morning list Please could you advise as to how I would match this charset (iso-8859-1)
I would like to include it as part of a meta-test for phishing however, my attempts have failed. a queued message shows <snip> Content-Type: multipart/mixed; boundary="===============0918654631==" MIME-Version: 1.0 Subject: ABSA:Security Centre To: Recipients <notif...@absa.com.br> From: notif...@absa.com.br Date: Thu, 1 Mar 2012 21:20:49 +0200 You will not see this in a MIME-aware mail reader. --===============0918654631== Content-Type: multipart/alternative; boundary="===============1047215777==" MIME-Version: 1.0 --===============1047215777== Content-Type: text/plain; charset="iso-8859-1" MIME-Version: 1.0 Content-Transfer-Encoding: quoted-printable Content-Description: Mail message body </snip> The rule I created is: header __CTYPE_ISO8859 Content-Type =~ /charset="iso-8859-1"/ I used the FSL_CTYPE_WIN1251 rule in 72_active.cf as an example. However, it fails to match. Thank you Tom
