Rechnung offline Spam

[Johan Hendriks]

op 11-06-14 22:07, Joolee schreef:
> Also notice that your spamassassin folder probably has a special 
> configuration file to be used by MailScanner. You can identify this 
> file by examining the symbolic link in the configuration folder for 
> MailScanner.
>
> On 11 June 2014 20:43, Bryan Laurila <Bryan.Laurila at dchs.org 
> <mailto:Bryan.Laurila at dchs.org>> wrote:
>
>     From what I have read,when writing custom rules these lines should
>     be added to the /etc/mail/spamassassin/local.cf <http://local.cf>
>     file.  Below is an example of one of my custom rules to subtract
>     2.0 from the spam score for messages coming through our mail
>     encryption service.  You may want to consider "ALL" instead of
>     just "Subject" in your test linefor broader coveragebut I believe
>     that your syntax is correct.
>
>     #
>
>     #Subtract 2.0 from Spam Score for any ZIX processed message
>
>     header ZIX_MESSAGE  ALL =~ /zixvpm/
>
>     score ZIX_MESSAGE -2.0 -2.0 -2.0 -2.0
>
>     describe ZIX_MESSAGE Lower Score of ZIX Messages
>
>     #
>
>     See also:_http://wiki.apache.org/spamassassin/WritingRules_
>
>     Bryan S. Laurila
>
>     Senior Network Support Analyst
>
>     Dickinson County Healthcare System
>
>     -----Original Message-----
>     From: mailscanner-bounces at lists.mailscanner.info
>     <mailto:mailscanner-bounces at lists.mailscanner.info>
>     [mailto:mailscanner-bounces at lists.mailscanner.info] On Behalf Of
>     Johan Hendriks
>     Sent: Wednesday, June 11, 2014 8:42 AM
>     To: MailScanner List (mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>)
>     Subject: Rechnung offline Spam
>
>     Hello all.
>
>     I am trying to stop some spam but it seems MailScanner just lets
>     them pass...
>
>     It is about mail with the following Subject.
>
>     RechnungOnline Monat Juni 2014 (Buchungskonto: 4660367728)
>
>     So i made a custum.cf <http://custum.cf> file with the following
>
>
>     header TELECOM_SUBJECT      Subject =~ /RechnungOnline/i
>
>     score TELECOM_SUBJECT       5.1
>
>     describe TELECOM_SUBJECT    Telekom spam
>
>
>     Is my rule not ok, and is it looking for a subject ONLY with
>     RechnungOnline ??
>
>     Secondly the mail contains a Trojan and that also is getting through?
>
>     Could someone please help me.
>
>     regards
>
>     Johan
>
>     --
>
>     MailScanner mailing list
>
>     mailscanner at lists.mailscanner.info<mailto:mailscanner at lists.mailscanner.info>
>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>     Before posting, readhttp://wiki.mailscanner.info/posting
>
>     Support MailScanner development - buy the book off the website!
>
>
>     *Confidentiality Notice: *
>
>     This e-mail communication and any attachments may contain
>     confidential and privileged information for the use of the
>     designated recipients named above.  If you are not the intended
>     recipient, you are hereby notified that you have received this
>     communication in error and that any review, disclosure,
>     dissemination, distribution or copying of it or its contents is
>     prohibited.  As required by federal and state laws, you need to
>     hold this information as privileged and confidential.
>
>     This message may contain Protected Health Information (PHI).  PHI
>     is personal and sensitive information related to a person's health
>     care.  It is being emailed to you after appropriate authorization
>     from the patient or under circumstances that do not require
>     patient authorization.  You, the recipient, are obligated to
>     maintain it in a safe, secure and confidential manner.
>     Re-disclosure without additional patient consent or as permitted
>     by law is prohibited.  Unauthorized re-disclosure or failure to
>     maintain confidentiality could subject you to penalties described
>     in federal and state law.
>
>     If you are not the intended recipient, or the employee or agent
>     responsible to deliver it to the intended recipient, you are
>     hereby notified that any disclosure, copying or distribution of
>     this information is *Strictly Prohibited*.  If you have received
>     this communication in error, please notify the sender and destroy
>     all copies of this communication and any attachments.
>
>     Dickinson County Healthcare System, 1721 S. Stephenson Ave. Iron
>     Mountain, MI 49801, www.dchs.org <http://www.dchs.org>
>
>     --
>     MailScanner mailing list
>     mailscanner at lists.mailscanner.info
>     <mailto:mailscanner at lists.mailscanner.info>
>     http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
>     Before posting, read http://wiki.mailscanner.info/posting
>
>     Support MailScanner development - buy the book off the website!
>
>
>
>

Thank you for the reply's I will look into it a little more.

regards
Johan
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20140612/4a4593cb/attachment.html