michael hutchinson ylwyrpjpsfrmanuxconz original message suddenly getting ton spam koi8r encodingi tried custom rule like header subj_russ_char subject koi8ri describe subj_russ_char russian char encoding score subj_russ_char 35 short headers spams look like subject koi8r raw subject header like subject koi8rb9zkindsxctq0snr1mnkinpfzcnowdi would think rule would catch either waywhat missing think work header subj_russ_char subjectraw koi8ri thanks meant delimit characters like minus sign ex header subj_russ_char subjectraw koi8ri would really like trap question marks case someone sends legitimate email koi8r subject ie email koi8r character set get tagged spam words following rule worked would nice use instead ex header subj_russ_char subjectraw koi8r could trap equals sign two question marks employed rule think dodgy regexp expander sare says scary amount matches 2000 rule im presuming matching equals character question mark working properly delimited way example using x1b notation ive luck anyone suggestions matching question marks equals signs one line would like match everything exactly double quotes koi8r read perldoc docs id using koi8r dont want test live server output regex expander utility help anyone cheers mike wed 06 aug 2008 155311 1300 rule russian character sets