Job spams

[Igor Chudov <ic...@Algebra.Com>]

Just as a side note, I recently changed the way SA runs for me. It
runs sitewide for all users except me, and I run it locally as
myself. That is beside the point but I want to thank others for
suggestions. 

I run rules_du_jour every night and get SARE rules. 

Despite that, I receive a lot of "get a job stealing money by means of
interbank transactions" types of ads. 

Are there some rulesets or some such which I could be missing?

Here's my global config

# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
# Only a small subset of options are listed below
#
###########################################################################

#   Add *****SPAM***** to the Subject header of spam e-mails
#
# rewrite_header Subject *****SPAM*****


#   Save spam messages as a message/rfc822 MIME attachment instead of
#   modifying the original message (0: off, 2: use text/plain instead)
#
# report_safe 1


#   Set which networks or hosts are considered 'trusted' by your mail
#   server (i.e. not spammers)
#
# trusted_networks 212.17.35.


#   Set file-locking method (flock is not safe over NFS, but is faster)
#
# lock_method flock


#   Set the threshold at which a message is considered spam (default: 5.0)
#
required_score 3.5


#   Use Bayesian classifier (default: 1)
#
use_bayes 1


#   Bayesian classifier auto-learning (default: 1)
#
bayes_auto_learn 1


#   Set headers which may provide inappropriate cues to the Bayesian
#   classifier
#
# bayes_ignore_header X-Bogosity
# bayes_ignore_header X-Spam-Flag
# bayes_ignore_header X-Spam-Status

#loadplugin     Mail::SpamAssassin::Plugin::RelayCountry 
add_header all Relay-Country _RELAYCOUNTRY_ 
 
whitelist_from owner-crsociety@LISTS.CALORIERESTRICTION.ORG 
whitelist_from owner-crcommunity@LISTS.CALORIERESTRICTION.ORG 
  
score FORGED_OUTLOOK_TAGS   6 
score FORGED_MUA_THEBAT_BOUN 6 
score FORGED_MUA_OUTLOOK     6 
score MIME_HTML_ONLY         2 
 
score FUZZY_VLIUM 5 
 

and here's my local config

# SpamAssassin user preferences file.  See 'perldoc Mail::SpamAssassin::Conf'
# for details of what can be tweaked.
###########################################################################

# How many points before a mail is considered spam.
# required_score		5

# Whitelist and blacklist addresses are now file-glob-style patterns, so
# "friend@somewhere.com", "*@isp.com", or "*.domain.net" will all work.
# whitelist_from	someone@somewhere.com

# Add your own customised scores for some tests below.  The default scores are
# read from the installed spamassassin rules files, but you can override them
# here.  To see the list of tests and their default scores, go to
# http://spamassassin.apache.org/tests.html .
#
# score SYMBOLIC_TEST_NAME n.nn

# Speakers of Asian languages, like Chinese, Japanese and Korean, will almost
# definitely want to uncomment the following lines.  They will switch off some
# rules that detect 8-bit characters, which commonly trigger on mails using CJK
# character sets, or that assume a western-style charset is in use. 
# 
# score HTML_COMMENT_8BITS	0
# score UPPERCASE_25_50		0
# score UPPERCASE_50_75		0
# score UPPERCASE_75_100	0
# score OBSCURED_EMAIL          0

# Speakers of any language that uses non-English, accented characters may wish
# to uncomment the following lines.   They turn off rules that fire on
# misformatted messages generated by common mail apps in contravention of the
# email RFCs.

# score SUBJ_ILLEGAL_CHARS      0

use_bayes 1
bayes_auto_learn 1

# Rules
header   IGOR_PAYPAL_PAYMENT Subject =~ /Notification of an Instant Payment Received/i
score    IGOR_PAYPAL_PAYMENT -5
describe IGOR_PAYPAL_PAYMENT This is a paypal payment or an answer thereof.

header   IGOR_WINTERNITZ From =~ /winternitz/
score    IGOR_WINTERNITZ -5
describe IGOR_WINTERNITZ This is a winternitz email

header   IGOR_WORD_PROBLEM_ERROR Subject =~ /word_problem error/
score    IGOR_WORD_PROBLEM_ERROR 15
describe IGOR_WORD_PROBLEM_ERROR Algebra.Com Word Problem Error

i