Here is a snippet of an email header for an email received: Return-Path: <[email protected]> Mon Feb 02 16:35:28 2009 Received: from mail.clockpleas.com [64.235.54.175] by xxx.xxx.com with SMTP; Mon, 2 Feb 2009 16:35:28 -0600 From: "J. Cummuta" <[email protected]> To: <[email protected]> Subject: Even your house is paid off MIME-Version: 1.0 Content-Type: text/html; charset=us-ascii; Content-Transfer-Encoding: 8bit
The actual email address is always changing. However, "J. Cummuta" in the FROM address seems pretty consistent. If MAILFROM won't catch these, shouldn't the HEADERS test catch these? > -----Original Message----- > From: [email protected] [mailto:[email protected]] On Behalf Of David > Barker > Sent: 2009-01-05 15:25 > To: [email protected] > Subject: RE: [Declude.JunkMail] Mailfrom Processing > > Declude looks at the MAILFROM in the envelope (*.hdr or q*.smd) and matches > just on the email address. > > > David Barker > VP Operations Declude > Your Email security is our business > 978.499.2933 office > 978.988.1311 fax > [email protected] > > > > -----Original Message----- > From: [email protected] [mailto:[email protected]] On Behalf Of Dave > Beckstrom > Sent: Monday, January 05, 2009 4:18 PM > To: [email protected] > Subject: [Declude.JunkMail] Mailfrom Processing > > > > I have a question about the MAILFROM processing. Does this look at the > display name too or just at the actual email address? > > I was trying to block the Loud N Clear ads by referencing the display name > because it seemed to be pretty consistent while the email address itself > didn't change. I set up the following and it didn't appear to work: > > MAILFROM 0 contains loudandclear > > > Is the only way to filter on the display name in the from address to use the > HEADERS filter? > > Thanks, > > Dave > > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [email protected], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [email protected], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [email protected], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
