Hello Obantec,
Sunday, August 1, 2004, 12:00:28 PM, you wrote:
OS I run SA2.6.3 with sendmail .
OS Seem to get quite a few Russian?? emails thru with
OS Subject:
OS =?Windows-1251?B?z/Du9OXx8eju7eDr/O3g/yDw5err4OzgIOTr/yDC4PEu?=
OS Subject is always ?Windows-1251?
OS followed by the random
Hello.
From: Obantec Support [EMAIL PROTECTED]
Subject: how to block ?1251 subject email's
Date: Sun, 1 Aug 2004 20:00:28 +0100
Hi
I run SA2.6.3 with sendmail .
Seem to get quite a few Russian?? emails thru with
Subject: =?Windows-1251?B?z/Du9OXx8eju7eDr/O3g/yDw5err4OzgIOTr/yDC4PEu
In SA 2.63, header matching is always decoded strings.
If you want to match undecoded header string, you have to use
full matching.
And, full matching can't use regular expression '^' (string start)
and '$' (string end).
So:
full WIN1251SUBJECT /[\r\n]Subject: =\?Windows-1251\?B\?/
score
Hello.
From: D.J. Fan [EMAIL PROTECTED]
Subject: Re: how to block ?1251 subject email's
Date: Sun, 01 Aug 2004 19:57:51 -0600
In SA 2.63, header matching is always decoded strings.
If you want to match undecoded header string, you have to use
full matching.
And, full matching can't use
From: D.J. Fan [EMAIL PROTECTED]
Subject: Re: how to block ?1251 subject email's
Date: Sun, 01 Aug 2004 19:57:51 -0600
In SA 2.63, header matching is always decoded strings.
If you want to match undecoded header string, you have to use
full matching.
And, full matching can't use regular
Hi
I run SA2.6.3 with sendmail .
Seem to get quite a few Russian?? emails thru with
Subject: =?Windows-1251?B?z/Du9OXx8eju7eDr/O3g/yDw5err4OzgIOTr/yDC4PEu?=
Subject is always ?Windows-1251?
followed by the random string/encoded text.
How can i stop these?
Mark
I run SA2.6.3 with sendmail .
Seem to get quite a few Russian?? emails thru with
Subject: =?Windows-1251?B?z/Du9OXx8eju7eDr/O3g/yDw5err4OzgIOTr/yDC4PEu?=
Subject is always ?Windows-1251?
followed by the random string/encoded text.
How can i stop these?
Mark
You might try:
header RUSSIANTHING
You might try:
header RUSSIANTHING Subject =~ /Windows-1251/
score RUSSIANTHING 8.000
in local.cf (or user_prefs)
SpamAssassin does not stop anything, but this should raise the score.
You may have to stop and start stuff afterwards.
Oh yeah, always run
spamassassin --lint
when you add/change a
