Hi, IF your'e not want receiving mail containing russian characters, you can filter the charset from the *subject*. If somebody wants to write a subject in cyrillic letters, the charset is also defined in the subject. Solution for native IMail (Rules.ima): S~(gb2312?|iso-2022-jp|koi8-r?):DeathToAllSpammers
Solution for mxguard (Blacklist.subject) contains:gb2312? contains:iso-2022-jp contains:koi8-r? I did not test the first solution, but it should work. This filters does not only filter the russian charset, it also filters chinese and japanese charsets If you want to go for the body, you also can trigger on the charset. Usually those spam mails have an image attached. For this reason, we're looking also for an image: ---- BEGIN Section Spam - Image only traps - Charset and image ---------------- B~charset=3d\s(euc-kr|ks_c_5601-1987|koi8-r)">!AND!B~(content-type\: image):DeathToAllSpammers B~charset=3d(euc-kr|ks_c_5601-1987|koi8-r)">!AND!B~(content-type\: image):DeathToAllSpammers B~charset="(euc-kr|ks_c_5601-1987|koi8-r)">!AND!B~(content-type\: image):DeathToAllSpammers B~charset=3d\swindows-(1251|1253|1254|1256|1257)">!AND!B~(content-type\: image):DeathToAllSpammers B~charset=3dwindows-(1251|1253|1254|1256|1257)">!AND!B~(content-type\: image):DeathToAllSpammers B~charset=3dwindows-1=/s(251|253|254|256|257)">!AND!B~(content-type\: image):DeathToAllSpammers B~charset=3dwindows-12=/s(51|53|54|56|57)">!AND!B~(content-type\: image):DeathToAllSpammers B~charset="windows-(1251|1253|1254|1256|1257)">!AND!B~(content-type\: image):DeathToAllSpammers B~charset="windows-1=/s(251|253|254|256|257)">!AND!B~(content-type\: image):DeathToAllSpammers B~charset="windows-12=/s(51|53|54|56|57)">!AND!B~(content-type\: image):DeathToAllSpammers ---- END Section Spam - Image only traps - Charset and image ---------------- Mit freundlichen Grüssen ---------------------------------------------------------------------------- ------- Merlin Consulting | Martin Schaible Bahnhofstrasse 27 | CH-8702 Zollikon | Switzerland Tel.: +41 44 391 30 00 | Fax: +41 44 391 32 49 Mail: [EMAIL PROTECTED] | www.merlinconsulting.ch Support: support.merlinconsulting.ch GPS: N47 20.235 E8 34.226 ---------------------------------------------------------------------------- ------- News - Unsere Produkte: .:. Ipswitch Premium Partner .:. mxGuard/InvURIBL/MessageSniffer Antispam Lösung für IMail .:. Brainware Columbus Software Management .:. NOD32 Antivirus System .:. NewAtlanta BlueDragon .:. Kiwi Syslog Monitor .:. Paessler Network Monitoring .:. SmarterTools ---------------------------------------------------------------------------- ------- _____ Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Stephen Guluk Gesendet: Mittwoch, 14. Februar 2007 03:22 An: [email protected] Betreff: [IMail Forum] How to block Russian (Cyrillic characters) spam Hello, These day we get 50% of our spam in Cyrllic characters. I tried to add a content spam block based on some of the characters but found iMail 8.22 did not understand the characters. Is there a way to enable iMail to better understand these characters so I can block them? We do not have any Russian clients but most of these spams do not use their country of origen but rather regular .com domains. Any ideas on how to block them? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
