Russian spam - header checks

Julian Field MailScanner at
Sat Sep 20 14:32:29 IST 2008

You can do it without all the overhead of MCP, read about "SpamAssassin 
Rule Actions" in MailScanner.conf. This will be a **LOT** faster.

Kevin Howard wrote:
> We found the locales rules didn't help stop the Russian spam. 
> We're doing it successfully using MCP;
> header   RULE7    Subject:raw =~ /koi8/i
> describe RULE7    Banned Subject
> score    RULE7    6.7
> the ":raw" part is the key.
> Or it can be done in the SA rules using this:
> header   LOCAL_CYRILLIC           Subject:raw =~ /koi8/i
> describe LOCAL_CYRILLIC          Cyrillic fonts
> score    LOCAL_CYRILLIC           3 
> Someone else on here gave me this tip a week or so ago, I can't find the
> original message, but thanks whoever it was :)
> Kevin


Julian Field MEng CITP CEng
Buy the MailScanner book at

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key:

This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

More information about the MailScanner mailing list