Greetings


We're seeing lots of the "=?iso" in the header messages getting through. We have this rule in place:
header SUBJECT_ENCODED_MY_TEST Subject:raw =~ /=\?.*\?=/i
describe SUBJECT_ENCODED_MY_TEST Subject begins with =?
score SUBJECT_ENCODED_MY_TEST 5.0


When I try to send a test message with the full header ( =?iso-8859-1?B?U2hpcHBlZCB0byB5b3UgbmV4dCBkYXkgdG8geW91ciBkb29y?=) that's in some of the spams, it translates to "How are you doing..." when the messages is received, so I'm guessing that's why it's passing through.

X-Spam-Score: 1.8 BAYES_30,HTML_60_70,HTML_IMAGE_ONLY_02,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,MSGID_GOOD_EXCHANGE,OACYS_CONS_6,RM_rb_ANCHOR,RM_rb_BODY,RM_rb_HTML,RM_sl_Parens,SUBJECT_ENCODED_MY_TEST

What am I missing?

Thanks...

Paul



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to