Re: [sa] Re: Bogus Dollar Amounts

2010-02-25 Thread Charles Gregory

On Thu, 25 Feb 2010, John Hardin wrote:

 i still see lot of junk mail coming with different charecters, i do not
 even read them clearly
 how can i stop those kind of emails

Reject languages you can't read at SMTP time?


I've been noticing more 'foreign language' spams that do not use
a 'foreign' character set and therefore do not trigger the 'faraway' 
rules I don't suppose anyone has developed a generic rule that would 
spot 'foreign language usage in non-foreign charset'?


- C


Re: [sa] Re: Bogus Dollar Amounts

2010-02-25 Thread John Wilcock

Le 25/02/2010 17:06, Charles Gregory a écrit :

On Thu, 25 Feb 2010, John Hardin wrote:

 i still see lot of junk mail coming with different charecters, i do not
 even read them clearly
 how can i stop those kind of emails

Reject languages you can't read at SMTP time?


I've been noticing more 'foreign language' spams that do not use
a 'foreign' character set and therefore do not trigger the 'faraway'
rules I don't suppose anyone has developed a generic rule that would
spot 'foreign language usage in non-foreign charset'?


Perhaps more useful - and less prone to FPs in internationally-oriented 
organisations - a rule that spots *mismatched* charsets, e.g. a Cyrillic 
charset from a Chinese IP, a Korean charset via an Italian freemail 
host, and so on.


I guess such a rule would be possible as a meta, though an eval function 
might be more effective and allow more combinations.


--
John