Training or adujsting of SpamAssassin How to?

[Götz Reinicke - IT Koordinator]

Hi,

usually our MailScanner installation is working fine, but from time to
time some spam/phishing mails slip through the grid and bug or confuse
our users.

My question: How to handle such messages? The messages in questions
usually have a good looking subject and not to much errors in the body,
the from address exists. So all in all they look quite good, beside some
foolish phishing urls.

AFAIK I can train SpamAssassin some how or is there some other best
practice suggestions?


Thanks for any suggestion, hint etc. Regards . G?tz
--
G?tz Reinicke
IT-Koordinator

Tel. [phone]
E-Mail goetz.reinicke at filmakademie.de

Filmakademie Baden-W?rttemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de

Eintragung Amtsgericht Stuttgart HRB 205016

Vorsitzender des Aufsichtsrats: J?rgen Walter MdL
Staatssekret?r im Ministerium f?r Wissenschaft,
Forschung und Kunst Baden-W?rttemberg

Gesch?ftsf?hrer: Prof. Thomas Schadt

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/pkcs7-signature
Size: 5223 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.mailscanner.info/pipermail/mailscanner/attachments/20131203/7fe96a23/attachment.bin

[Martin Hepworth]

User education, banks dont send these things, are u expecting this from
this user....
--
Martin Hepworth, CISSP
Oxford, UK


On 3 December 2013 13:10, G?tz Reinicke - IT Koordinator <

Post by Götz Reinicke - IT Koordinator
Hi,
usually our MailScanner installation is working fine, but from time to
time some spam/phishing mails slip through the grid and bug or confuse
our users.
My question: How to handle such messages? The messages in questions
usually have a good looking subject and not to much errors in the body,
the from address exists. So all in all they look quite good, beside some
foolish phishing urls.
AFAIK I can train SpamAssassin some how or is there some other best
practice suggestions?
Thanks for any suggestion, hint etc. Regards . G?tz
--
G?tz Reinicke
IT-Koordinator
Tel. [phone]
E-Mail goetz.reinicke at filmakademie.de
Filmakademie Baden-W?rttemberg GmbH
Akademiehof 10
71638 Ludwigsburg
www.filmakademie.de
Eintragung Amtsgericht Stuttgart HRB 205016
Vorsitzender des Aufsichtsrats: J?rgen Walter MdL
Staatssekret?r im Ministerium f?r Wissenschaft,
Forschung und Kunst Baden-W?rttemberg
Gesch?ftsf?hrer: Prof. Thomas Schadt
--
MailScanner mailing list
mailscanner at lists.mailscanner.info
http://lists.mailscanner.info/mailman/listinfo/mailscanner
Before posting, read http://wiki.mailscanner.info/posting
Support MailScanner development - buy the book off the website!

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20131203/b8e074dc/attachment.html

[VladoB]

Hi.

I use SpamAssassin. I occasionally run sa-learn on selected IMAP
folders, like this:

sa-learn --ham --no-sync "/home/user1/Maildir/dir1/cur"
sa-learn --ham --no-sync "/home/user1/Maildir/dir2/cur"
sa-learn --ham --no-sync "/home/user2/Maildir/dir3/cur"
...
sa-learn --spam --no-sync "/home/user3/Maildir/.Junk/cur"
sa-learn --spam --no-sync "/home/user4/Maildir/.Junk/cur"
...
sa-learn --sync

In case of extra annoying spam I add rules to spamassassin-local.cf
manually, like this:

body LOCAL_ELGORDO1 /El Gordo International Email
Lottery Award/i
score LOCAL_ELGORDO1 4
describe LOCAL_ELGORDO1 Spam from El Gordo

Spam countermeasures will never be 100% perfect. Better some mails slip
through, than correct mail catched and not delivered.

~~/VladoB/~~

Post by Götz Reinicke - IT Koordinator
Hi,
usually our MailScanner installation is working fine, but from time to
time some spam/phishing mails slip through the grid and bug or confuse
our users.
My question: How to handle such messages? The messages in questions
usually have a good looking subject and not to much errors in the body,
the from address exists. So all in all they look quite good, beside some
foolish phishing urls.
AFAIK I can train SpamAssassin some how or is there some other best
practice suggestions?
Thanks for any suggestion, hint etc. Regards . G?tz

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.mailscanner.info/pipermail/mailscanner/attachments/20131204/d8035850/attachment.html