Thanks for all the replies.

>need a * here, don't you?
>> ^Subject: (ADV:)

Right!  Ben Boulanger and Karl Runge spotted this one.

I rewrote it this way:

:0 H                         # recognize junk mail by subject
* ^Subject: (ADV:)
Mail/junk-subject

With this change, the rules seem to be working.

>> :0 H                         # foreign language junk mail
>> * charset=.ks_c_5601-1987.
>
>Not sure about this one... what's the actual header line look like
>for this?  \. is needed if you want to match a ".", but.. I'm not
>familiar with the header you're going for..

Maybe a quarter of my spam is in some foreign language, and includes
a header line like this:

  Content-Type: text/html; charset="ks_c_5601-1987"

I've also added this rule

:0 B                         # some worm
* TVqQAAMAAAAEAAAA//8AALgAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA
Mail/junk-worm

...which caught four messages out of the last batch.  But that was
over half a megabyte of data!  I've since redirected it to /dev/null.

Thanks again!

          - Jim Van Zandt


*****************************************************************
To unsubscribe from this list, send mail to [EMAIL PROTECTED]
with the text 'unsubscribe gnhlug' in the message body.
*****************************************************************

Reply via email to