Russian spam - header checks

[Kevin Howard]

We found the locales rules didn't help stop the Russian spam. 

We're doing it successfully using MCP;

header   RULE7    Subject:raw =~ /koi8/i
describe RULE7    Banned Subject
score    RULE7    6.7

the ":raw" part is the key.
 
Or it can be done in the SA rules using this:
 
header   LOCAL_CYRILLIC           Subject:raw =~ /koi8/i
describe LOCAL_CYRILLIC          Cyrillic fonts
score    LOCAL_CYRILLIC           3 

Someone else on here gave me this tip a week or so ago, I can't find the
original message, but thanks whoever it was :)

Kevin