Re: [vps-mail] procmail to score an ISO-8859 subject

[Godwin Stewart <gstewart@xxxxxxxxxxx>]

On Mon, 09 Feb 2004 18:03:16 +0100, Sikaspam <sikaspam@xxxxxxxxxxx> wrote:

S> > * ^Subject:.*iso-8859-1.*=[89a-f][0-9a-f]
S> 
S> What do you think of the chances of this (philosophy) working?

Fairly slim.

It assumes that the Quoted-Printable scheme is used, whereas spam often
comes with the subject base64-encoded. Plus, you often correspond with
people in a locale where encoding the subject is frequent (and MUA's tend to
QP-encode).

So, if you were to scan for "=?charset?B?stuff?=", you'd probably have
a much lower false positive rate.

:0
* ^Subject:.*=?[^?]+?B?.*?=

-- 
G. Stewart   --   gstewart@xxxxxxxxxxx -- gstewart@xxxxxxxxxxx
Registered Linux user #284683 (Slackware 9.0, Linux 2.4.24)
--------------------------------------------------------------
"The day Microsoft makes something that doesn't suck is probably the day
 they start making vacuum cleaners."
       --- Ernst Jan Plugge
======================================================================
This is <vps-mail@xxxxxxxxxxxx>       <http://www.perlcode.org/lists/>
Before posting a question, please search the archives (see above URL).