I am surprised that they are still coming through, I would think that should
have stopped it altogether. However add the following line to a junkmail
filter:
#CYRILLIC
ANYWHERE 10 PCRE
(?i:(charset=.{0,2}koi8-[ur].{0,2})|(=\?koi8-[ur]\?b\?))
David
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell
Ard
Sent: Monday, April 21, 2008 7:55 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] blocking certain character sets
David
Thanks very much.
I added to the Declude.cfg BANCHARSET koi8-r
after I upgraded to 4.4.0
They are still coming thru.
Is there anything else that I need to do?
This is what I'm still getting
From: =?koi8-r?B?58XOzsHEycog98HTyczYxdfJ3g==?= < <mailto:[EMAIL PROTECTED]>
[EMAIL PROTECTED]>
Subject: X-IMail-SPAM =?koi8-r?B?58/S0d3JxSDQ1dTF18vJIQ==?=
Thanks very much
Ferrell Ard
----- Original Message -----
From: David Barker <mailto:[EMAIL PROTECTED]>
To: [email protected]
Sent: Tuesday, April 08, 2008 10:12 AM
Subject: RE: [Declude.JunkMail] Need help in setting up filter please
You can use the settings in Declude.cfg to stop certain character sets.
David B
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell
Ard
Sent: Tuesday, April 08, 2008 7:41 AM
To: Declude
Subject: [Declude.JunkMail] Need help in setting up filter please
We are getting a lot of email that has the code for character set
in the "From"
The from always starts with =?koi8-r?
Does anyone have a filter that might help me eliminate these.
From: =?koi8-r?B?8dLP08zB1yD30d7F08zB18/Xyd4=?= <xqs
Thanks very much
Ferrell
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
