I wrote:
>> Thanks to Galeon (View menu, Encoding option, Korean option, EUC-KR
>> option)
"Derrick 'dman' Hudson" <[EMAIL PROTECTED]> writes:
> Why didn't galeon realize that on its own?
> (I saw you put the tag in)
I don't know. The most likely cause is that I don't have the tag
right or I need to add Korean under preferences (not planned).
> Cool. Do those newly tagged spams have 8-bit headers or properly
> RFC2047 encoded headers?
All 8-bit headers except for one quoted-printable. SA decodes
MIME-encoded Subject: headers so it caught that one too. Here's the
new rule.
------- start of cut text --------------
# Korean UCE Subject: lines are usually 8-bit, but are occasionally encoded
# with quoted-printable or base64.
#
# \xbc\xba\xc0\xce means "adult"
# \xb1\xa4\xb0\xed means "advertisement"
# \xc1\xa4\xba\xb8 means "information"
# \xc8\xab\xba\xb8 means "publicity"
#
# Each two byte sequence is one Korean letter; the spaces and periods are
# sometimes used to obscure the words. \xb1\xa4\xb0\xed is the most common
# tag and is sometimes very obscured so we look harder.
#
header KOREAN_UCE_SUBJECT Subject =~ /[({[<][. ]*(?:\xbc\xba[. ]*\xc0\xce[.
]*)?(?:\xb1\xa4(?:[. ]*|[\x00-\x7f]{0,3})\xb0\xed|\xc1\xa4[. ]*\xba\xb8|\xc8\xab[.
]*\xba\xb8)[. ]*[)}\]>]/
describe KOREAN_UCE_SUBJECT Subject: contains Korean unsolicited email tag
------- end ----------------------------
Dan
_______________________________________________________________
Sponsored by:
ThinkGeek at http://www.ThinkGeek.com/
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
