efa-project.org

There are thousands of fake invoices hitting our server every day. I noticed nearly 99% of them are sent from IPs with SPF Fail. Is it possible to reconfigure SpamAssasin to give bigger score (and therefore either totally block as spam or mark and forward to user as "possibly spam"?) to all received emails with SPF Fail?
Thanks!

I noticed it always gives a score of 0.67 to all SPF SOFT Fail emails. Can this be increased, say to 4 or 5?

The wiki (https://efa-project.org/wiki/HowTos) has some links back to the forums for these kinds of things.

In your case, you should look at these links
viewtopic.php?f=14&t=814&p=2612&hilit=local.cf#p2612
viewtopic.php?f=13&t=827&p=3252#p2546

Just be aware that a lot of legimate mail may also have spf failures as well.

Monitor your changes closely to be sure you're happy with the result.