Russian spam - header checks
kevin.howard at jobmedia.com.au
Sat Sep 20 14:01:36 IST 2008
We found the locales rules didn't help stop the Russian spam.
We're doing it successfully using MCP;
header RULE7 Subject:raw =~ /koi8/i
describe RULE7 Banned Subject
score RULE7 6.7
the ":raw" part is the key.
Or it can be done in the SA rules using this:
header LOCAL_CYRILLIC Subject:raw =~ /koi8/i
describe LOCAL_CYRILLIC Cyrillic fonts
score LOCAL_CYRILLIC 3
Someone else on here gave me this tip a week or so ago, I can't find the
original message, but thanks whoever it was :)
More information about the MailScanner