I'm getting a number of these types of emails getting through SA with
either negative scores, or very low scores. This is surprising to me as
these are pretty classic spams. I suspect that some of the low scores
are due being DKIM signed.

Does anyone have any rules to catch these, or suggestions of scores to
tweak to make these hit better? I am running clamav-milter with the
sanesecurity add-ons, but these are still making it through.

I here are 5 different ones, all that got through in the last 24
hours:

http://micah.riseup.net/1
http://micah.riseup.net/2
http://micah.riseup.net/3
http://micah.riseup.net/4
http://micah.riseup.net/5

Thanks