I am surprised that they are still coming through, I would think that should have stopped it altogether. However add the following line to a junkmail filter:
#CYRILLIC ANYWHERE 10 PCRE (?i:(charset=.{0,2}koi8-[ur].{0,2})|(=\?koi8-[ur]\?b\?)) David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Monday, April 21, 2008 7:55 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] blocking certain character sets David Thanks very much. I added to the Declude.cfg BANCHARSET koi8-r after I upgraded to 4.4.0 They are still coming thru. Is there anything else that I need to do? This is what I'm still getting From: =?koi8-r?B?58XOzsHEycog98HTyczYxdfJ3g==?= < <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED]> Subject: X-IMail-SPAM =?koi8-r?B?58/S0d3JxSDQ1dTF18vJIQ==?= Thanks very much Ferrell Ard ----- Original Message ----- From: David Barker <mailto:[EMAIL PROTECTED]> To: declude.junkmail@declude.com Sent: Tuesday, April 08, 2008 10:12 AM Subject: RE: [Declude.JunkMail] Need help in setting up filter please You can use the settings in Declude.cfg to stop certain character sets. David B From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Tuesday, April 08, 2008 7:41 AM To: Declude Subject: [Declude.JunkMail] Need help in setting up filter please We are getting a lot of email that has the code for character set in the "From" The from always starts with =?koi8-r? Does anyone have a filter that might help me eliminate these. From: =?koi8-r?B?8dLP08zB1yD30d7F08zB18/Xyd4=?= <xqs Thanks very much Ferrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.