I am getting about 50 phishing e-mails a day. They are as obvious as can be, but becoming a pain in the ass to mark as junk. None of the sending e-mail addresses are real and they all wind up with DKIM=fail. I am not finding a solution I am happy with, having considered 1. a Thunderbird add-in that checks DKIM - it has mixed reviews, and I have some clients whose e-mail systems do not respond to DKIM verification 2. SpamAssassin - not quite sure what this does, and I really do not to add another layer 3. I have enabled - in Thunderbird's Account setting and elsewhere - junk filtering, but it shows no signs of being successfully trained despite having manually marked hundreds of phishing e-mails as Junk. 4. I do not see how to create a filter to catch these (I am assuming looking for DKIM=fail in "body" would fail as "body" refers to rendered e-mail contents, not the raw format.

Help would be appreciated. Jonathan