Hi,

I have a question of strategy.  Per David's message below, one can setup a
filter for a character set (such as Russian).  Alternative, one could use
BANCHARSET.  For a third alternative, one could use rules.ima within IMail
itself.  So what are the pros and cons of these three approaches?  Which
would likely have the least CPU impact?

Also, is BANCHARSET new?  I have a slightly older version of Declude and I
don't recall it (of course, I can't find a manual for my version either).

Thanks,

Ben

----- Original Message ----- 
From: "David Barker" <[EMAIL PROTECTED]>
To: <declude.junkmail@declude.com>
Sent: Tuesday, May 06, 2008 8:14 AM
Subject: RE: [Declude.JunkMail] blocking certain character sets


For these char sets it is much easier - use the following:

ANYWHERE 10 PCRE (?i:(iso-2022-jp|unicode-1-1-utf-7))

David B

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell
Ard
Sent: Tuesday, May 06, 2008 11:05 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] blocking certain character sets

David

Thank you for the filter for "koi8-r"

Would you be willing to code me one for "unicode-1-1-utf-7" &
"ISO-2022-JP"

(I deleted my example of unicode-1-1-utf-7)

Subject: =?ISO-2022-JP?B?GyRCQXc/LiUoJWkhPBsoSg==?=

Subject: X-IMail-SPAM DELIVERY FAILURE:
=?ISO-2022-JP?B?GyRCJWYhPCU2ITwbKEIgeG55cnd5ICh4bnlyd3lAc21iYy5jb20uaGs=?=
=?ISO-2022-JP?B?KSAbJEIkTxsoQiBEb21pbm8gGyRCJUclIyVsJS8lSCVqJEskTzgrGyhC?=
=?ISO-2022-JP?B?GyRCJEQkKyRqJF4kOyRzISMbKEI=?=
Thanks very much

Ferrell
----- Original Message ----- 
From: David Barker
To: declude.junkmail@declude.com
Sent: Monday, April 21, 2008 10:21 AM
Subject: RE: [Declude.JunkMail] blocking certain character sets

I am surprised that they are still coming through, I would think that should
have stopped it altogether. However add the following line to a junkmail
filter:

#CYRILLIC
ANYWHERE 10 PCRE
(?i:(charset=.{0,2}koi8-[ur].{0,2})|(=\?koi8-[ur]\?b\?))

David

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell
Ard
Sent: Monday, April 21, 2008 7:55 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] blocking certain character sets

David

Thanks very much.

I added to the Declude.cfg BANCHARSET koi8-r
after I upgraded to 4.4.0

They are still coming thru.
Is there anything else that I need to do?

This is what I'm still getting

From: =?koi8-r?B?58XOzsHEycog98HTyczYxdfJ3g==?= <[EMAIL PROTECTED]>
Subject: X-IMail-SPAM =?koi8-r?B?58/S0d3JxSDQ1dTF18vJIQ==?=
Thanks very much
Ferrell Ard
----- Original Message ----- 
From: David Barker
To: declude.junkmail@declude.com
Sent: Tuesday, April 08, 2008 10:12 AM
Subject: RE: [Declude.JunkMail] Need help in setting up filter please

You can use the settings in Declude.cfg to stop certain character sets.

David B

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell
Ard
Sent: Tuesday, April 08, 2008 7:41 AM
To: Declude
Subject: [Declude.JunkMail] Need help in setting up filter please

We are getting a lot of email that has the code for character set
in the "From"

The from always starts with =?koi8-r?

Does anyone have a filter that might help me eliminate these.

From: =?koi8-r?B?8dLP08zB1yD30d7F08zB18/Xyd4=?= <xqs

Thanks very much
Ferrell

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Reply via email to