If the message is in HTML, look at the source. There should be something that
resembles the following in the body source:
charset="GB2312"
GB2312 is the text encoding for Simplified Chinese. Depending on the character
set, it could be differant in your Spam message.
You should then be able to set up a body rule and trap for:
.*charset="GB2312".*
or something simular.
On Tuesday, March 29, 2005 at 9:58:20 AM, [EMAIL PROTECTED] confabulated:
> Hello List
> Is anyone else getting these?
> Received: from ASSP-nospam [127.0.0.1] by mailhost.biuk.co.uk with ESMTP
> � (SMTPD32-8.14) id A1E414E903A0; Sat, 26 Mar 2005 13:21:40 +0000
> Received: from 156.21.1.21 ([156.21.1.21] helo=list.ipswitch.com) by
> ASSP-nospam ; 26 Mar 05 13:21:40 -0000
> Received: from list.ipswitch.com [61.31.131.58] by list.ipswitch.com
> � (SMTPD32-8.12) id A24321750182; Sat, 26 Mar 2005 08:23:15 -0500
> From: =?Big5?B?sN+kQKSjp3SovrtHvq8=?= <johnson>
> Subject: [IMail Forum]
> =?Big5?B?pKOndKi+u0e+r6z8rmXFQL2nsqOrfqZipXjGV7apraukV6WrpEY=?=
> Content-Type: text/html
> Date: Sat, 26 Mar 2005 10:30:05 +0800
> X-Priority: 3
> Message-Id: <[EMAIL PROTECTED]>
> Precedence: bulk
> Sender: [EMAIL PROTECTED]
> Reply-To: [email protected]
> X-Assp-Spam-Prob: 0.00000
> X-RCPT-TO: <[EMAIL PROTECTED]>
> Status: U
> X-UIDL: 411392016
> The mail is a Chinese advert for herbal cock straightener, or somesuch,
> 61.31.131.58 belongs to
> TFN-NET, I have sent them an abuse report.
> I am intrigued to know why this person is targeting this list?
-----
Duane Hill
Sr E-Mail Administrator
http://www.yournetplus.com
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
