On Wed, 18 Jul 2007 05:30:38 -0400, SM wrote:

> At 21:31 17-07-2007, Debbie D wrote:
>> But I am still getting way to many spams.. more than I did before the=

=

>> update -- cialis, viagra, all kinds of meds, all scoring between 0.6 =

=

>> and 3.5

>
> Post a link to some of these emails including full headers. That shou=

ld =

> show the rules they hit.


See this link:
http://www.cse.yorku.ca/~paulg/missed-spam.html

Debbie, are these the knid of e-mails that are by passing Exim/SA

Here are some snippets from our Exim configure file.
-------
# Content-Filtering
av_scanner =3D clamd:/tmp/clamd.sock
spamd_address =3D /tmp/spamd.sock
-------
# Reject spam messages with score >=3D 5
deny message =3D This message scored $spam_score spam points.
spam =3D exim:true/defer_ok
condition =3D ${if >{$spam_score_int}{50}{1}{0}}

# finally accept all the rest
----
local_delivery:
driver =3D appendfile
transport_filter =3D /xsys/bin/spamc -U /tmp/spamd.sock
file =3D /var/mail/$local_part
delivery_date_add
envelope_to_add
return_path_add
# group =3D mail
# mode =3D 0660
----
address_pipe:
driver =3D pipe
transport_filter =3D /xsys/bin/spamc -U /tmp/spamd.sock
return_fail_output

----

I can send snippets from our Exim and spamd log files.

Thanks
Paul