How do I help Spamassassin learn these messages?

Discuss our MailScanner install script and MailScanner itself
Post Reply
vigilante
Junior Member
Posts: 6
Joined: 16 Oct 2013, 20:30

How do I help Spamassassin learn these messages?

Post by vigilante »

I've got a pretty solid config of MS and SA working but some spam slips through no matter how hard I try to nail it down.

Lately for the last few weeks a very specific type of spam keeps getting through. The messages always look about the same. I run the sa-learn stuff on them always but it doesn't seem to be learning as I still get a few of these a day, sometimes up to 10 a day, strait in to inbox, not tagged as spam.
It's driving me crazy!

The body of the messages look like this, I'll copy three of them, with links removed.
Getting older is something that happens to everyone.
.
There is nothing you can do about it!
.
What you CAN DO is refuse to let age rob you of your eyesight.
.
Formula 20/20 has been developed and tested to keep you focused on your future.
.
Learn how this revolutionary product can STOP macular degeneration and even REVERSE IT!
.
<**click**Take control of your eye health**click**> bad link.
.
.
.
.
To stop getting new messages : bad link php.
.
1778 Peaceful Lane
Cleveland, OH 44110
When it comes to flashlights, nothing beats the performance of the recently released G700 LED flashlight.
.
You will be amazed at the illuminating power of this handy tool.
.
It is so powerful, it can even be used as a self defence weapon to blind any attackers in seconds.
.
Get yours today with a huge 75% discount at bad link
.
.
.
.
.
Unsubscribe_: bad link
.
768 Steele Street
Lombard, IL 60148
You don't have to choose between QUALITY and PRICE!
.
.
<eSurface> want to help to get ready for spring!
.
Whether you are a business or an individual our line of products have been specifically created with you in mind.
.
Save money and time with our easy DIY product line.
.
Decks, Basements, Patios, Commercial surfaces an MORE!
.
Let us help you with any of your wood, concrete or metal restoration needs.
.
Get now: bad link
.
.
.
.
.
Unsubscribe: bad link php
.
.
.
460 Cemetery Street
Houston, TX 77036
That's just a sample. I get a never ending flow of this exact type of spam every day.

How can I kick SA into gear and start killing this junk?

More specifically, if I notice patterns such as those found in emails, how can go about assembling my own sort of rules to find them? For example, I could search for "Multiple lines with just a period" as a type of test.

What can I do to improve detection here?
vigilante
Junior Member
Posts: 6
Joined: 16 Oct 2013, 20:30

Re: How do I help Spamassassin learn these messages?

Post by vigilante »

Any ideas?

I've ran sa-learn on about 30 more of these since I posted this message. They still come right through detection and into my inbox with scores lower than 4. I don't get it!
Sarah
Moderator
Posts: 934
Joined: 09 Dec 2006, 22:49

Re: How do I help Spamassassin learn these messages?

Post by Sarah »

I'd suggest searching the spamassassin news group and/or writing your own rules.

http://www.gossamer-threads.com/lists/s ... sin/users/

http://wiki.apache.org/spamassassin/WritingRules

Regards,
Sarah
Post Reply