I see a lot of spams coming through hiding the subject masked using
ISO-8859, like this

Subject: =?ISO-8859-1?b?SGFsZiBQcmljZWQgU2lsZGVuYWZpbCBDaXRyYXRl?=

which translates back to a subject of:

Half Priced Sildenafil Citrate

obviously I can look for "Half Priced Sildenafil Citrate" in the subject,
but I want to write a rule for ISO-8859 in the subject.  I have this rule,
but it doesn't appear to hit.

header MK_CHARSET_IN_SUBJECT Subject =~ /ISO\-8859/i

Does SA translate that before hand and that's why it's not hitting?  It's
obviously a big thing for spammers, since a search on groups.google.com for
ISO-8859 turns up tons of results from news.admin.net-abuse.sightings.

Mike


-------------------------------------------------------
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to