Parish wrote: > Jeff wrote: > >> Parish wrote: >> >>> Jeff wrote: >>> >>>> I've got myself confused. I have been using NS4.7. My ISP is trying >>>> to help its users cut down on spam by comparing email to spam >>>> "blacklists" and includes a "Spam = Yes" if the sender is on the >>>> list. NS4.7 email filters don't include checking header info. >>>> I installed NS7 PR and I don't think it allowed search in headers >>>> either but I used the "customize" in the "filter rules" to create a >>>> customized header called "header" before realizing it probably still >>>> wouldn't search the actual header of the email. >>> >>> >>> >>> It does search the headers but not as a single entity but each >>> individual element, e.g. the From line, the Subject: line, etc. You >>> can call your filter "header" but you must search a specific line in >>> the header. >>> >>> For example I had a filter that checked the (non-standard) X-From_ line. >>> >>> Can you post an example of the header? >>> >>>> Anyway I wanted to give Mozilla 1.0 a try and installed it. It used >>>> the same profile folder as NS7. >>>> I see that in the filter rules, along with Subject, Sender..... Age >>>> in days, I have "header" there at the bottom of the list. >>>> I guess it's from what I did in NS7 but when I go to "customize" and >>>> select it for deletion, it is removed but when I go back to the >>>> filter rules it's still there at the bottom of the list. Also, when >>>> I go back in to "customize", its back again. I can't get rid of it. >>>> If I add another one in "customize", say "test", I can remove that >>>> one and it stays removed. >>>> Any ideas how to remove it? >>>> Also, I suppose this should go to the "wishlist" group, but is there >>>> any plans to include a "Header" search option in the Filter Rules? >>>> >>> >>> >> >> Here's an example of a email header that's been "blacklist" by my ISP >> (I xxxx out my email address. Hope the line wrapping doesn't cause a >> problem.). Using other email programs that search headers, I can ask >> it to look for "Spam" and "yes" (looking for the line "X-Spam-Flag = >> YES) and make have it delete the message - >> > > [snip] > >> X-Spam-Flag:YES > > > OK, Tools->Message Filters, click New. > In the left-hand drop-down select Customize. > In the New Message Header box enter "X-Spam-Flag" without the quotes > (don't include the ':' either). > Click Add, then click OK to dismiss the Customize window. > Back in the Filter Rules window select X-Spam-Flag from the left-hand > drop-down. > Leave the middle drop-down as Contains > In the right-hand box type "YES" without the quotes. > Set up the appropriate action in the Perform This Action at the bottom > of the window, click OK, and wait for some spam ;-) > > HTH > >> X-Spam-Checker-Version:SpamAssassin 2.01 (devel $Id: SpamAssassin.pm,v >> 1.61 2002/01/25 04:41:02 jmason Exp $) >> X-Spam-Report:10.28 hits, 5 required; * 0.7 -- Subject is all capitals >> * 0.5 -- Subject has an exclamation mark * 1.9 -- From: ends in >> numbers * 1.0 -- Missing Date: header * 3.3 -- HTML-only mail, with no >> text version * 2.8 -- Subject is full of 8-bit characters >> >> > >
Great! I'll give it a go. I didn't realize that the choices in the Filter Rules were pointing to actual lines in the email header! Thanks again. Jeff
