Re: moderately personalized spam sneaking past my SA. general approaches to fix it?

On 11/21/24 18:42, pgnd wrote:
> Starting about 2 weeks ago, I've been playing whack-a-mole with waves of 
> 'your mail box is full' phish, e.g.
> 
>      "Subject: The storage on your Webmail account is about full. You've 
> used up all of the storage."
> 
> , sneaking past my SA protections.  Whether to call it snowshoe, I 
> dunno :-/  But my usually well fed Bayes isn't getting noticeably better 
> with 'em.
> 
> There's a modicum of badly-done personalization attempted in them.  It's 
> usually laughably obvious spam to the eye.
> 
> I'd like to make it go away with my filters.
> 
> I can certainly do a bit of custom tweaking of SA scores, add header/ 
> content exlcusions @ Postfix, etc.
> I'm not beyond dropping the entire spammy ASN at my edges ...
> 
> But, first, wondering what, if any, better 'standard' SA options for 
> dealing with it are?
> 
> So as not to spam the list, here's a gist with headers/content from one 
> today,
> 
>      https://gist.github.com/pgnd/5ab934d921939f4c62a4c978a30b9e6f
> 
> Any general approaches to getting rid of this class of noise in SA?
> 

X-Spam-Status: NO, score=6.6 required=8.0

Using SA's default score of required 5.0 would have caught it