Blocking Fake Banking Emails

[Martin Hepworth]

Ensure the RBL and URIRBL lookupss are working in SpamAssassin

Also make sure you've not got the phishing checks in mailScanner turned off
or overly whitelisted.

when you say latest I presume you mean SA at 3.3.1,

Also you can see what rules are hit in SA etc buy enabling the following
settings in MailScanner.conf, so you see if there's anything causing SA to
miss the emails (like whitelisting overly done)

Spam Score Number Format = %5.2f

Detailed Spam Report = yes

Include Scores In SpamAssassin Report = yes

Always Include SpamAssassin Report = yes

Spam Score Number Format = %5.2f


-- 
Martin Hepworth
Oxford, UK


On 1 February 2011 07:49, Neil Wilson <neil at dcdata.co.za> wrote:

> Hi guys,
>
> In South Africa we get tons of banking spam emails phishing for users
> account information.
>
> I don't want to send a sample to the list, but the problem is that the
> emails look almost like the real bank emails.
>
> Are there any methods of blocking the fake ones, is this just a big problem
> in S.A. or is everyone around the globe subjected to these?
>
> I'm running the latest spam assassin, with updated rules, and MailScanner
> and most of the emails don't get hit by any of the spam assassin rules, so
> it's not just a matter of bumping up scores.
>
> Any help will be appreciated.
>
> Thanks.
>
> Regards.
>
> Neil
>
>
>
>
>
>
>
>
>
>
>
>
>
> This email and all contents are subject to the following disclaimer:
> http://www.dcdata.co.za/emaildisclaimer.html
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20110201/af92b143/attachment.html