Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have SpamAssassin turned on and using RBL in the WHM control panel using the lists from spamhaus. However, these type of e-mails are getting in. Are there any ways to stop them?

Example of the e-mails I have been getting: http://i48.tinypic.com/i6j8jr.png

Would it be possible to use SpamAssassin to block links with the word unsubscribe in them?

EDIT: Are there any custom and more advanced SpamAssassin rulesets that can be downloaded and used?

share|improve this question
2  
Sure, if you want a billion false positives for legitimate e-mails... –  ceejayoz Dec 10 '12 at 19:54
    
What are other ideas then? –  Tiffany Dec 10 '12 at 19:55
1  
Tiffany I think you need to re-think the way you approach spam filtering. Try lowering the spam score on Spam Assassin and let the Bayes filter do their thing. –  DKNUCKLES Dec 10 '12 at 19:55
    
Bayes? Right now it is at 5. Should I make it 1? –  Tiffany Dec 10 '12 at 19:55
1  
Making huge, unpremeditated adjustments to the spam threshold score will have huge unintended consequences. Look at the X-Spam-Status header line for these messages that you're receiving. If they're scoring 4.5, then maybe it makes sense to change the threshold to 4. You want to act on data specific to your own situation. –  Skyhawk Dec 10 '12 at 20:08

1 Answer 1

Yes, you can customize SpamAssassin's rules to do whatever you want. All you need to do is edit your local.cf file. However, you will want to think carefully before setting up a custom rule that would condemn any inbound message on the basis of a single rule match (like the word "unsubscribe"). For obvious reasons, this is guaranteed to create false positives.

How are the spam messages that you are receiving being scored, according to the X-Spam-Status header line? Are they already close to the spam threshold? Perhaps all you need to do is make a minor adjustment.

Useful documentation:

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.