Parish wrote: > Jeff wrote: > >> I've got myself confused. I have been using NS4.7. My ISP is trying to >> help its users cut down on spam by comparing email to spam >> "blacklists" and includes a "Spam = Yes" if the sender is on the list. >> NS4.7 email filters don't include checking header info. >> I installed NS7 PR and I don't think it allowed search in headers >> either but I used the "customize" in the "filter rules" to create a >> customized header called "header" before realizing it probably still >> wouldn't search the actual header of the email. > > > It does search the headers but not as a single entity but each > individual element, e.g. the From line, the Subject: line, etc. You can > call your filter "header" but you must search a specific line in the > header. > > For example I had a filter that checked the (non-standard) X-From_ line. > > Can you post an example of the header? > >> Anyway I wanted to give Mozilla 1.0 a try and installed it. It used >> the same profile folder as NS7. >> I see that in the filter rules, along with Subject, Sender..... Age in >> days, I have "header" there at the bottom of the list. >> I guess it's from what I did in NS7 but when I go to "customize" and >> select it for deletion, it is removed but when I go back to the filter >> rules it's still there at the bottom of the list. Also, when I go back >> in to "customize", its back again. I can't get rid of it. If I add >> another one in "customize", say "test", I can remove that one and it >> stays removed. >> Any ideas how to remove it? >> Also, I suppose this should go to the "wishlist" group, but is there >> any plans to include a "Header" search option in the Filter Rules? >> > >
Here's an example of a email header that's been "blacklist" by my ISP (I xxxx out my email address. Hope the line wrapping doesn't cause a problem.). Using other email programs that search headers, I can ask it to look for "Spam" and "yes" (looking for the line "X-Spam-Flag = YES) and make have it delete the message - Subject:(����)ī��߱�! ������ ī�嵥��ũ�Դϴ� From:���� <[EMAIL PROTECTED]> To:<xxxxxxxxxxxx> X-UIDL:1029167803.14487.mail1,S=4222 X-Mozilla-Status:0001 X-Mozilla-Status2:00000000 Return-Path:<[EMAIL PROTECTED]> Delivered-To: xxxxxxxxxxxxxx Received:(qmail 14460 invoked from network); 12 Aug 2002 15:56:43 -0000 Received:from smtpx.ha-net.ptd.net ([207.44.96.108]) (envelope-sender<>) by mailb.ptd.net (qmail-ldap-1.03) with QMQP for <>; 12 Aug 2002 15:56:43 -0000 Delivered-To:CLUSTERHOST smtpx.ha-net.ptd.net xxxxxxxxxx Received:(qmail 1693 invoked by uid 50005); 12 Aug 2002 15:57:04 -0000 Received:from [EMAIL PROTECTED] by smtpx.ha-net.ptd.net by uid 50002 with qmail-scanner-1.10 (uvscan: v4.1.60/v4217. spamassassin. Clear:0. Processed in 2.035219 secs); 12 Aug 2002 15:57:04 -0000 Received:from unknown (HELO test.com) ([211.197.57.28]) (envelope-sender <[EMAIL PROTECTED]>) by smtpx.ha-net.ptd.net (qmail-ldap-1.03) with SMTP for <[EMAIL PROTECTED]>; 12 Aug 2002 15:57:01 -0000 X-Mailer:EVAMAIL 1.5 Content-Type:text/html; charset=euc-kr Content-Transfer-Encoding:base64 X-Qmail-Scanner-1.10:added fake MIME-Version header MIME-Version:1.0 X-Spam-Status:Yes, hits=10.3 required=5.0 tests=SUBJ_ALL_CAPS,PLING,FROM_ENDS_IN_NUMS,DATE_MISSING,CTYPE_JUST_HTML,SUBJ_FULL_OF_8BITS version=2.01 X-Spam-Flag:YES X-Spam-Checker-Version:SpamAssassin 2.01 (devel $Id: SpamAssassin.pm,v 1.61 2002/01/25 04:41:02 jmason Exp $) X-Spam-Report:10.28 hits, 5 required; * 0.7 -- Subject is all capitals * 0.5 -- Subject has an exclamation mark * 1.9 -- From: ends in numbers * 1.0 -- Missing Date: header * 3.3 -- HTML-only mail, with no text version * 2.8 -- Subject is full of 8-bit characters
