Apparently, this means "Generic Viagra" as revealed in the Declude Log file:
 
 =?iso-8859-1?B?R2VuZXJpYyBWaWFncmE=?=
 
What can you do about obfuscated subjects using ISO character sets? I was thinking of filtering them based on partial string, like this:
 
SUBJECT 30 CONTAINS =?iso-8859
 
Is it safe to filter this? In other words, would a legitimate or casual sender ever use such a method to display a subject? Is there a list of ISO charcter sets that can be filtered?
 
Thanks!
 
Mike

Reply via email to