> I'm getting hit with a quantity of "lost money under the bed - give me
> your account to transfer to" type messages. As they're coming from
> valid servers (like Yahoo) the only alarm raised is Bayesian. Does
> anybody have further checks to block this junk? Or do you increase
> the Bayesian score to trigger the penalty?
Are you positively, absolutely SURE those messages come out from
african boxes ? Also, do they hit your box coming from african IPs ?
If so, either use the ASSP "country blocking" feature or add one of the
ccTLD lists offered by http://countries.nerd.dk/ to cut off all emails
coming from a given country - it's not a good idea imHo, building
high walls around you, historically didn't lead to good things; but it's
all up to you