Need advice for filtering out a particular kind of spam.

[jols]

Lately, our hosted customers have been hammered by (male sex) drug spam. The message only contains a single image. Most of them advertise 7766.org

The messages are obviously coming from all over, broken/hacked PCs servers, proxies, you name it. The Spam Assassin score never seems to get above 3 or so.

Is there any way we can battle this? We are getting plenty of complaints.

[PlatinumServerM]

Try using RBL filtering, this stops quite a bit of spam and is pretty accurate.

[jols]

Try using RBL filtering, this stops quite a bit of spam and is pretty accurate.

We do use a scoring method based on several things including current listings of the incoming email server IP in various RBLs. Regretfully this does not work when the spam is being sent from zombie/hacked PCs from many, many, many parts of the world.