I recommend not doing this. There are enough possibilities of
legitimate discussion and data being transmitted by E-mail that could
contain this string that you would be best off being more specific to
the encoding of the actual message. Target the header charset tag and
you should be good to go if you want to ban most all of it, but keep in
mind that legitimate E-mails from Cyrillic based systems can still send
messages written in English using this and other charactersets, so make
sure there is nothing legitimate at all coming from countries that would
use this before using it.
Matt
Kim W. Premuda wrote:
We use this in Declude to filter messages containing Cyrillic (Russian)
characters...
ANYWHERE 10 CONTAINS koi8-r
Kim W. Premuda
FastWave Internet Services, Inc.
858-487-1414
[EMAIL PROTECTED]
-----Original Message-----
From: Message Sniffer Community [mailto:[EMAIL PROTECTED] On Behalf
Of Rick Hogue
Sent: Wednesday, December 26, 2007 7:20 AM
To: Message Sniffer Community
Subject: [sniffer] Excessive amounts of Foreign language spam
I have been getting a large amount of foreign language email appears to be
Russian but not sure as I do not speak it. What is being done about this
kind of spam?
I am on Imail 8.21 and I am not using the latest beta of Sniffer. I do not
use other methods other than a couple from my Declude engine including my
own blacklist, but there are so many different IP addresses on this it is
very hard to keep up with. Help!
Simplified Association Management Systems
Rick Hogue
P.O. Box 18304
Louisville, KY 40261
1-502-459-3100 office
http://www.samprogram.com
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail scanned for viruses by Declude Virus]
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
#############################################################
This message is sent to you because you are subscribed to
the mailing list <[email protected]>.
To unsubscribe, E-mail to: <[EMAIL PROTECTED]>
To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]>
To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]>
Send administrative queries to <[EMAIL PROTECTED]>
