> -----Original Message-----
> From: Mike Pepe [mailto:lamune@doki-doki.net]
> Sent: Thursday, 20 March 2008 5:18 a.m.
> To: users@spamassassin.apache.org
> Subject: Cyrillic spam
>=20
> For some strange reason, I'm seeing Cyrillic spams very frequently

lately.
>=20
> None of my users read any Eastern European languages- is there a quick
> way to catch these?
>=20
> thanks
>=20
> -Mike


You could use the ok_languages and ok_locales settings. I'm sure
discussions on those can be found in the archives.

I employed these rules for my site:

header CST_RUSSIANSPAM1 Subject:raw =3D~
/\=3D\?(koi8\-r|windows\-125[0125]|windows\-874|iso\-8859\-[28])\?/i
score CST_RUSSIANSPAM1 6.6
describe CST_RUSSIANSPAM1 Russian SPAM, trap Subject line for
language set

header CST_RUSSIANSPAM2 From:raw =3D~
/\=3D\?(koi8\-r|windows\-125[0125]|windows\-874|iso\-8859\-[28])\?/i
score CST_RUSSIANSPAM2 6.6
describe CST_RUSSIANSPAM2 Russian SPAM, trap From line for
language set

These two rules should tag your Cyrillic spam just fine. You might
prefer to throw the language away entirely with the ok_languages etc.
Just depends how you want to go about it.

Cheers,
Mike