spam on staff computer - Korean

[Seth Finkelstein]

	Korean spam typically has a line in the mail header such as
the following:

Content-Type: text/html; charset="ks_c_5601-1987"

	That indicates the message is using the Korean character set.
I have found this to be an excellent indicator of spam, for anyone
who doesn't expect mail in Korean :-). Killing messages based on
the appearance of that line in the header should do little harm.

	Note it infrequently appears without the quotes, as:

Content-Type: text/html; charset=ks_c_5601-1987

	I also treat similarly any charset of "euc-kr" or "gb2312".

-- 
Seth Finkelstein  Consulting Programmer  sethf at sethf.com  http://sethf.com
Anticensorware Investigations - http://sethf.com/anticensorware/
Seth Finkelstein's Infothought blog - http://sethf.com/infothought/blog/
List sub/unsub: http://sethf.com/mailman/listinfo.cgi/infothought