>-----Original Message----- >From: Dave Sill [mailto:[EMAIL PROTECTED] >Sent: Monday, November 15, 2004 9:19 AM >To: users@spamassassin.apache.org >Subject: Spam with ``=?utf-8?q?'' in From/To/Subject > > >I'm getting lots of messages with UTF-8 encoding specified in the >header, e.g.: > >From: =?utf-8?q?Hubert Lfa?= <[EMAIL PROTECTED]> >To: =?utf-8?q?Eustace Oiw?= <[EMAIL PROTECTED]> >Subject: =?utf-8?q?Economize 65 % or mo?= > =?utf-8?q?re on our prescript?= > =?utf-8?q?ions?= > >I tried adding rules (SA 2.63) to match "utf-8" in these fields, but >they don't work--apparently SA is decoding them before applying the >rules. There's no "rawheader" tag, and "full" seems to only include >the body. > >Is there any way to match these messages? I could upgrade this system >to 3.0 if that would help.
I believe raw or rawbody will work here. Although it will slow the scans down using raw. I pretty much gave up on using this as a spam flag. So much more to tag on. I'd forget that one and move on. HTH --Chris
