On Thu, 14 Feb 2008, Per Jessen wrote:

> [EMAIL PROTECTED] wrote:
>
> >
> > We're suddenly getting a ton of spam with koi8-r encoding...I tried to
> > do a custom rule for it like this:
> >
> > header SUBJ_RUSS_CHAR           Subject =~/koi8-r/i
> > describe SUBJ_RUSS_CHAR         has Russian char encoding
> > score SUBJ_RUSS_CHAR            3.5
> >
> > The short headers for these spams look like this:
> >
> > Subject: [koi8-r] ??? ????
> >
> > The "raw" Subject header, like this:
> >
> > Subject: =?koi8-r?B?9/zkINDSxcTQ0snR1MnKINPFzcnOwdI=?=
> >
> > I would think the rule would catch it either way...what am I missing?
>
> I think this should work:
>
> header SUBJ_RUSS_CHAR           Subject:raw =~ /koi8-r/i

That did it, thanks!

James Smallacombe                     PlantageNet, Inc. CEO and Janitor
[EMAIL PROTECTED]                                                           
http://3.am
=========================================================================

Reply via email to