spamassassin-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "David F. Skoll" <...@roaringpenguin.com>
Subject Re: Blocking obfuscated pharma subjects
Date Mon, 26 Mar 2012 21:56:42 GMT
On Mon, 26 Mar 2012 17:44:38 -0400
Alex <mysqlstudent@gmail.com> wrote:

>     Subject:
>     \341\275\210\317\200\341\270\272\341\274\276\305\204\341\274\232[...]

Clever! :)

> Thanks for any ideas.

In theory, a valid Subject: header should encode characters with the
high bit set, so wouldn't:

     Subject:raw =~ /[\x80-\xff]/

catch that?  You may get FPs from broken software, but most legitimate
mail software will properly encode the subject.

Regards,

David.

Mime
View raw message