Apache SpamAssassin configure from start

[20GT]

I've already been here and thought I configured correctly but it is not marking any spam at all.

I'm looking to stop a particular spammer email. Its always similar but because of the way it is written, I can not stop it with account level filtering. I have posted the headers as a screen shot maybe someone can help me config it correctly

 

[cPanelMichael]

Hello

Could you provide the headers of the SPAM message that makes it through, and it's entry in /var/log/exim_mainlog? For instance, what's the SPAM score?

Thank you.

 

[20GT]

(Sorry i did not get an alert you had answered)
Hmm i do not see a spam score. the earlier pics shows my config.
does that mean I'm not installed correctly?

i edited my email address in the headers

i include a new pic with a bug/error (ript>) showing just above to the left of words SpamAssassin Configuration
could this be why?

 

[20GT]

my host says there is nothing wrong with SpamAssassin it is working perfectly.
i asked him why does it not add its scan info to the header such as status, score, version...
he said he would ask help from cpanel forum lol maybe he posted here.
Anyway the spamassassin is the latest version and acts like it is working,
as in the configure pages look ok. says enabled, no auto delete

what is going on when it is is not writing its scan in the headers?

 

[20GT]

Yes, finally here is the full header. I replaced my domain with <MyDomain> to protect my email.

Return-path: <WhosWho-temp1=<MyDomain>[email protected]>
Envelope-to: [email][email protected]<MyDomain>.us[/email]
Delivery-date: Wed, 23 Jul 2014 12:05:36 -0500
Received: from shop.greatnames.eu ([216.231.136.13]:52524)
	by host113.kvchosting.com with esmtp (Exim 4.80.1)
	(envelope-from <WhosWho-temp1=<MyDomain>[email protected]>)
	id 1X9zym-002E7d-23
	for [email][email protected]<MyDomain>.us[/email]; Wed, 23 Jul 2014 12:05:35 -0500
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=dkim; d=greatnames.eu;
 h=Mime-Version:Content-Type:Message-Id:Date:From:To:Subject; [email protected];
 bh=ixCpLkDwjBWHeFm0OPDHYw74yZY=;
 b=UcOugcwTgXHfI+LGOL+IGN9HfScwmJYGlLT180dKUTLtHSGNSyObJrt9NUqs6Kx4rYAhTIBRvkBY
   NSDUwgiZH1ETvQT3gRclEvGphn3u5eDqN+hJCONxSgzD1ccBKfYqbMRvB3VNJD6RVTzzpHRow8IB
   63DKoQjJzRzQSBjKLlE=
Received: by shop.greatnames.eu id hpvlku0001gp for <[email protected]<MyDomain>.us>; Wed, 23 Jul 2014 17:02:42 +0000 (envelope-from <WhosWho-temp1=<MyDomain>[email protected]>)
Mime-Version: 1.0
Content-Type: multipart/alternative; boundary="b18c-72bd-7de2-4ae9-6fa8-3ae9-3c8a-a0db"
Message-Id: <[email protected]>
Date: Wed, 23 Jul 2014 17:02:42 +0000
From: Whos Who<[email protected]>
To: [email][email protected]<MyDomain>.us[/email]
Subject: =?utf-8?B?RldEOiBZb3UncmUgYSAyMDE0IENhbmRpZGF0ZSBmb3IgV2hvJ3MgV2hv?=
X-Spam-Status: No, score=-2.0
X-Spam-Score: -19
X-Spam-Bar: --
X-Ham-Report: Spam detection software, running on the system "host113.kvchosting.com", has
 identified this incoming email as possible spam.  The original message
 has been attached to this so you can view it (if it isn't spam) or label
 similar future email.  If you have any questions, see
 root\@localhost for details.
 
 
 Content analysis details:   (-2.0 points, 5.0 required)
 
  pts rule name              description
 ---- ---------------------- --------------------------------------------------
 -0.0 RP_MATCHES_RCVD        Envelope sender domain matches handover relay domain
 -1.9 BAYES_00               BODY: Bayes spam probability is 0 to 1%
                             [score: 0.0000]
  0.0 HTML_MESSAGE           BODY: HTML included in message
 -0.1 DKIM_VALID_AU          Message has a valid DKIM or DK signature from author's
                             domain
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not necessarily valid
X-Spam-Flag: NO

 

[cPanelMichael]

I suggest implementing a new account level filter that targets contents of the message body to help stop these emails.

Thank you.

 

[20GT]

Nothin I do with the spam score catches this email
see pic

Match expanded arguments:
  Subject = -19
  Pattern = ^\d+$
Match expanded arguments:
  Subject = No, score=-2.0
  Pattern = ^\d+$
Return-path taken from "Return-path:" header line
Return-path = [email protected]
Sender      = [email][email protected][/email]
Recipient   = [email][email protected][/email]
Testing Exim filter file "/etc/vfilters/me123.us"

Filtering did not set up a significant delivery.
Normal delivery wil

 

[cPanelMichael]

You may need to contact your web hosting provider for assistance if you feel that SpamAssassin is not behaving as it should. It's not something that you can investigate without root access to the system.

Thank you.