I'm trying to write a rule to catch a certain kind of spam. In these messages, any or all of the header may be forged, but in the commercial come-on in the body, they always include a link to a web site. These are HTML emails and of course the link is a standard A HREF tag. My logic is that if I filter for that URL then it won't matter if the header is forged. But it doesn't seem to work reliably. I thought IMail would parse the HTML and find any text that matched? Couldn't find this in the archives. Here is part of my rule that failed to stop repeat mailings from cbphost.net:
B~(cbphost\.net|mylottomail\.com|free-o-rama\.com):NUL Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) Email: [EMAIL PROTECTED] CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
