Mark: I get a fair amout of this also. Mine seems to come mostly from broadband lines (rr, verizon, charter, comcast, attbi) so I ip block at the /24 level (class c). Of course it's after the fact. But should block some future spam.
I also have a subject filter to add weight for non western char sets. Seems to help catch some. Mike ----- Original Message ----- From: "mark_smith" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, September 17, 2003 9:12 AM Subject: [Declude.JunkMail] Character set/unicode testing? > Sending this again. > Any ideas? > > > Is there any way to filter based on character set, code page, etc? > > I'm getting swamped with tons of Cyrillic spam lately and it's > > passing my RBL's recently. > > > > I can't filter by code word or phrase and the MAILFROM field > > is random. > > > > Any thoughts? > > > > Here's a sample > > > > -0- > > > > ETOpJa8Lj9twl9fIQ > > Продам или сдам помещение (офис, мед. центр и.т.д.) м. > > Красногвардейская. Ореховый бульвар, д.59, (7-10 мин. > > пешком). 352,8 кв. м. 1-й этаж ж/д (нежилой фонд), 2 отд. > > входа с улицы , большие окна, отдельный блок, рабочее > > состояние, любое количество телефонов, ПА, удобный подъезд и > > парковка. Можно делить помещение на 2 части. > > Продажа 1100$ кв. м, возможна аренда: 200$ кв. м. /год (с торгом). > > Татьяна Александровна: rcl506TD940837 > > TIGQEcqiUgIFpRrJ > > > Nf≈╠ф²Г╒╩╝К╠╪yиuЕ╝К╤зЪ uГ╧в╒d┼аj)jg╝┴┘Юr[x⌡░ф√f√)√+N▀╡Фr╦z;╤гu╘≥╗╤┬j)╝Вr[yйjwй≈·к╠йmЮr[x⌡░ф∙8j╥┼Вq╘ yЗ²ж├шЪЭбf∙╙├+ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
