SF std edition - rel 4.0.0.772

DB Sql Server 2000 std ed.

 

Keywords check doesn't work sometimes

 

In order to stop spam in cirillinc font we included the charset "koi8-r" among keywords blacklist.

 

This solution solved greatly the issue but now, after the 4.0.0.772 update, some mail pass the check.

 

here below the source code of a mail which as no be checked:

 

(IP in not in white list, and Keyword is in keywords blacklist (bold one))

 

[...]

Received: from 77.122.212.137 by xxxxx.xxxxxx.net (LogSat Software SMTP Server); Wed, 12 Mar 2008 09:12:25 +0100
Message-ID: <000601c88418$04f7293d$c66c5aa4@btymy>
From: "Tina" <dotyk@qwest.com>
To: <xxxxx@xxxxxxx.net>
Subject: =?koi8-r?B?68/HzyDT1cTR1D8=?=
Date: Wed, 12 Mar 2008 06:24:36 +0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="koi8-r"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <dotyk@qwest.com>
X-SF-HELO-Domain: handlerless.best.volia.net
X-SF-Originating-IP: 77.122.212.137

 

 

Any idea?

 

we will try.

 

 

regards

 

with keyword:  "Subject: =?koi8-r?" a few mails pass the filter.

 (anyway the major part of filtered mail that maches the keywords has "koi8-r" in the subject. That's exclude the regular skipping of the subject.

 

here below a mail passed the filter after updating keyword list upon your suggestion

 

Received: from 78.106.95.167 by xxxx.xxxx.net (LogSat Software SMTP Server); Thu, 13 Mar 2008 10:50:25 +0100
Message-ID: <000801c8854b$02ae5043$8f4ff6b4@xaeee>
From: =?koi8-r?B?9MnOwQ==?= <kcoxreal@pacbell.net>
To: <xxxxx.xxxx.net>
Subject: =?koi8-r?B?7c/Wzs8gzMnL18nEydLP18HU2D8=?=
Date: Thu, 13 Mar 2008 19:02:33 +0000
MIME-Version: 1.0
Content-Type: text/plain;
charset="koi8-r"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.3138
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198
X-Server: LogSat Software SMTP Server
X-SF-RX-Return-Path: <kcoxreal@pacbell.net>
X-SF-HELO-Domain: 78-106-95-167.broadband.corbina.ru
X-SF-Originating-IP: 78.106.95.167

 

Can you try the following keywords?

 

((?i)charset=("){0,1}.*((windows-1251)|(koi8-r)|(2022-jp)))
((?i)subject:.*koi8-r)

 

Anyway the original question was:

 

1) we had koi8-r (exaclty as you read it) in keywords.

 

2) in that way SF filters 90% of cirillic mail with such a keyword in subject as well as in body

 

Why for the 10% it skips the check?

 

I don't think it is a reg ex syntax problem, since as i showed above there's no reg ex issue in my first question.

 

We are testing the desperado's suggestion.

 

I will report the results.

 

Regards

 

 

 

 

 

If a message get through with the new keywords, please contact me by PM.  I will want to see the headers and source to see if there is some other thing I can do to improve the regular expression.

 

your reg ex expression for Koi8r are doing its job! No more cirillic spam in almost a month hard testing.

 

Thank you!