Hi,
I am trying to use filtering to control SPAM by IP address, which appears in headers of X-Originating-IP, Country and Received (according to an examination of internet headers in Outlook).
I put in a filtering rule, as follows, where I have put in quotes the entries that I have selected or typed in – but of course without quotes:
If the “CUSTOM” “X-Originating-IP” header “contains” “*23.90.57.*” then “reject”
I have tried it with the other headers and also without any asterisks, but the rules seem to be ignored. Filtering in general does work, if I filter on Subject or From
Any help you can provide is most appreciated.
Thanks and cheers,
Les
An example of the internet header I’m trying to filter is:
Received-SPF: pass (Cache: Last token {ip4:23.90.57.253} (res=PASS)) client-ip=23.90.57.253; envelope-from=<breed@dawnequipsin.com>; x-ip-name=dawnequipsin.com;
Received: from dawnequipsin.com (unverified [23.90.57.253])
by netspeed.com.au (SurgeMail 7.3e2) with ESMTP id 79483601-1928045
for <les.landau@netspeed.com.au>; Sat, 17 Oct 2020 03:22:15 +1100
Return-Path: <breed@dawnequipsin.com>
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=mail; d=dawnequipsin.com;
h=Date:From:MIME-Version:To:Subject:Message-ID:Content-Type:Content-Transfer-Encoding; i=breed@dawnequipsin.com;
bh=twv+brcDGD7G0o7GvcTQcasV2ig=;
b=QUBHc6BftlUC+K+0xDMKvTlchI7yr+GHfZAaiJ0skssA1JOJ3UZBf4lgJIHq3SRGoJ0staRTkKaL
VxjPOWxW/JRRgDHsNgkfGnXQ7EqKFtgXngzlSU6s/POqwB3gIP1DFsM980ZgdoLeUiH6QXN9Y3O0
OABx6jrxLR9vXnI/VvM=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=mail; d=dawnequipsin.com;
b=G3Pd1iNZD40hDAVDJY02s717PG8dVJ5xcLJbyDk732goBtU1wJjArKKC5ca6j39CVqaHMzgPNQcL
iEDm7W24I6OYTvAQCZ92rIxqfshfiC7+3MUIOq1/MeZaeWATOJzbTbl5UN+iqqjGNkWqTwRizo8h
ostV2vaQaKv09bxxn0U=;
Date: Fri, 16 Oct 2020 11:05:39 -0500
From: "Silencil" <breed@dawnequipsin.com>
MIME-Version: 1.0
Precedence: bulk
To: <les.landau@netspeed.com.au>
Subject: Tinnitus Discovery Leaves Doctors Speechless (Video)
Message-ID: <iEpnil2Bmi7p8Zk3QiezbGXvTQLEN03XycSOff8Dkhs.yrjY-ByOGMnvZVhKGLyweEaxlryJX4C9vOMk-7vSgiI@dawnequipsin.com>
Content-Type: text/html; charset=ISO-8859-1
Content-Transfer-Encoding: quoted-printable
X-Originating-IP: 23.90.57.253
X-Country: code=US country="United States" ip=23.90.57.253
X-Rcpt-To: <les.landau@netspeed.com.au>
X-SpamDetect: *********: 9.0 sd=9.0 Close nspam=1 nok=0 1.00 $0.98(X-SpamContent:isspam) $0.90(X-Phrase:isspam) $0.80(X-myrbl:unknown) $0.23(X-Country:States) 0.73(X-Mash:sameip) $0.46(spfpass) $0.50(X-LangGuess:English)
X-NakedCr: Body contained naked cr characters
X-Mash: sameip
X-SpamContent: IsSpam
X-LangGuess: English
X-Probe: +OK nothing bad found
X-Phrase: IsSpam score=1.00
X-MyRbl: Color=Unknown (rbl) Age=0 Spam=0 Notspam=0 Stars=0 Good=212 Friend=0 Surbl=0 Catch=0 r=0 ip=23.90.57.253
X-IP-stats: Incoming Last 0, First 0, in=216, out=0, spam=0 ip=23.90.57.253
Status: RO
X-UIDL: 87540
