<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<div class="moz-cite-prefix">op 11-06-14 22:07, Joolee schreef:<br>
</div>
<blockquote
cite="mid:CA+Q-w8VoXuqWRm3MOzMDsJWyYKWP1fFT6UdsLeo+_5wOX1tJWQ@mail.gmail.com"
type="cite">Also notice that your spamassassin folder probably has
a special configuration file to be used by MailScanner. You can
identify this file by examining the symbolic link in the
configuration folder for MailScanner.<br>
<br>
<div class="gmail_quote">
On 11 June 2014 20:43, Bryan Laurila <span dir="ltr"><<a
moz-do-not-send="true" href="mailto:Bryan.Laurila@dchs.org"
target="_blank">Bryan.Laurila@dchs.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<p dir="LTR"><span lang="en-us"><font face="Calibri">From
what I have read</font></span><span lang="en-us"><font
face="Calibri">,</font></span><span lang="en-us"><font
face="Calibri"> when writing custom rules these lines
should be added to the /etc/mail/spamassassin/<a
moz-do-not-send="true" href="http://local.cf"
target="_blank">local.cf</a> file.</font></span><span
lang="en-us"><font face="Calibri"> Below is an example
of one of my custom rules to subtract 2.0 from the
spam score for messages coming through our mail
encryption service.</font></span><span lang="en-us"><font
face="Calibri"> You may want to consider "ALL"
instead of just "Subject" in your test line</font></span><span
lang="en-us"><font face="Calibri"> for broader coverage</font></span><span
lang="en-us"><font face="Calibri"> but I believe that
your syntax is correct.</font></span><span
lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span><span lang="en-us"><font
face="Courier New">#</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Courier New">#Subtract
2.0 from Spam Score for any ZIX processed message</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Courier New">header
ZIX_MESSAGE ALL =~ /zixvpm/</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Courier New">score
ZIX_MESSAGE -2.0 -2.0 -2.0 -2.0</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Courier New">describe
ZIX_MESSAGE Lower Score of ZIX Me</font></span><span
lang="en-us"></span><span lang="en-us"><font
face="Courier New">s</font></span><span lang="en-us"></span><span
lang="en-us"><font face="Courier New">sages</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Courier New">#</font></span><span
lang="en-us"></span><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">See
also:</font></span><span lang="en-us"> </span><a
moz-do-not-send="true"
href="http://wiki.apache.org/spamassassin/WritingRules"
target="_blank"><span lang="en-us"><u><font
color="#0000FF" face="Calibri">http://wiki.apache.org/spamassassin/WritingRules</font></u></span><span
lang="en-us"></span></a><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span><span lang="en-us"><font
face="Calibri">Bryan S. Laurila</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Senior
Network Support Analyst</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Dickinson
County Healthcare System</font></span></p>
<div>
<div class="h5">
<p dir="LTR"><span lang="en-us"></span><span
lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">-----Original
Message-----<br>
From: <a moz-do-not-send="true"
href="mailto:mailscanner-bounces@lists.mailscanner.info"
target="_blank">mailscanner-bounces@lists.mailscanner.info</a>
[<a moz-do-not-send="true"
href="mailto:mailscanner-bounces@lists.mailscanner.info"
target="_blank">mailto:mailscanner-bounces@lists.mailscanner.info</a>]
On Behalf Of Johan Hendriks<br>
Sent: Wednesday, June 11, 2014 8:42 AM<br>
To: MailScanner List (<a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info"
target="_blank">mailscanner@lists.mailscanner.info</a>)<br>
Subject: Rechnung offline Spam</font></span><span
lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Hello
all.</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">I
am trying to stop some spam but it seems
MailScanner just lets them pass...</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">It
is about mail with the following Subject.</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">RechnungOnline
Monat Juni 2014 (Buchungskonto: 4660367728)</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">So
i made a <a moz-do-not-send="true"
href="http://custum.cf" target="_blank">custum.cf</a>
file with the following</font></span></p>
<br>
<p dir="LTR"><span lang="en-us"><font face="Calibri">header
TELECOM_SUBJECT Subject =~ /RechnungOnline/i</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">score
TELECOM_SUBJECT 5.1</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">describe
TELECOM_SUBJECT Telekom spam</font></span></p>
<br>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Is
my rule not ok, and is it looking for a subject
ONLY with RechnungOnline ??</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Secondly
the mail contains a Trojan and that also is
getting through?</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Could
someone please help me.</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">regards</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Johan</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">--</font></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">MailScanner
mailing list</font></span></p>
<p dir="LTR"><span lang="en-us"></span><a
moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info"
target="_blank"><span lang="en-us"><font
face="Calibri">mailscanner@lists.mailscanner.info</font></span><span
lang="en-us"></span></a><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"></span><a
moz-do-not-send="true"
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
target="_blank"><span lang="en-us"><font
face="Calibri">http://lists.mailscanner.info/mailman/listinfo/mailscanner</font></span><span
lang="en-us"></span></a><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Before
posting, read</font></span><span lang="en-us"> </span><a
moz-do-not-send="true"
href="http://wiki.mailscanner.info/posting"
target="_blank"><span lang="en-us"><font
face="Calibri">http://wiki.mailscanner.info/posting</font></span><span
lang="en-us"></span></a><span lang="en-us"></span></p>
<p dir="LTR"><span lang="en-us"><font face="Calibri">Support
MailScanner development - buy the book off the
website! </font></span></p>
</div>
</div>
</div>
<br>
<div style="font-size:12pt"> <b><span style="font-size:9pt">
Confidentiality Notice: </span></b> <br>
<br>
<span style="font-size:8pt"> <span>
This e-mail communication and any attachments may
contain confidential and privileged information for the
use of the designated recipients named above. If you
are not the intended recipient, you are hereby notified
that you have received this communication in error and
that any review, disclosure, dissemination, distribution
or copying of it or its contents is prohibited. As
required by federal and state laws, you need to hold
this information as privileged and confidential. <br>
<br>
This message may contain Protected Health Information
(PHI). PHI is personal and sensitive information
related to a person's health care. It is being emailed
to you after appropriate authorization from the patient
or under circumstances that do not require patient
authorization. You, the recipient, are obligated to
maintain it in a safe, secure and confidential manner.
Re-disclosure without additional patient consent or as
permitted by law is prohibited. Unauthorized
re-disclosure or failure to maintain confidentiality
could subject you to penalties described in federal and
state law. <br>
<br>
If you are not the intended recipient, or the employee
or agent responsible to deliver it to the intended
recipient, you are hereby notified that any disclosure,
copying or distribution of this information is <b>Strictly
Prohibited</b>. If you have received this
communication in error, please notify the sender and
destroy all copies of this communication and any
attachments.</span> <br>
<br>
<span style="font-size:7pt">
Dickinson County Healthcare System, 1721 S. Stephenson
Ave. Iron Mountain, MI 49801, <a moz-do-not-send="true"
href="http://www.dchs.org" target="_blank">www.dchs.org</a>
</span> </span>
</div>
<br>
--<br>
MailScanner mailing list<br>
<a moz-do-not-send="true"
href="mailto:mailscanner@lists.mailscanner.info">mailscanner@lists.mailscanner.info</a><br>
<a moz-do-not-send="true"
href="http://lists.mailscanner.info/mailman/listinfo/mailscanner"
target="_blank">http://lists.mailscanner.info/mailman/listinfo/mailscanner</a><br>
<br>
Before posting, read <a moz-do-not-send="true"
href="http://wiki.mailscanner.info/posting" target="_blank">http://wiki.mailscanner.info/posting</a><br>
<br>
Support MailScanner development - buy the book off the
website!<br>
<br>
</blockquote>
</div>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
</blockquote>
<br>
Thank you for the reply's I will look into it a little more.<br>
<br>
regards<br>
Johan <br>
</body>
</html>