On 3/13/12 7:25 AM, David F. Skoll wrote:
On Tue, 13 Mar 2012 09:48:37 +0000
Jenny Lee<bodycar...@live.com> wrote:
I am getting this chinese spam every hour. I tried, ok_locales,
ok_languages with texcat plugin... I tried matching the subject...
but these people are always getting through.
http://www.pastebin.ca/2127622
What rules/modifications do I need to do to get rid of this?
We use this rule, but it's aggressive. It will block any Chinese message
with a Word or Excel attachment. For our user-base, that's fine, but YMMV.
Regards,
David.
# Chinese spams
header __RP_SUBJ_UTF8 Subject:raw =~/=\?utf-8\?B/i
header __RP_SUBJ_GB2312 Subject:raw =~ /=\?gb2312\?B/i
header __RP_SUBJ_CJK Subject =~ /[\xe4-\xe9]/
full __RP_8BIT_FNAME /name=.{0,30}[\x80-\xff]/
full __RP_EXCEL /application\/vnd.ms-excel/i
full __RP_DOC /application\/msword/i
full __RP_GB2312_FNAME /name=.?=\?gb2312\?/i
meta RP_D_00032 (__RP_SUBJ_UTF8&& __RP_SUBJ_CJK&& (__RP_EXCEL || __RP_DOC ||
__RP_8BIT_FNAME)) || (__RP_SUBJ_GB2312&& (__RP_GB2312_FNAME || __RP_EXCEL || __RP_DOC ||
__RP_8BIT_FNAME))
describe RP_D_00032 Looks like a Chinese spam
score RP_D_00032 5.0
__________________________
Thanks for this, I too have been getting Chinese language spam this
week but interestingly not today:-)
