> -----Original Message-----
> From: Mike Pepe [mailto:[EMAIL PROTECTED]
> Sent: Thursday, 20 March 2008 5:18 a.m.
> To: users@spamassassin.apache.org
> Subject: Cyrillic spam
> 
> For some strange reason, I'm seeing Cyrillic spams very frequently
lately.
> 
> None of my users read any Eastern European languages- is there a quick
> way to catch these?
> 
> thanks
> 
> -Mike

You could use the ok_languages and ok_locales settings. I'm sure
discussions on those can be found in the archives.

I employed these rules for my site:

header CST_RUSSIANSPAM1         Subject:raw =~
/\=\?(koi8\-r|windows\-125[0125]|windows\-874|iso\-8859\-[28])\?/i
score CST_RUSSIANSPAM1          6.6
describe CST_RUSSIANSPAM1       Russian SPAM, trap Subject line for
language set

header CST_RUSSIANSPAM2         From:raw =~
/\=\?(koi8\-r|windows\-125[0125]|windows\-874|iso\-8859\-[28])\?/i
score CST_RUSSIANSPAM2          6.6
describe CST_RUSSIANSPAM2       Russian SPAM, trap From line for
language set

These two rules should tag your Cyrillic spam just fine. You might
prefer to throw the language away entirely with the ok_languages etc.
Just depends how you want to go about it.

Cheers,
Mike

Reply via email to