Thanks. I'll give it a try
At 12:42 PM 9/7/2004, you wrote:
----- Original Message ----- From: "Chris Ulrich" <[EMAIL PROTECTED]>
> I've been seeing a lot of emails with a randomly generated "from" at > hotmail with subjects like: > > �y�L�w�R�z�b�?�?o�?A�C�C�?��OA > ��~QQ���?kf���r!�|�U��I�I > @[EMAIL PROTECTED] > �?�?C�]���H���[ > �������W�?�A�u�Q�W�o > > Are there any "rules" out there to help pick up emails such as these?
The NONENGLISH test possibly, which looks at the subject field. I also use the following in my subject filter:
SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS � SUBJECT 05 CONTAINS ^ SUBJECT 05 CONTAINS ` SUBJECT 05 CONTAINS ~ SUBJECT 05 CONTAINS | SUBJECT 03 CONTAINS $ SUBJECT 03 CONTAINS + SUBJECT 03 CONTAINS % SUBJECT 03 CONTAINS ; SUBJECT 03 CONTAINS >> SUBJECT 03 CONTAINS =?
which would have triggered on a few of the characters you listed. Caution in usage of these filter entries: since a lot of these characters are used in legitimate foriegn language e-mails, and if you have users that regularly communicate in languages that uses these characters, you may create a lot of false positives for yourself - so trim and adjust weights to fit your particular needs.
Bill
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
