Just to add
Include Kevin McGrails KAM rules to your SpamAssassin.
http://www.pccc.com/downloads/SpamAssassin/contrib/KAM.cf
You just need to your Ham corpus is good, else rescore the values.
HTH
Brent
On 2019/04/02 13:15, Brent Clark wrote:
> Hi Rory
>
> Are you including Sanesecurity signatures in setup?
> If not. Just install the debian package, clamav-unofficial-sigs.
> Then ensure Exim or Spamassasin is configured to scan mail, via Clamav.
>
> HTH
> Regards
> Brent
>
> On 2019/04/01 21:01, Rory Campbell-Lange via Exim-users wrote:
>> Hi
>>
>> It's some years since I've spent time tweaking my exim setup to receive
>> spam. I've forgotten any skills I might once have had in this area.
>>
>> I've gotten sick of getting 30+ spam emails a day and need to do
>> something
>> about it! I'd be grateful for some pointers to the state-of-the-art
>> setup.
>>
>> right now relay blocks, cram_md5 rejects and spamhaus blocks account
>> for about
>> 500-1000 rejections a day (no wonder everyone has gone to Google mail!).
>>
>> I'm running Exim 4.89-2+deb9u3 under Debian, with spamassassin/spamc
>> 3.4.2.1
>>
>> Spamd is reporting along the following lines.
>>
>> spamd: result: . 0 - BAYES_00,
>> DKIMWL_WL_HIGH,
>> DKIM_SIGNED,
>> DKIM_VALID,
>> DKIM_VALID_EF,
>> FORGED_MUA_MOZILLA,
>> HEADER_FROM_DIFFERENT_DOMAINS,
>> MAILING_LIST_MULTI,
>> SPF_PASS,
>> URIBL_BLOCKED scantime=0.5,
>> size=5448,
>> user=mail,
>> uid=8,
>> required_score=3.0,
>> rhost=127.0.0.1,
>> raddr=127.0.0.1,
>> rport=59670,
>> mid=<example.mail.com>,
>> bayes=0.000000,
>> autolearn=disabled
>>
>> Pointers much appreciated.
>>
>> Rory
>>
>>
>>
