>From: "Richard.Hall" <Richard.Hall@???>
>To: exim-users@???
>Subject: Re: [Exim] Transports
>Date: Fri, 25 Jun 2004 11:12:15 +0100 (BST)
>
>On Fri, 25 Jun 2004, Graham Dodd wrote:
>
>> Hello exim-users,
>>
>> my mail server is being flooded by a SPAM (if your in Germany then you have
>> probably seen this already)
>
>You don't have to be in Germany :-(
>
>> which doesn't get caught by SA.
>
>You can make SpamAssassin catch it trivially. This was discussed on the
>SA-users mailing list (sorry, can't find a reference right now). Various
>rule sets were produced to trap the content. But the winner IMHO was this
>simple one
>
>header GERMANSPAM Message-ID =~ /^<.*[a-z].*\.qmail\@.*>/
>describe GERMANSPAM Contains German Spam
>score GERMANSPAM 100
...
Consider selecting and using extra rules from the SpamAssassin Rules
Emporium:
http://www.rulesemporium.com/
You'll find the above rule in 70_sare_header0.cf as:
header SARE_MSGID_QMAIL1 MESSAGEID =~ /^<.*[a-z].*\.qmail\@.*>/
describe SARE_MSGID_QMAIL1 Contains spoofing message id
score SARE_MSGID_QMAIL1 3.000
You can always increase the score for SARE_MSGID_QMAIL1 in your
local.cf
