KMcGrail at PCCC
Mar 2, 2012, 4:21 AM
Post #3 of 4
On 3/2/2012 1:13 AM, Tom Kinghorn wrote:
> morning list
> Please could you advise as to how I would match this charset (iso-8859-1)
> I would like to include it as part of a meta-test for phishing
> however, my attempts have failed.
A - The charset in the second half isn't a header. It's part of the
mime enclosure heading. Have you looked at the MIMEHeader plugin?
B - iso 8859 1 is essentially the Western charset. I don't think you'll
find it indicative of much spam or ham.