Hi team
now 80% of the spam mails have got blocked clearly. thanks a ton to those who
procured help .
Now the mess created by VIAGRA/Pfizer mails are the only visible to the users.
('|'),
I use spamdyke+spamassassin along with qmailtoaster. After reading Jake Vickers
article in one of the viagra related query, i added rules as
70_your_rulseset.cf /etc/mail/spamassassin and spamassassin --lint and did
qmail-spamd restart. Still the mails are getting delivered with viagra messages.
body JV_Pharm1d_Drug /cansee/idescribe JV_Pharm1d_Drug Missing a space in "can
see"score JV_Pharm1d_Drug 1.0header JV_Pharm1e_Drug Subject =~
/Pharmaceutical/idescribe JV_Pharm1e_Drug Pill ad subject linescore
JV_Pharm1e_Drug 1.0header JV_Pharm1f_Drug Subject =~ /Viagra/idescribe
JV_Pharm1f_Drug Viagra ad subject linescore JV_Pharm1f_Drug 1.0header
JV_Pharm1g_Drug Subject =~ /80%/idescribe JV_Pharm1g_Drug Visitor name personal
80% OFFscore JV_Pharm1g_Drug 1.0
Even though the score shows 11.1 against required 10, i dont know how to block
or drop the same?
Can you please help me.
following are the header values of the spam message.
X-Spam-Status: Yes, score=11.1 required=10.0 tests=BAYES_99,HTML_IMAGE_ONLY_32,
HTML_IMAGE_RATIO_02,HTML_MESSAGE,JV_Pharm1g_Drug,MIME_HTML_ONLY,MISSING_DATE,
MISSING_MID,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS_DUL,RDNS_NONE
autolearn=no version=3.2.5X-Spam-Report: * 3.5
BAYES_99 BODY: Bayesian spam probability is 99 to 100% *
[score: 1.0000] * 0.0 MISSING_MID Missing Message-Id: header
* 0.0 MISSING_DATE Missing Date: header * 1.0
JV_Pharm1g_Drug Visitor name personal 80% OFF * 1.8
HTML_IMAGE_ONLY_32 BODY: HTML: images with 2800-3200 bytes of words
* 0.4 HTML_IMAGE_RATIO_02 BODY: HTML has a low ratio of text to image area
* 0.0 HTML_MESSAGE BODY: HTML included in message
* 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
* 2.0 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
* [Blocked - see
<http://www.spamcop.net/bl.shtml?217.128.132.50>] * 0.9
RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address
* [217.128.132.50 listed in dnsbl.sorbs.net] * 0.1
RDNS_NONE Delivered to trusted network by a host with no rDNS
_________________________________________________________________
Windows 7: Find the right PC for you. Learn more.
http://windows.microsoft.com/shop
