Recent days i started getting huge number of spam mails eg: "V agra Super
Active for YOUR", at present the msg goes to user with
Spam detection software, running on the system and attaching the spam mail.
instead of it is there a way to quarantine the msg or delete that msg...
my local.cf
required_hits 5
use_bayes 1
bayes_file_mode 0700
bayes_path /home/vpopmail/.spamassassin/bayes
bayes_auto_learn 1
bayes_auto_learn_threshold_spam 8.0
ok_languages en
ok_locales all
add_header spam Flag _YESNOCAPS_
use_pyzor 1
report_contact [EMAIL PROTECTED]
header VGR_SUBJ Subject =~ /\bviagra\b/i
score VGR_SUBJ 2.6
describe VGR_SUBJ Obfuscated 'viagra' in subject
body VGR /\bviagra\b/i
score VGR 1.8
describe VGR Obfuscated 'viagra' in body
header PLLS_SUBJ Subject =~ /\bpills\b/i
score PLLS_SUBJ 2.6
describe PLLS_SUBJ Obfuscated 'pills' in subject
body PLLS /\bpills\b/i
score PLLS 1.8
describe PLLS Obfuscated 'pills' in body
header PNS_SUBJ Subject =~ /\bpenis\b/i
score PNS_SUBJ 2.6
describe PNS_SUBJ Obfuscated 'penis' in subject
body PNS /\bpenis\b/i
score PNS 1.8
describe PNS Obfuscated 'penis' in body
header ONLY_SXY_SUBJ Subject =~ /\bsexy\b/i
score ONLY_SXY_SUBJ 2.6
describe ONLY_SXY_SUBJ Obfuscated 'sexy' in subject
body ONLY_SXY /\bsexy\b/i
score ONLY_SXY 1.8
describe ONLY_SXY Obfuscated 'sexy' in body
header ONLY_VLGR_SUBJ Subject =~ /\bvlagra\b/i
score ONLY_VLGR_SUBJ 2.6
describe ONLY_VLGR_SUBJ Obfuscated 'vlagra' in subject
body ONLY_VLGR /\bvlagra\b/i
score ONLY_VLGR 1.8
describe ONLY_VLGR Obfuscated 'vlagra' in body
header ONLY_VGR_SUBJ Subject =~ /\bVigara\b/i
score ONLY_VGR_SUBJ 2.6
describe ONLY_VGR_SUBJ Obfuscated 'Vigara' in subject
body ONLY_VGR /\bVigara\b/i
score ONLY_VGR 1.8
describe ONLY_VGR Obfuscated 'Vigara' in body
razor-agent.conf
debuglevel = 3
identity = identity
ignorelist = 0
listfile_catalogue = servers.catalogue.lst
listfile_discovery = servers.discovery.lst
listfile_nomination = servers.nomination.lst
logfile = razor-agent.log
logic_method = 4
min_cf = ac
razorzone = razor2.cloudmark.com
rediscovery_wait = 172800
report_headers = 1
sort_by_distance = 0
turn_off_discovery = 0
use_engines = 4,8
whitelist = razor-whitelist
simcontrol
:clam=yes,spam=yes,spam_passthru=yes,spam_hits=12,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif:.exe:.bat
regards
kavitha
