On 7/27/2023 12:08 PM, Ken D'Ambrosio wrote:
Hey, all. I've recently started getting spam that's really hard to
deal with, and I'm open to suggestions as to how to approach it.
Superficially,
I'm not sure why the OP's rule didn't match the target message, but it
is NOT because of the Base64 encoding of parts with the 'text' primary
MIME type. If I had to guess, I'd look for invisible characters hidden
in the text (e.g. Unicode "zero width non-joiner" marks and the like)
that break the pattern and for lookalike non-ASCII characters (often
Cyrillic or Greek) in the target string.
Sweet! The assistance of those who actually felt like assisting,
instead of simply critiquing, is much appreciated. I see some
assumptions I made were wrong (e.g., decoding apparently isn't a
problem), and I'm guessing it is probably something stupid like Unicode.
I'll also make sure I match those other rules; my rules file, I now
realize, is ancient, and likely badly needs to be made more current.
Much appreciated!
-Ken