Re: Rule not trapping

2005-08-26 Thread hamann . w
In fact, if the header is correctly writtren (the relevant part is =?ISO-8859-something?B?text?= or =?IOS-8859-something?Q?text?= for base64 or quoted printable, and the something can range from 1 to 15), it would be a sure indication of a european sender. The b and q can be lowercase, and probab

Re: Rule not trapping

2005-08-26 Thread jdow
How about "70_sare_header.cf" and "99_OBFU_drugs.cf"? Slap it down GOOD. {^_-} - Original Message - From: "Thomas Deliduka" <[EMAIL PROTECTED]> Perhaps someone on the list can give me a suggestion then. Here is 5 e-mails and how the subject line is done. (different every time) perhap

Re: Rule not trapping

2005-08-26 Thread Thomas Deliduka
Perhaps someone on the list can give me a suggestion then. Here is 5 e-mails and how the subject line is done. (different every time) perhaps a pattern can be found that I haven't found? Subject: =?iso-8859-1?Q?G=D4od_pro_CI=C2IS_VI=E1GRRA?= Subject: =?iso-8859-1?Q?Go=F6d_offr_C=EFAIS_VI=E3GRRA?=

Re: Rule not trapping

2005-08-26 Thread jdow
From: "Kris Deugau" <[EMAIL PROTECTED]> Thomas Deliduka wrote: I have been dealing with a spammer that seems to defy every option to limit him. So, I decided to create a final rule that should kill him. I noticed that the subject in the text file always looks like =3D?iso-8859-1?blah blha blah

Re: Rule not trapping

2005-08-26 Thread Kris Deugau
Thomas Deliduka wrote: > I have been dealing with a spammer that seems to defy every option to > limit him. So, I decided to create a final rule that should kill him. > I noticed that the subject in the text file always looks like > > =3D?iso-8859-1?blah blha blah > > It may or may not have 3D so

Rule not trapping

2005-08-26 Thread Thomas Deliduka
I have been dealing with a spammer that seems to defy every option to limit him. So, I decided to create a final rule that should kill him. I noticed that the subject in the text file always looks like =3D?iso-8859-1?blah blha blah It may or may not have 3D sometimes it's P3 or something so I ma