On Tue, 13 Mar 2012 09:48:37 +0000 Jenny Lee <bodycar...@live.com> wrote:
> I am getting this chinese spam every hour. I tried, ok_locales, > ok_languages with texcat plugin... I tried matching the subject... > but these people are always getting through. > http://www.pastebin.ca/2127622 > What rules/modifications do I need to do to get rid of this? We use this rule, but it's aggressive. It will block any Chinese message with a Word or Excel attachment. For our user-base, that's fine, but YMMV. Regards, David. # Chinese spams header __RP_SUBJ_UTF8 Subject:raw =~/=\?utf-8\?B/i header __RP_SUBJ_GB2312 Subject:raw =~ /=\?gb2312\?B/i header __RP_SUBJ_CJK Subject =~ /[\xe4-\xe9]/ full __RP_8BIT_FNAME /name=.{0,30}[\x80-\xff]/ full __RP_EXCEL /application\/vnd.ms-excel/i full __RP_DOC /application\/msword/i full __RP_GB2312_FNAME /name=.?=\?gb2312\?/i meta RP_D_00032 (__RP_SUBJ_UTF8 && __RP_SUBJ_CJK && (__RP_EXCEL || __RP_DOC || __RP_8BIT_FNAME)) || (__RP_SUBJ_GB2312 && (__RP_GB2312_FNAME || __RP_EXCEL || __RP_DOC || __RP_8BIT_FNAME)) describe RP_D_00032 Looks like a Chinese spam score RP_D_00032 5.0
