I'm getting a number of these types of emails getting through SA with either negative scores, or very low scores. This is surprising to me as these are pretty classic spams. I suspect that some of the low scores are due being DKIM signed.
Does anyone have any rules to catch these, or suggestions of scores to tweak to make these hit better? I am running clamav-milter with the sanesecurity add-ons, but these are still making it through. I here are 5 different ones, all that got through in the last 24 hours: http://micah.riseup.net/1 http://micah.riseup.net/2 http://micah.riseup.net/3 http://micah.riseup.net/4 http://micah.riseup.net/5 Thanks