> Subject: Re: Help with blocking Chinese Spam > From: mar...@gregorie.org > To: users@spamassassin.apache.org > Date: Tue, 13 Mar 2012 12:09:19 +0000 > > On Tue, 2012-03-13 at 09:48 +0000, Jenny Lee wrote: > > > > Dear SA Users, > > > > I am getting this chinese spam every hour. I tried, ok_locales, > > ok_languages with texcat plugin... I tried matching the subject... but > > these people are always getting through. > > > > http://www.pastebin.ca/2127622 > > > > What rules/modifications do I need to do to get rid of this? > > > If that UTF-8 prefix - =?utf-8?B? - is specific for Chinese, then a rule > something like: > > header __FC1 From =~ /=?utf-8?B?/ > header __FC2 From =~ /\.cn>/i > meta FAKE_CHINESE (__FC1 && !__FC2) > > might do it.
Dear Martin, Thank you for your input. Subject is always with utf-8. From is half of the time with utf-8. I checked our regular mail and we never have utf-8 in the subject from anyone (last 2 months check). Can some expert advise on blocking based on this utf-8 in the subject? > Equally obviously, if all the spam is coming from Argentina, Botnet. Country is not relevant on this. Jenny
