SPAM is winning!!!

Question

Hi everybody, I hope that someone out there can help. Before I go into all the details, I want you to know that we don't have a tech person and I have nowhere near the amount of tech knowledge that you have out there, so please be gentle.
Simply stated: Spam is getting the best of us. We are a small design firm and haven't had a lot of problems since launching OS X Server. Everyone's e-mail is functioning with the exception of catching Spam. The spam filter is set for 5 hits. The problem lies with two of our e-mail accounts:
With the first one, some Spam is being caught, tagged as * JUNK MAIL * and is being delivered to the intended recipient for further handling. Other spam is still coming through, however. The Internet headers of these e-mails show the unmarked spam with 1-3 hits, so it's not being caught.
With the second problem account, most of these e-mails are truly spam, but none of them are being caught and tagged as ** JUNK MAIL *. When the user downloads his e-mail, Entourage throws the e-mail into the Junk Mail folder automatically, while the non-junk mail comes through correctly. Somehow Entourage is handling the spam far better than Tiger Server. Why is this? How can Entourage pick out the spam and not OS X Server???
After reading the Apple documentation and a book entitled "Mac OS X Server Tiger 10.4: A Visual Quickpro Guide", we have also created spam accounts called JunkMail and NotJunkMail, but without any success. I've also looked at Spamtrainer from osx.topicdesk.com. From what I've been reading in these posts about spam, users are to tweak Spamassassin in Terminal. Well, we don't know Terminal and wouldn't even know where to start.
Is there anyone out there who can provide an easy-to-follow, step-by-step guide on how to cure the spam problem?

Answer 1

Hi Alex,
I had some difficulty last night with spamassassin and spamtrainer, too. I went back to the basics and ran spamtrainer as if I were setting it up for the first time. It learned spam and it learned ham overnight.
First, here is the statistical output of spamtrainer:
sunshine:~ administrator$ sudo -s
sunshine:~ root# spamtrainer -i
Checking if there is a startup item for 'learnjunkmail' or 'spamtrainer'
There IS NO plist for learnjunkmail
There IS NO cron job for learnjunkmail
There IS NO plist for spamtrainer
There IS a cron job for spamtrainer
sunshine:~ root#
Next, here is the Internet header of a properly detected piece of spam:
Return-Path: <[email protected]>
Received: from murder ([unix socket])
by sunshine.formatdesigncom.com (Cyrus v2.2.12-OS X 10.4.8) with LMTPA;
Mon, 20 Nov 2006 07:35:54 -0600
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
by sunshine.formatdesigncom.com (Postfix) with ESMTP id E89C52BA91F
for <[email protected]>; Mon, 20 Nov 2006 07:35:53 -0600 (CST)
Received: from sunshine.formatdesigncom.com ([127.0.0.1])
by localhost (sunshine.formatdesigncom.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 22862-10 for <[email protected]>;
Mon, 20 Nov 2006 07:35:37 -0600 (CST)
Received: from KHP059129160011.ppp-bb.dion.ne.jp (khp059129160011.ppp-bb.dion.ne.jp [59.129.160.11])
by sunshine.formatdesigncom.com (Postfix) with ESMTP id E2E832BA8FD
for <[email protected]>; Mon, 20 Nov 2006 07:35:33 -0600 (CST)
From: "IPTV" <[email protected]>
To: [email protected]
Subject: * JUNK MAIL *Refinance approved
Date: Mon, 20 Nov 2006 22:35:34 -0900
MIME-Version: 1.0
Content-Type: multipart/related;
boundary="----=NextPart_000_000501C70CF4.31AD1A10"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: AccM9DGtq6CUKvvNSuSWMn1l+i8lOA==
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2869
Message-Id: <[email protected]>
X-Virus-Scanned: by amavisd-new at formatdesigncom.com
X-Spam-Status: Yes, hits=5.537 tagged_above=-999 required=3 tests=BAD_CREDIT,
DATEIN_FUTURE_1224, HTML5060, HTML_MESSAGE, MIMEHTMLONLY
X-Spam-Level: ***
X-Spam-Flag: YES
Lastly, here is the Internet header of two pieces of spam that were not detected:
Return-Path: <[email protected]>
Received: from murder ([unix socket])
by sunshine.formatdesigncom.com (Cyrus v2.2.12-OS X 10.4.8) with LMTPA;
Mon, 20 Nov 2006 13:31:15 -0600
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
by sunshine.formatdesigncom.com (Postfix) with ESMTP id D0D9C2BB1D0
for <[email protected]>; Mon, 20 Nov 2006 13:31:14 -0600 (CST)
Received: from sunshine.formatdesigncom.com ([127.0.0.1])
by localhost (sunshine.formatdesigncom.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 02308-06 for <[email protected]>;
Mon, 20 Nov 2006 13:31:01 -0600 (CST)
Received: from roberto-wi65dvu.vtr.net (pc-32-69-86-200.cm.vtr.net [200.86.69.32])
by sunshine.formatdesigncom.com (Postfix) with ESMTP id 886132BB1AF
for <[email protected]>; Mon, 20 Nov 2006 13:31:01 -0600 (CST)
Received: from 72.232.65.107 (HELO mx.macrocraft.net)
by formatdesigncom.com with esmtp (-4Q/.6-, J3R4U4)
id 734X/H-'W(K;)-@,
for [email protected]; Tue, 21 Nov 2006 15:31:13 -0060
Date: Tue, 21 Nov 2006 15:31:13 -0060
From: "Edgar Becker" <[email protected]>
X-Mailer: The Bat! (v2.00.18) Business
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: [email protected]
Subject: Hey dude top brands available
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------677777EA1B2C25D"
X-Spam: Not detected
X-Virus-Scanned: by amavisd-new at formatdesigncom.com
X-Spam-Status: No, hits=2.646 tagged_above=-999 required=3
tests=DATEIN_FUTURE_1224, HTML4050, HTML_MESSAGE
X-Spam-Level: **
-- and --
Return-Path: <[email protected]>
Received: from murder ([unix socket])
by sunshine.formatdesigncom.com (Cyrus v2.2.12-OS X 10.4.8) with LMTPA;
Mon, 20 Nov 2006 15:01:08 -0600
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.0.1])
by sunshine.formatdesigncom.com (Postfix) with ESMTP id 55E412BB363
for <[email protected]>; Mon, 20 Nov 2006 15:01:08 -0600 (CST)
Received: from sunshine.formatdesigncom.com ([127.0.0.1])
by localhost (sunshine.formatdesigncom.com [127.0.0.1]) (amavisd-new, port 10024)
with ESMTP id 02163-10 for <[email protected]>;
Mon, 20 Nov 2006 15:00:54 -0600 (CST)
Received: from adaj145.neoplus.adsl.tpnet.pl (adaj145.neoplus.adsl.tpnet.pl [83.11.245.145])
by sunshine.formatdesigncom.com (Postfix) with ESMTP id E7CF42BB342
for <[email protected]>; Mon, 20 Nov 2006 15:00:53 -0600 (CST)
Received: from 213.52.233.154 (HELO wheelspincycles.com)
by formatdesigncom.com with esmtp (-6805V-5 )2F+G)
id 63',D/-WC*4./-(D
for [email protected]; Mon, 20 Nov 2006 21:00:56 -0060
Date: Mon, 20 Nov 2006 21:00:56 -0060
From: "Renee Engel" <[email protected]>
X-Mailer: The Bat! (v3.0.0.15) Educational
X-Priority: 3 (Normal)
Message-ID: <[email protected]>
To: [email protected]
Subject: This blend will help you get thinner
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="----------8401DAE16E9258B"
X-Spam: Not detected
X-Virus-Scanned: by amavisd-new at formatdesigncom.com
X-Spam-Status: No, hits=1.913 tagged_above=-999 required=3 tests=DIET_1,
HTML2030, HTML_MESSAGE
X-Spam-Level: *
What can you see where the problem lies?
John
PowerMac G4 Quicksilver   Mac OS X (10.4.8)