I am surprised that they are still coming through, I would think that should
have stopped it altogether. However add the following line to a junkmail
filter:

 

#CYRILLIC 

ANYWHERE         10           PCRE
(?i:(charset=.{0,2}koi8-[ur].{0,2})|(=\?koi8-[ur]\?b\?))

 

David

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell
Ard
Sent: Monday, April 21, 2008 7:55 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] blocking certain character sets

 

David

 

Thanks very much.

 

I added to the Declude.cfg    BANCHARSET    koi8-r

after I upgraded to 4.4.0

 

They are still coming thru.

Is there anything else that I need to do?

 

This is what I'm still getting

 

From: =?koi8-r?B?58XOzsHEycog98HTyczYxdfJ3g==?= < <mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED]>
Subject: X-IMail-SPAM  =?koi8-r?B?58/S0d3JxSDQ1dTF18vJIQ==?=

Thanks very much

Ferrell Ard

----- Original Message ----- 

From: David Barker <mailto:[EMAIL PROTECTED]>  

To: declude.junkmail@declude.com 

Sent: Tuesday, April 08, 2008 10:12 AM

Subject: RE: [Declude.JunkMail] Need help in setting up filter please

 

You can use the settings in Declude.cfg to stop certain character sets.

 

David B

 

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell
Ard
Sent: Tuesday, April 08, 2008 7:41 AM
To: Declude
Subject: [Declude.JunkMail] Need help in setting up filter please

 

We are getting a lot of email that has the code for character set

in the  "From"

 

The from always starts with =?koi8-r?

 

Does anyone have a filter that might help me eliminate these.

 

From: =?koi8-r?B?8dLP08zB1yD30d7F08zB18/Xyd4=?= <xqs

 

Thanks very much

Ferrell


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to