Let me preface this by saying that this may not work for everyone, but here are the rules I use on my server to dump Korean spam, because we were getting 50-60 a day at one time.
header CHECK_KOREAN1 Content-type =~ /ks_c_5601-1987/i describe CHECK_KOREAN1 Content-type contains Korean language score CHECK_KOREAN1 40 header CHECK_KOREAN2 Content-type =~ /iso-2002-kr/i describe CHECK_KOREAN2 Content-type contains Korean language score CHECK_KOREAN2 40 header CHECK_KOREAN3 Content-type =~ /iso-200-kr/i describe CHECK_KOREAN3 Content-type contains Korean language score CHECK_KOREAN3 40 header CHECK_KOREAN4 Content-type =~ /euc-kr/i describe CHECK_KOREAN4 Content-type contains Korean language score CHECK_KOREAN4 40 Now these rules will also dump any ham if you get legitimate(wanted) messages from people in Korea if they are using a Korean locale (even if the message is written in English). In our case we know most of the domains of people in Koread where ham would come from and have them in our whitelist, also we have checks for certain subject keywords that are related to our business and offset the high score on the Korean checks. SA also has checks in the default filters for Korean characters in the subject. This has worked for us, however, as always YMMV. Chip > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > jean-christophe valiere > Sent: Friday, January 16, 2004 10:42 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Korean Spam > > > > Hi, > > Does somebody recieve korean spam or more generally asian spam. > One of my customer recieve about 60 asian spam per day and around > 10 of them are nor stopped by spamassassin. > Is there any special .cf file or ?? > > Thx. > -- > Jean-Christophe VALIERE > EPITA Paris Sud, 14-16 Rus Voltaire, 94270 Le Kremlin Bicetre > Tel: +33 1 44786872 E-Mail : [EMAIL PROTECTED] > > > ------------------------------------------------------- > The SF.Net email is sponsored by EclipseCon 2004 > Premiere Conference on Open Tools Development and Integration > See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. > http://www.eclipsecon.org/osdn > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > ------------------------------------------------------- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools Development and Integration See the breadth of Eclipse activity. February 3-5 in Anaheim, CA. http://www.eclipsecon.org/osdn _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
