get caught, others do not.

http://pastebin.com/UH5BA6zs
http://pastebin.com/esEz1a4J

Neither of those is matching on much of anything useful. I ran them through my systems and they both hit on quite a few network tests (blacklists, DCC, etc), but not much else. The network tests may or may not have hit when you first received the message. Are you running with the network tests active? Are you using DCC and Razor?

The second message hit on the KAM_MEDICARE rule from KAM.cf. You may want to add that that rule set to your SA config if you are not using it already.

http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf

Also, make sure you are running the latest SA (3.4.0) and that you are running sa-update on a regular basis to keep the rules updated.

--
Bowie

Reply via email to