Ferrell,
It would be interesting to get a copy of the email line that the filter did not work on - that way we can look at adjusting the expression David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Friday, May 16, 2008 11:34 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] blocking certain character sets When I added to my global.cfg BANCHARSET koi8-r it did not do anything ( emails continued to come in with this character set) Putting it into a Filter DID work. ANYWHERE 30 PCRE (?i:(charset=.{0,2}koi8-[ur].{0,2})|(=\?koi8-[ur]\?b\?)) (most of the time - but not all the time). The advantage - for me - for the Filter is that it applies to all 400 Post Offices that we host on the server. Whereas the rules.ima would have to be set up for each mailbox. Ferrell ----- Original Message ----- From: "Imail Admin" < <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]> To: < <mailto:declude.junkmail@declude.com> declude.junkmail@declude.com> Sent: Thursday, May 15, 2008 3:56 PM Subject: Re: [Declude.JunkMail] blocking certain character sets > Hi, > > I have a question of strategy. Per David's message below, one can setup a > filter for a character set (such as Russian). Alternative, one could use > BANCHARSET. For a third alternative, one could use rules.ima within IMail > itself. So what are the pros and cons of these three approaches? Which > would likely have the least CPU impact? > > Also, is BANCHARSET new? I have a slightly older version of Declude and I > don't recall it (of course, I can't find a manual for my version either). > > Thanks, > > Ben > > ----- Original Message ----- > From: "David Barker" < <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]> > To: < <mailto:declude.junkmail@declude.com> declude.junkmail@declude.com> > Sent: Tuesday, May 06, 2008 8:14 AM > Subject: RE: [Declude.JunkMail] blocking certain character sets > > > For these char sets it is much easier - use the following: > > ANYWHERE 10 PCRE (?i:(iso-2022-jp|unicode-1-1-utf-7)) > > David B > > From: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell > Ard > Sent: Tuesday, May 06, 2008 11:05 AM > To: <mailto:declude.junkmail@declude.com> declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] blocking certain character sets > > David > > Thank you for the filter for "koi8-r" > > Would you be willing to code me one for "unicode-1-1-utf-7" & > "ISO-2022-JP" > > (I deleted my example of unicode-1-1-utf-7) > > Subject: =?ISO-2022-JP?B?GyRCQXc/LiUoJWkhPBsoSg==?= > > Subject: X-IMail-SPAM DELIVERY FAILURE: > =?ISO-2022-JP?B?GyRCJWYhPCU2ITwbKEIgeG55cnd5ICh4bnlyd3lAc21iYy5jb20uaGs=?= > =?ISO-2022-JP?B?KSAbJEIkTxsoQiBEb21pbm8gGyRCJUclIyVsJS8lSCVqJEskTzgrGyhC?= > =?ISO-2022-JP?B?GyRCJEQkKyRqJF4kOyRzISMbKEI=?= > Thanks very much > > Ferrell > ----- Original Message ----- > From: David Barker > To: <mailto:declude.junkmail@declude.com> declude.junkmail@declude.com > Sent: Monday, April 21, 2008 10:21 AM > Subject: RE: [Declude.JunkMail] blocking certain character sets > > I am surprised that they are still coming through, I would think that should > have stopped it altogether. However add the following line to a junkmail > filter: > > #CYRILLIC > ANYWHERE 10 PCRE > (?i:(charset=.{0,2}koi8-[ur].{0,2})|(=\?koi8-[ur]\?b\?)) > > David > > From: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell > Ard > Sent: Monday, April 21, 2008 7:55 AM > To: <mailto:declude.junkmail@declude.com> declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] blocking certain character sets > > David > > Thanks very much. > > I added to the Declude.cfg BANCHARSET koi8-r > after I upgraded to 4.4.0 > > They are still coming thru. > Is there anything else that I need to do? > > This is what I'm still getting > > From: =?koi8-r?B?58XOzsHEycog98HTyczYxdfJ3g==?= < <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]> > Subject: X-IMail-SPAM =?koi8-r?B?58/S0d3JxSDQ1dTF18vJIQ==?= > Thanks very much > Ferrell Ard > ----- Original Message ----- > From: David Barker > To: <mailto:declude.junkmail@declude.com> declude.junkmail@declude.com > Sent: Tuesday, April 08, 2008 10:12 AM > Subject: RE: [Declude.JunkMail] Need help in setting up filter please > > You can use the settings in Declude.cfg to stop certain character sets. > > David B > > From: <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell > Ard > Sent: Tuesday, April 08, 2008 7:41 AM > To: Declude > Subject: [Declude.JunkMail] Need help in setting up filter please > > We are getting a lot of email that has the code for character set > in the "From" > > The from always starts with =?koi8-r? > > Does anyone have a filter that might help me eliminate these. > > From: =?koi8-r?B?8dLP08zB1yD30d7F08zB18/Xyd4=?= <xqs > > Thanks very much > Ferrell > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at <http://www.mail-archive.com> http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at <http://www.mail-archive.com> http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at <http://www.mail-archive.com> http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at <http://www.mail-archive.com> http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at <http://www.mail-archive.com> http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at <http://www.mail-archive.com> http://www.mail-archive.com. > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at <http://www.mail-archive.com> http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
