<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
</head>
<body>
<p>Benedict,<br>
</p>
<div class="moz-cite-prefix">Am 01.09.21 um 00:57 schrieb Benedict
White:<br>
</div>
<blockquote type="cite"
cite="mid:ACF27D5D1618A443A0D3B7F1A28B4CDA0825FEBFB0AA@snowball">
<pre class="moz-quote-pre" wrap="">-----Original Message-----
From: amavis-users [<a class="moz-txt-link-freetext" href="mailto:amavis-users-bounces+benedict.white=cse-ltd.co.uk@amavis.org">mailto:amavis-users-bounces+benedict.white=cse-ltd.co.uk@amavis.org</a>] On Behalf Of Benny Pedersen
Sent: 31 August 2021 20:44
To: <a class="moz-txt-link-abbreviated" href="mailto:amavis-users@amavis.org">amavis-users@amavis.org</a>
Subject: Re: Using Amavis to reject/quarantine email with MIME-encoded Subject Fields
On 2021-08-31 18:58, Benedict White wrote:
</pre>
<blockquote type="cite">
<pre class="moz-quote-pre" wrap="">header MyRuleNumberOne Subject =~ /RgNC10LTQ/i
score MyRuleNumberOne 5.0
The rules looks for something containing " RgNC10LTQ" and the i after
the / means case insensitive. You can remove that if this is the
precise spelling you are looking for.
</pre>
</blockquote>
<pre class="moz-quote-pre" wrap="">
<a class="moz-txt-link-freetext" href="https://spamassassin.apache.org/full/3.1.x/doc/Mail_SpamAssassin_Plugin_WhiteListSubject.html">https://spamassassin.apache.org/full/3.1.x/doc/Mail_SpamAssassin_Plugin_WhiteListSubject.html</a>
it supports blacklist :=)
it must be mime decoded content in the blacklist_subject ....
###
My understanding is that the subject appears in the header and isn't encoded. The reason it appears as this gobbledegook is an error in the spam generation, as such, the error can be exploited with a simple rule as I wrote.</pre>
</blockquote>
<p>this holds true only for ASCII-based languages, but not e.g. for
German where you would have Umlauts like "Passwort zurücksetzen"
(reset password) in Subject:-Headers which MUST (RFC) be MIME
encoded in order not to break 7-bit servers while they are in
transit.</p>
<p>p@rick</p>
<blockquote type="cite"
cite="mid:ACF27D5D1618A443A0D3B7F1A28B4CDA0825FEBFB0AA@snowball">
</blockquote>
<pre class="moz-signature" cols="72">--
[*] sys4 AG
<a class="moz-txt-link-freetext" href="https://sys4.de">https://sys4.de</a>, +49 (89) 30 90 46 64
Schleißheimer Straße 26/MG,80333 München
Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263
Vorstand: Patrick Ben Koetter, Marc Schiffbauer, Wolfgang Stief
Aufsichtsratsvorsitzender: Florian Kirstein
</pre>
</body>
</html>