Not able to add Chinese character in what object.
终止您的电子邮件帐户正在进行中
I try filter via regex (?i)(\W|^)(=\?utf-8\?b.*)(\W|$), it show OK when test string but email not being filter by the rules.
终止您的电子邮件帐户正在进行中
I try filter via regex (?i)(\W|^)(=\?utf-8\?b.*)(\W|$), it show OK when test string but email not being filter by the rules.
Code:
Return-path: <xxx@gmail.com>
Received: from pmg.xxx.com ([192.168.40.106])
by mail.xxx.com with ESMTP; Wed, 17 Jun 2020 17:12:41 +0800
Received: from pmg.xxx.com (localhost.localdomain [127.0.0.1])
by pmg.xxx.com (Proxmox) with ESMTP id 9485943E4A
for <leepakhong@xxx.com>; Wed, 17 Jun 2020 17:12:42 +0800 (+08)
Received-SPF: pass (gmail.com ... _spf.google.com: Sender is authorized to use 'xxx@gmail.com' in 'mfrom' identity (mechanism 'include:_netblocks.google.com' matched)) receiver=pmg.xxx.coml; identity=mailfrom; envelope-from="xxx@gmail.com"; helo=mail-il1-f177.google.com; client-ip=209.85.166.177
Received: from mail-il1-f177.google.com (mail-il1-f177.google.com [209.85.166.177])
by pmg.xxx.com (Proxmox) with ESMTP id D192843DEF
for <xxx@xxx.com>; Wed, 17 Jun 2020 17:12:41 +0800 (+08)
Received: by mail-il1-f177.google.com with SMTP id x18so1454216ilp.1
for <xxx@xxx.com>; Wed, 17 Jun 2020 02:12:41 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=gmail.com; s=20161025;
h=mime-version:from:date:message-id:subject:to;
bh=Zg8+NOuc7nmpz0ydxzEt/uJV1ldZzNr3rFEbH0YVkrs=;
b=A/XGfpI7qXy44GUd1BiqAsnnmyXRdEy+WgoHsKBtub9meK8CQCLoyy3j0c3ruQcRg9
hn+PWFLa37wjwg9DzKEwBl72orfn5Mx/sz+0JOS8YMNQxdD0JFIiAZbss8qAyVeuEIUq
DjRSv0OqV4ogyyoT1P+pb51MKFX7lK+Vvji8jW0qd9+dJpRnTKfija7bWBKX033V2Rra
6T2pCZ0cVRALOwZjnVTOaaKHtMo+s2qKi7kbXxLWfJ8FgzV2fVQqig7C+PE21uV6VHro
+AjQk+fn6Roj0A85K38BMZg3tP7JCuOyj7qr1psaCPvtADXcyN7eIsYAf5oBlUeXM+Sy
OqVA==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
d=1e100.net; s=20161025;
h=x-gm-message-state:mime-version:from:date:message-id:subject:to;
bh=Zg8+NOuc7nmpz0ydxzEt/uJV1ldZzNr3rFEbH0YVkrs=;
b=k8kaLdsY29GaXsJbv7uesH1m6YXphrOQmhMsCMfmIyJC2Ge+XByOvJQodWUnwbatns
PdhOwl0c8b2cY+f+dY1YWzwmaMfVxG3v9lhnmKocvhnA3SbYm7OeVRLbB3b293UXHEl8
AlV2g2O2oN7WwkVhHuHQ2KAUy1CCc9TJ77SkMt8SeFddbxokHbRVibdJES+2N83SE6dH
A9i4jzY0FQRyyWSUd9I5z89kfrsKbv/gzLtbh8hGE9914sB/JbcSzA/xGVp6jqW7z+0L
GDJAz4jp1dd1n2Lvq9TQgl2D/SWIj9Cz8D0moMONdmYS9wvBRqLRG4ovnCZm4/qHAlhS
ZPzw==
X-Gm-Message-State: AOAM533+PWIjXDWb8pB/qo/WxIbTtSwzMaPxpHITgqIwfW0PzDsncaZk
SaJuX/XQnP8XniXld7VHGmGkYMH98TWa5LdYy4c3RMar
X-Google-Smtp-Source: ABdhPJxPAedB96ej06RwkCFA6h+WXjbpIZ9JSo7vrEbavFxmPS/3xzzH2WxuW7iGN4Gz02UXUQl2fh+QOPcvORcIEeQ=
X-Received: by 2002:a92:de48:: with SMTP id e8mr7307426ilr.249.1592385160585;
Wed, 17 Jun 2020 02:12:40 -0700 (PDT)
MIME-Version: 1.0
From: xxx <xxx@gmail.com>
Date: Wed, 17 Jun 2020 17:12:27 +0800
Message-ID: <CAKETK8EV6dxJ1COZTvZ=1R-yyRAz8_+KZwX-9_wU9j0y92Gk8w@mail.gmail.com>
Subject: =?UTF-8?B?57uI5q2i5oKo55qE55S15a2Q6YKu5Lu25biQ5oi35q2j5Zyo6L+b6KGM5Lit?=
To: "xxx" <xxx@xxx.com>
Content-Type: multipart/alternative; boundary="000000000000d7a69205a8440fa7"
X-SPAM-LEVEL: Spam detection results: 0
AWL 0.368 Adjusted score from AWL reputation of From: address
BAYES_00 -1.9 Bayes spam probability is 0 to 1%
DKIM_SIGNED 0.1 Message has a DKIM or DK signature, not necessarily valid
DKIM_VALID -0.1 Message has at least one valid DKIM or DK signature
DKIM_VALID_AU -0.1 Message has a valid DKIM or DK signature from author's domain
DKIM_VALID_EF -0.1 Message has a valid DKIM or DK signature from envelope-from domain
FREEMAIL_FROM 0.001 Sender email is commonly abused enduser mail provider
HTML_MESSAGE 0.001 HTML included in message
RCVD_IN_DNSWL_NONE -0.0001 Sender listed at https://www.dnswl.org/, no trust
RCVD_IN_MSPIKE_H2 -0.001 Average reputation (+2)
SPF_HELO_NONE 0.001 SPF: HELO does not publish an SPF Record
SPF_PASS -0.001 SPF: sender matches SPF record
--000000000000d7a69205a8440fa7
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: base64
57uI5q2i5oKo55qE55S15a2Q6YKu5Lu25biQ5oi35q2j5Zyo6L+b6KGM5LitDQo=
--000000000000d7a69205a8440fa7
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: base64
PGRpdiBkaXI9Imx0ciI+57uI5q2i5oKo55qE55S15a2Q6YKu5Lu25biQ5oi35q2j5Zyo6L+b6KGM
5LitPC9kaXY+DQo=
--000000000000d7a69205a8440fa7--