Evaluate UTF-8 From / Subject
Nikolaos Milas <[email protected]>
| Newsgroups | gmane.mail.spam.spamassassin.general |
|---|---|
| Organization | National Observatory of Athens |
| Message-ID | <[email protected]> |
Hello, Is there a way we can search for strings in UTF-8 encoded From and/or Subject headers? For example, here is part of a phishing mail header: ... From: =?utf-8?B?Is6VzpjOnc6ZzprOlyDOpM6hzpHOoM6VzpbOkSI=?= <[email protected]> To: [email protected] Message-id: <[email protected]> Date: Thu, 18 Jul 2024 09:40:04 +0200 X-Mailer: Oracle Communications Messenger Express 8.0.2.5.20200127 64bit (built Jan 27 2020) Content-language: en Subject: ***Spam?*** =?UTF-8?Q?=CE=95=CF=80=CE=B5=CE=AF=CE=B3=CE=BF=CF=85=CF=83=CE=B1_=CE=95?= =?UTF-8?Q?=CE=BD=CE=B7=CE=BC=CE=AD=CF=81=CF=89=CF=83=CE=B7:_=CE=91=CE=BD?= =?UTF-8?Q?=CE=B1=CE=B2=CE=AC=CE=B8=CE=BC=CE=B9=CF=83=CE=B7_=CE=91=CF=83?= =?UTF-8?Q?=CF=86=CE=B1=CE=BB=CE=B5=CE=AF=CE=B1=CF=82_=CE=91=CF=80=CE=B1?= =?UTF-8?Q?=CE=B9=CF=84=CE=B5=CE=AF=CF=84=CE=B1=CE=B9_=CE=B3=CE=B9=CE=B1_?= =?UTF-8?Q?=CF=84=CE=BF=CE=BD_=CE=9B=CE=BF=CE=B3=CE=B1=CF=81=CE=B9=CE=B1?= =?UTF-8?Q?=CF=83=CE=BC=CF=8C_=CF=83=CE=B1=CF=82_=CF=83=CF=84=CE=B7=CE=BD_?= =?UTF-8?Q?=CE=95=CE=B8=CE=BD=CE=B9=CE=BA=CE=AE_=CE=A4=CF=81=CE=AC=CF=80?= =?UTF-8?Q?=CE=B5=CE=B6=CE=B1?= ! X-Accept-Language: en ... How can we search for a particular string in From / Subject? Note: In the above case, encoded text is in Greek language. I would appreciate your feedback. We are at Rocky Linux 8, with spamassassin 3.4.6 (under amavis). Best regards, Nick
smime.p7s
(application/pkcs7-signature, 4.1 KB) - not displayed