Russian spam - header checks

[Julian Field]

You can do it without all the overhead of MCP, read about "SpamAssassin 
Rule Actions" in MailScanner.conf. This will be a **LOT** faster.

Kevin Howard wrote:
> We found the locales rules didn't help stop the Russian spam. 
>
> We're doing it successfully using MCP;
>
> header   RULE7    Subject:raw =~ /koi8/i
> describe RULE7    Banned Subject
> score    RULE7    6.7
>
> the ":raw" part is the key.
>  
> Or it can be done in the SA rules using this:
>  
> header   LOCAL_CYRILLIC           Subject:raw =~ /koi8/i
> describe LOCAL_CYRILLIC          Cyrillic fonts
> score    LOCAL_CYRILLIC           3 
>
> Someone else on here gave me this tip a week or so ago, I can't find the
> original message, but thanks whoever it was :)
>
> Kevin
>
>   

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.