Helpdesk SPAM

ianatkin's picture

Hi,

I'm struggling to remove the Cyrillic emails from our helpdesk. I've tried matching on Cyrillic characters directly and the mails still flow through. Any ideas?

I'm just about to blat anything from .ru, but that doesn't do it all...  :-(

Kind Regards,
Ian./

lokisson's picture

Antispam is the key.

Hi, Ian!
I had the same issue. But we digged into different way. We fight with spam as a primary target, when we got  clear email traffic to users and into helpdesk as well.
So, you shoud tuneup your antispam system on your's MX server.
THT
Cheers.

ianatkin's picture

We have one...

We have an antispam server which catches a tonne of SPAM, but for some reason the russian stuff is coming through as it is given a  borderline spam rating in the 30 percentiles so we can't reject it outright. It seems users complaining looks like SPAM. ;-)

We can't find a way to exclude Cyrillic emails with the Antispam vendor -direct phrase analysis isn't working in Cyrillic.The admin of the antispam server is looking into this with the vendor.

In the meantime I was hoping something could be achieved in helpdesk with the inbox filter. But this it seems doesn't match when I copy and paste Cyrillic characters into the filters.

Kind Regards,
Ian./

Ian Atkin
Senior Developer for the ICT Support Team,
Oxford University, UK

lokisson's picture

Copy & paste will work

You can copy and paste Cyrillic characters, it's works for me. But you have to search for exact match or use wildcards for spam keywords.
For example:

Reject e-mail: 
When ALL of these are TRUE
   "From" contains "%.ru"
   "Body" contains "%Привет%"
<end>

HTH

ianatkin's picture

That's interesting

I've been trying queries on like:

 When ALL of these are TRUE
"Body" contains "П"
<end>

rather than,

When ALL of these are TRUE
"Body" contains "%П%"
<end>

And the same goes for the .ru match. As I was using contains operator I didn't think I needed the wild cards. I'll give this a go again.

Kind Regards,
Ian./


Ian Atkin
Senior Developer for the ICT Support Team,
Oxford University, UK