<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META http-equiv=Content-Type content="text/html; charset=utf-8">
<META content="MSHTML 6.00.6000.16705" name=GENERATOR></HEAD>
<BODY>
<DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2>Hi,</FONT></SPAN></DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial size=2>We're receiving a
lot of spam comprising Cyrillic characters in the subject line, example Subject:
=?koi8-r?B?8sXLzGHNwSDXIOnObcXSzsVtxSA=?=</FONT></SPAN></DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial size=2>and a message body
which is 100% Cyrillic, some messages are plain text and some HTML.
</FONT></SPAN></DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial size=2>The plains
messages are using;</FONT></SPAN></DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial size=2>MIME-Version:
1.0<BR>Content-Type:
text/plain;<BR> charset="koi8-r"<BR>Content-Transfer-Encoding:
8bit</FONT></SPAN></DIV>
<DIV><FONT face=Arial size=2></FONT><SPAN
class=625345413-11092008><BR> </DIV></SPAN>
<DIV><SPAN class=625345413-11092008><FONT face=Arial size=2>Spamassassin doesn't
seem to be able to detect these reliably despite us training bayes on these
messages and utilising language filters. So we're trying to use MCP to detect
them but have had no success whatsoever to date.</FONT></SPAN></DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=625345413-11092008><SPAN class=359102411-15092008><FONT
face=Arial size=2>I have tried making a rule to detect " ?koi8 " in the subject
line but Mailscanner only seems to look at visible
characters.</FONT></SPAN></SPAN></DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial><FONT size=2>Any
ideas? <SPAN class=359102411-15092008>my </SPAN>preference is to stop
them with MCP if possible<SPAN
class=359102411-15092008>.</SPAN></FONT></FONT></SPAN></DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2>Thanks,</FONT></SPAN></DIV>
<DIV><SPAN class=625345413-11092008><FONT face=Arial
size=2>Kevin</FONT></SPAN></DIV></DIV></BODY></HTML>