Creating a rule for blocking e-mails with a specific character set - WithSecure Community
<main>
<article class="userContent">
<p> </p> Creating a rule for blocking e-mails with a specific character set <p>This article describes how you can create a rule to block e-mails with a specific character set. </p> <p>If you want to create an e-mail firewall rule to block e-mails with a specific character set, you just need to reference the appropriate character encoding. </p> <p>For example, you wish to block e-mails that are in Russian and use the Cyrillic alphabet. The common character encodings for Cyrillic are Windows-1251 and KOI8-R. When you look in the original message header, you might see something like the following: </p> <pre class="code codeBlock" spellcheck="false">Content-Type: text/plain; charset="koi8-r"</pre> <p>By creating an e-mail firewall rule that keys off the above header, you can block the e-mails. To do this, create a rule matching the e-mail header > Message Headers > Attribute > Content Type > Operator > Contains > Value: "koi8-r". </p> <p><strong>Note:</strong> Similar rules can be created for other character sets as well. For example, if you want to block all e-mail messages in simplified Chinese, a rule to block "gb2312" should be created. </p> <p><strong>Note:</strong> The rules described above will only block the messages that actually specify the character set in the Content-Type message headers. Some foreign character set e-mails will specify the character set in the MIME boundaries rather than the message headers. To catch these, you must create a rule to look for the character set anywhere in the message. This would also catch any e-mails that discuss the character set in the body of the e-mail. </p>
</article>
</main>