Rechnung offline Spam

Bryan Laurila Bryan.Laurila at
Wed Jun 11 19:43:07 IST 2014

From what I have read, when writing custom rules these lines should be
added to the /etc/mail/spamassassin/ file.  Below is an example
of one of my custom rules to subtract 2.0 from the spam score for
messages coming through our mail encryption service.  You may want to
consider "ALL" instead of just "Subject" in your test line for broader
coverage but I believe that your syntax is correct.

#Subtract 2.0 from Spam Score for any ZIX processed message
header ZIX_MESSAGE  ALL =~ /zixvpm/
score ZIX_MESSAGE -2.0 -2.0 -2.0 -2.0
describe ZIX_MESSAGE Lower Score of ZIX Messages

See also:

Bryan S. Laurila
Senior Network Support Analyst
Dickinson County Healthcare System

-----Original Message-----
From: mailscanner-bounces at
[mailto:mailscanner-bounces at] On Behalf Of Johan
Sent: Wednesday, June 11, 2014 8:42 AM
To: MailScanner List (mailscanner at
Subject: Rechnung offline Spam

Hello all.

I am trying to stop some spam but it seems MailScanner just lets them

It is about mail with the following Subject.
RechnungOnline Monat Juni 2014 (Buchungskonto: 4660367728)

So i made a  file with the following

header TELECOM_SUBJECT      Subject =~ /RechnungOnline/i
score TELECOM_SUBJECT       5.1
describe TELECOM_SUBJECT    Telekom spam

Is my rule not ok, and is it looking for a subject ONLY with
RechnungOnline ??

Secondly the mail contains a Trojan and that also is getting through?

Could someone please help me.


MailScanner mailing list
mailscanner at

Before posting, read

Support MailScanner development - buy the book off the website! 

Confidentiality Notice:

This e-mail communication and any attachments may contain confidential and privileged information for the use of the designated recipients named above. If you are not the intended recipient, you are hereby notified that you have received this communication in error and that any review, disclosure, dissemination, distribution or copying of it or its contents is prohibited. As required by federal and state laws, you need to hold this information as privileged and confidential.

This message may contain Protected Health Information (PHI). PHI is personal and sensitive information related to a person's health care. It is being emailed to you after appropriate authorization from the patient or under circumstances that do not require patient authorization. You, the recipient, are obligated to maintain it in a safe, secure and confidential manner. Re-disclosure without additional patient consent or as permitted by law is prohibited. Unauthorized re-disclosure or failure to maintain confidentiality could subject you to penalties described in federal and state law. 

If you are not the intended recipient, or the employee or agent responsible to deliver it to the intended recipient, you are hereby notified that any disclosure, copying or distribution of this information is Strictly Prohibited. If you have received this communication in error, please notify the sender and destroy all copies of this communication and any attachments. 

Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron Mountain, MI 49801,
-------------- next part --------------
An HTML attachment was scrubbed...

More information about the MailScanner mailing list