Stop email with windows-1251 in body html
Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5723
Printed Date: 05 January 2025 at 4:25am
Topic: Stop email with windows-1251 in body html
Posted By: Shade
Subject: Stop email with windows-1251 in body html
Date Posted: 19 July 2006 at 3:24am
Hi all,
I try to stop email with keyword filter, all email with "charset=windows-1251" in body html code, but It doesn't work.
Is there a way with regex ? If I add "windows-1251" in keyword list, it doesn't work, If I add "(windows\-1251)" same problem...
Thank you for reply.
|
Replies:
Posted By: sgeorge
Date Posted: 19 July 2006 at 10:26am
Hi there,
I believe you are trying to scan for the presence of a MIME header that separates the text regions of a message. e.g.
Content-Type: text/plain;
charset=windows-1251
I've tried http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5418&KW=windows-1251 - (and failed) http://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=5418&KW=windows-1251 - to do the same thing (using unregistered v2.7.1.532). However, Desperado noticed that the messages that I was trying to block also included =?windows-1251 in the subject line, and I was able to successfully block the messages based on that (you may want to check out the previous hyperlink).
Also note that Roberto had mentioned in that thread that LogSat had planned to enable blocking of certain charsets in SpamFilter. I do not have the registered version of SpamFilter, so it may be that this feature is already supported in the current registered release.
Stephen
|
Posted By: Shade
Date Posted: 20 July 2006 at 8:07am
Hi again,
No, it's not in email headers, but in the body text html code :
<META http-equiv=Content-Type content="text/html; charset=windows-1251">
|
Posted By: sgeorge
Date Posted: 21 July 2006 at 1:39pm
Hmph, that is odd. Have you checked your activity log just in case the message was whitelisted for some reason? I wouldn't be able to explain how that would pass through otherwise.
Stephen
|
Posted By: LogSat
Date Posted: 21 July 2006 at 4:22pm
Shade,
Is that text in the actual email's original source, or when you do a "view source" from within Microsoft Outlook? Please note that Outlook will ocmpletely reformat an email source, so what it shows is very much different than the real email's content, and keyword searfches on it will fail.
-------------
Roberto Franceschetti
http://www.logsat.com" rel="nofollow - LogSat Software
http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP
|
Posted By: Shade
Date Posted: 24 July 2006 at 12:04pm
Confirmation, datas :
<META http-equiv=Content-Type content="text/html; charset=windows-1251"> are exactly what I receive in html body source code (dumped from postfix file)
Regards
|
|