Malicious emails reach MIAB but not Gmail

Today, it’s “PATRICIA EZE” from “Natwest” on info@hmrccustomersupport38.top with an attachment.

I found this on Spam Assassin’s website:

Using network tests to increase accuracy

https://wiki.apache.org/spamassassin/UsingNetworkTests

SpamAssassin supports several optional components to increase accuracy. Along with Bayes training, its set of ‘network tests’ is key if you want to improve your hit-rate. In testing, it typically halves the false negative rate – in other words, it means that users will see half as many missed spams.

By default, most installations of SpamAssassin don’t turn on the network tests, since they impose a small delay on each message as it passes through the filter. Since this increases the system memory load (although it will not increase the system CPU load), it’s something that could cause trouble on high-volume sites. As such, it requires a little thought by the admin before it’s turned on, so it’s not simply turned on ‘out of the box’ as a result.

How to turn on network tests

Edit your spamd start-up script, or start-up options file (depending on which OS you’re running, these may be different). There should be a -L or --local switch in that file. Remove it to enable network tests.