Those sneaky porno spammers

[Gordon Thagard <go...@eng.fsu.edu>]

Solaris 9
Postfix 2.1.x
Spamassassin 2.64
Amavisd-new-20030616-p10
Clamav-0.74
Bayes
Razor
DCC

Hello All,

I have setup what I consider to be a very good MTA for our College which 
is fending off a 49/51% SPAM/HAM ratio and dealing with many thousands 
of emails a day. While the system does a very good job of detecting 
SPAM, there is one brand of porno SPAM that is constantly evading our 
defenses. It usually has a white, grey, blue or purple background, 
giberish words and hardcore, explicit porno pics from an third-party web 
server. I've turned off viewing non-local images. Plus I have lowered 
the SPAM threshold to 4.0 and setup Bayes learning with access limited 
to our domain only. After setting up Bayes, I didn't get this particlar 
porno SPAM for a few days but then it started up again and nothing I do 
can stop it. One of two things happens:

1. There are zero spam headers added to the email in my INBOX or,
2. It gets a 3.8 spam rating and is delivered.

I have included both examples from today's barrage as attachments. Any 
help would be greatly appreciated.

-- 
Gordon Thagard, UNIX Systems Administrator

FAMU-FSU College of Engineering
Communications & Multimedia Services
2525 Pottsdammer Street Suite A332-L
Tallahassee, FL 32310-6046

V: (850) 410-6449
F: (850) 410-6484
M: (850) 443-4220