Eliminating russian spam

[Makoev Alan <sa...@yandex.ru>]

I've written brief "how-to" for blocking E-mail in Russian. It's intended for those who are confident that any message in Russian sent to them is nothing but spam. See it here: http://sa-russian.narod.ru/no_russian.html
I'd like to see SA experts opinions and advices.

Re: Eliminating russian spam

[Makoev Alan <sa...@yandex.ru>]

Thank you, John!
Both "how-to" (http://sa-russian.narod.ru/no_russian.html) and the ruleset (http://sa-russian.narod.ru/files/20090916/99_no_russian_mail.cf) are updated.

Re: Eliminating russian spam

[John Hardin <jh...@impsec.org>]

On Tue, 22 Sep 2009, Makoev Alan wrote:

> I've written brief "how-to" for blocking E-mail in Russian. It's 
> intended for those who are confident that any message in Russian sent to 
> them is nothing but spam. See it here: 
> http://sa-russian.narod.ru/no_russian.html I'd like to see SA experts 
> opinions and advices.

   However, the message can be a MIME "multipart" one with charset
   declarations preceding the parts within the body, so this should be
   "full message" rule:

Not true, and bad advice (at least from a performance standpoint). Take a 
look at the mimeheader plugin and avoid using "full" rules.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Ignorance doesn't make stuff not exist.               -- Bucky Katt
-----------------------------------------------------------------------
  19 days since a sunspot last seen - EPA blames CO2 emissions