Rechnung offline Spam

[Bryan Laurila]

From what I have read, when writing custom rules these lines should be
added to the /etc/mail/spamassassin/local.cf file.  Below is an example
of one of my custom rules to subtract 2.0 from the spam score for
messages coming through our mail encryption service.  You may want to
consider "ALL" instead of just "Subject" in your test line for broader
coverage but I believe that your syntax is correct.

#
#Subtract 2.0 from Spam Score for any ZIX processed message
header ZIX_MESSAGE  ALL =~ /zixvpm/
score ZIX_MESSAGE -2.0 -2.0 -2.0 -2.0
describe ZIX_MESSAGE Lower Score of ZIX Messages
#

See also: http://wiki.apache.org/spamassassin/WritingRules


Bryan S. Laurila
Senior Network Support Analyst
Dickinson County Healthcare System

-----Original Message-----
From: mailscanner-bounces at lists.mailscanner.info
[mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of Johan
Hendriks
Sent: Wednesday, June 11, 2014 8:42 AM
To: MailScanner List (mailscanner at lists.mailscanner.info)
Subject: Rechnung offline Spam

Hello all.

I am trying to stop some spam but it seems MailScanner just lets them
pass...

It is about mail with the following Subject.
RechnungOnline Monat Juni 2014 (Buchungskonto: 4660367728)

So i made a custum.cf  file with the following


header TELECOM_SUBJECT      Subject =~ /RechnungOnline/i
score TELECOM_SUBJECT       5.1
describe TELECOM_SUBJECT    Telekom spam


Is my rule not ok, and is it looking for a subject ONLY with
RechnungOnline ??

Secondly the mail contains a Trojan and that also is getting through?

Could someone please help me.

regards
Johan

--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner

Before posting, read http://wiki.mailscanner.info/posting

Support MailScanner development - buy the book off the website! 


Confidentiality Notice:

This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. As required by federal and state laws, you need to hold this information as privileged and confidential.

This message may contain Protected Health Information (PHI). PHI is personal and sensitive information related to a person's health care. It is being emailed to you after appropriate authorization from the patient or under circumstances that do not require patient authorization. You, the recipient, are obligated to maintain it in a safe, secure and confidential manner. Re-disclosure without additional patient consent or as permitted by law is prohibited. Unauthorized re-disclosure or failure to maintain confidentiality could subject you to penalties described in federal and state law. 

If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying or distribution of this information is Strictly Prohibited. If you have received this communication in error, please notify the sender and destroy all copies of this communication and any attachments. 

Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron Mountain, MI 49801, www.dchs.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140611/a41bdf14/attachment.html