Does SpamAssassin support SPF?

[Philip Mak]

Does SpamAssassin support SPF record checking?

Or is this something I have to patch into my incoming SMTP server?

Blacklist of phone numbers?

[Philip Mak]

Is there a blacklist of phone numbers?

A lot of diploma spam I get has totally different message bodies,
except they list the same phone number to call.

Lots of this kind of spam getting through

[Philip Mak]

I'm getting about 50+ per day of these spams not being caught by
SpamAssassin (SpamAssassin version 3.1.1 running on Perl version
5.8.4). There's two types:

1. Lose weight type spam, uses bad English e.g. yrs instead of
years, u instead of you, ur instead of your, talks about not
having talked to the recipient in years

http://www.aaanime.net/pmak/spam/2006-05-27/1.txt
http://www.aaanime.net/pmak/spam/2006-05-27/2.txt
http://www.aaanime.net/pmak/spam/2006-05-27/3.txt

These spams all have different URLs, but if you visit them they're
exactly the same site. The first two resolve to the same IP address
too, though the third doesn't despite having the same content.

2. Homeowner credit, or something

http://www.aaanime.net/pmak/spam/2006-05-27/a.txt
http://www.aaanime.net/pmak/spam/2006-05-27/b.txt

These spams keep slipping through SpamAssassin consistently. Most of
my false negatives are variants of the messages I posted above. Any
suggestions on how to block them?

P.S. Looks like this mailing list's spam filter can block them! The
first time I tried to send this message, I had the spams included in
the body of my message and they got blocked.

users@spamassassin.apache.org:
140.211.166.49 failed after I sent the message.
Remote host said: 552 spam score (19.3) exceeded threshold

ALL_TRUSTED causing false negatives?

[Philip Mak]

I've been getting a lot of spam lately ever since I moved my mail
server to a new system. Here's one of the false negatives that slipped
through, for example:

X-Spam-Status: No, score=-2.1 required=5.0 tests=ALL_TRUSTED,BAYES_50,  
NO_REAL_NAME,RCVD_BY_IP,YOUR_INCOME autolearn=ham version=3.0.3 
X-Spam-Summary:  0.0 NO_REAL_NAME   From: does not include a real name  
0.1 RCVD_BY_IP Received by mail server with no name 
-3.3 ALL_TRUSTEDDid not pass through any untrusted hosts
1.1 YOUR_INCOMEBODY: Doing something with my income 
0.0 BAYES_50   BODY: Bayesian spam probability is 40 to 60% 
[score: 0.5000]  

Why does ALL_TRUSTED have a score of -3.3? Doesn't this mean that any
spammer who connects directly to my mail server has a good chance of
getting past SpamAssassin?

I did not define any trusted/internal networks when I installed
SpamAssassin.

SpamAssassin version 3.0.3
  running on Perl version 5.8.4

Linux naga.aaanime.net 2.6.8-11-amd64-k8 #1 Sun Oct 2 21:26:54 UTC 2005 x86_64 
GNU/Linux

Running Debian Sarge