Rechnung offline Spam

[Joolee]

Also notice that your spamassassin folder probably has a special
configuration file to be used by MailScanner. You can identify this file by
examining the symbolic link in the configuration folder for MailScanner.

On 11 June 2014 20:43, Bryan Laurila <Bryan.Laurila at dchs.org> wrote:

>  From what I have read, when writing custom rules these lines should be
> added to the /etc/mail/spamassassin/local.cf file.  Below is an example
> of one of my custom rules to subtract 2.0 from the spam score for messages
> coming through our mail encryption service.  You may want to consider
> "ALL" instead of just "Subject" in your test line for broader coverage
> but I believe that your syntax is correct.
>
> #
>
> #Subtract 2.0 from Spam Score for any ZIX processed message
>
> header ZIX_MESSAGE  ALL =~ /zixvpm/
>
> score ZIX_MESSAGE -2.0 -2.0 -2.0 -2.0
>
> describe ZIX_MESSAGE Lower Score of ZIX Messages
>
> #
>
> See also: *http://wiki.apache.org/spamassassin/WritingRules*
> <http://wiki.apache.org/spamassassin/WritingRules>
>
>  Bryan S. Laurila
>
> Senior Network Support Analyst
>
> Dickinson County Healthcare System
>
> -----Original Message-----
> From: mailscanner-bounces at lists.mailscanner.info [
> mailto:mailscanner-bounces at lists.mailscanner.info
> <mailscanner-bounces at lists.mailscanner.info>] On Behalf Of Johan Hendriks
> Sent: Wednesday, June 11, 2014 8:42 AM
> To: MailScanner List (mailscanner at lists.mailscanner.info)
> Subject: Rechnung offline Spam
>
> Hello all.
>
> I am trying to stop some spam but it seems MailScanner just lets them
> pass...
>
> It is about mail with the following Subject.
>
> RechnungOnline Monat Juni 2014 (Buchungskonto: 4660367728)
>
> So i made a custum.cf  file with the following
>
> header TELECOM_SUBJECT      Subject =~ /RechnungOnline/i
>
> score TELECOM_SUBJECT       5.1
>
> describe TELECOM_SUBJECT    Telekom spam
>
> Is my rule not ok, and is it looking for a subject ONLY with
> RechnungOnline ??
>
> Secondly the mail contains a Trojan and that also is getting through?
>
> Could someone please help me.
>
> regards
>
> Johan
>
> --
>
> MailScanner mailing list
>
> mailscanner at lists.mailscanner.info
>
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>  * Confidentiality Notice: *
>
>  This e-mail communication and any attachments may contain confidential
> and privileged information for the use of the designated recipients named
> above.  If you are not the intended recipient, you are hereby notified that
> you have received this communication in error and that any review,
> disclosure, dissemination, distribution or copying of it or its contents is
> prohibited.  As required by federal and state laws, you need to hold this
> information as privileged and confidential.
>
> This message may contain Protected Health Information (PHI).  PHI is
> personal and sensitive information related to a person's health care.  It
> is being emailed to you after appropriate authorization from the patient or
> under circumstances that do not require patient authorization.  You, the
> recipient, are obligated to maintain it in a safe, secure and confidential
> manner.  Re-disclosure without additional patient consent or as permitted
> by law is prohibited.  Unauthorized re-disclosure or failure to maintain
> confidentiality could subject you to penalties described in federal and
> state law.
>
> If you are not the intended recipient, or the employee or agent
> responsible to deliver it to the intended recipient, you are hereby
> notified that any disclosure, copying or distribution of this information
> is *Strictly Prohibited*.  If you have received this communication in
> error, please notify the sender and destroy all copies of this
> communication and any attachments.
>
>  Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron
> Mountain, MI 49801, www.dchs.org
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140611/3323dbed/attachment.html