Print Page | Close Window

MIME headers

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6867
Printed Date: 27 December 2024 at 12:40pm


Topic: MIME headers
Posted By: yapadu
Subject: MIME headers
Date Posted: 17 August 2010 at 10:11pm
Way back in 4.1.2.818 the following was added:

// New to VersionNumber = '4.1.2.818';
{TODO -cNew The keyword searches are now performed also against all MIME headers, allowing to search for example the Content-Type, charset, Content-Transfer-Encoding, Content-Disposition and filename}


Are keywords automatically scanned in all MIME headers or do we target them like a subject search?

I want to build something to block specific charset matches.  For example if I want to block Korean, I could look for charset="koi8-r" or would I need something like:

content-type:charset="koi8-r"


-------------
--------------------------------------------------------------
I am a user of SF, not an employee. Use any advice offered at your own risk.



Replies:
Posted By: yapadu
Date Posted: 17 August 2010 at 10:19pm
Actually koi8-r is Russian Cyrillic, not Korean... oops.  I can't read either, which is why I want to block them Wink

-------------
--------------------------------------------------------------
I am a user of SF, not an employee. Use any advice offered at your own risk.


Posted By: LogSat
Date Posted: 18 August 2010 at 9:05pm
There's nothing special you need to do, SpamFilter will look thru that content as if it was part of the email's body. Do note however that in your example, some emails won't have that exact syntax. For example, in addition to:

ontent-type:charset="koi8-r"

they could have:
Content-Type: text/html; charset=koi8-r

(no quotes around koi8-r, "charset" keyword placed by itself)


-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Posted By: yapadu
Date Posted: 19 August 2010 at 10:36am
Ok, understood.  The headers are simply treated as part of the body, and no special syntax is required like subjects.

I suspect that if Russians wanted they could also send their messages using UTF-8, so it is not possible to stop 100% of Russian based spam but it should certainly stop some.


-------------
--------------------------------------------------------------
I am a user of SF, not an employee. Use any advice offered at your own risk.



Print Page | Close Window