Hi,
I am trying to use
filtering to control SPAM by IP address, which appears in
headers of X-Originating-IP, Country and Received (according
to an examination of internet headers in Outlook).
I put in a filtering
rule, as follows, where I have put in quotes the entries
that I have selected or typed in – but of course without
quotes:
If the “CUSTOM”
“X-Originating-IP” header “contains” “*23.90.57.*” then
“reject”
I have tried it with the
other headers and also without any asterisks, but the rules
seem to be ignored. Filtering in general does work, if I
filter on Subject or From
Any help you can provide
is most appreciated.
Thanks and cheers,
Les
An example of the
internet header I’m trying to filter is:
Received-SPF: pass
(Cache: Last token {ip4:23.90.57.253} (res=PASS))
client-ip=23.90.57.253; envelope-from=<breed@dawnequipsin.com>;
x-ip-name=dawnequipsin.com;
Received: from
dawnequipsin.com (unverified [23.90.57.253])
by
netspeed.com.au (SurgeMail 7.3e2) with ESMTP id
79483601-1928045
for <les.landau@netspeed.com.au>;
Sat, 17 Oct 2020 03:22:15 +1100
Return-Path: <breed@dawnequipsin.com>
DKIM-Signature: v=1;
a=rsa-sha1; c=relaxed/relaxed; s=mail; d=dawnequipsin.com;
h=Date:From:MIME-Version:To:Subject:Message-ID:Content-Type:Content-Transfer-Encoding;
i=breed@dawnequipsin.com;
bh=twv+brcDGD7G0o7GvcTQcasV2ig=;
b=QUBHc6BftlUC+K+0xDMKvTlchI7yr+GHfZAaiJ0skssA1JOJ3UZBf4lgJIHq3SRGoJ0staRTkKaL
VxjPOWxW/JRRgDHsNgkfGnXQ7EqKFtgXngzlSU6s/POqwB3gIP1DFsM980ZgdoLeUiH6QXN9Y3O0
OABx6jrxLR9vXnI/VvM=
DomainKey-Signature:
a=rsa-sha1; c=nofws; q=dns; s=mail; d=dawnequipsin.com;
b=G3Pd1iNZD40hDAVDJY02s717PG8dVJ5xcLJbyDk732goBtU1wJjArKKC5ca6j39CVqaHMzgPNQcL
iEDm7W24I6OYTvAQCZ92rIxqfshfiC7+3MUIOq1/MeZaeWATOJzbTbl5UN+iqqjGNkWqTwRizo8h
ostV2vaQaKv09bxxn0U=;
Date: Fri, 16 Oct 2020
11:05:39 -0500
From: "Silencil" <breed@dawnequipsin.com>
MIME-Version: 1.0
Precedence: bulk
To: <les.landau@netspeed.com.au>
Subject: Tinnitus
Discovery Leaves Doctors Speechless (Video)
Message-ID: <iEpnil2Bmi7p8Zk3QiezbGXvTQLEN03XycSOff8Dkhs.yrjY-ByOGMnvZVhKGLyweEaxlryJX4C9vOMk-7vSgiI@dawnequipsin.com>
Content-Type: text/html;
charset=ISO-8859-1
Content-Transfer-Encoding:
quoted-printable
X-Originating-IP:
23.90.57.253
X-Country: code=US
country="United States" ip=23.90.57.253
X-Rcpt-To: <les.landau@netspeed.com.au>
X-SpamDetect: *********:
9.0 sd=9.0 Close nspam=1 nok=0 1.00
$0.98(X-SpamContent:isspam) $0.90(X-Phrase:isspam)
$0.80(X-myrbl:unknown) $0.23(X-Country:States)
0.73(X-Mash:sameip) $0.46(spfpass)
$0.50(X-LangGuess:English)
X-NakedCr: Body
contained naked cr characters
X-Mash: sameip
X-SpamContent: IsSpam
X-LangGuess: English
X-Probe: +OK nothing bad
found
X-Phrase: IsSpam
score=1.00
X-MyRbl: Color=Unknown
(rbl) Age=0 Spam=0 Notspam=0 Stars=0 Good=212 Friend=0
Surbl=0 Catch=0 r=0 ip=23.90.57.253
X-IP-stats: Incoming
Last 0, First 0, in=216, out=0, spam=0 ip=23.90.57.253
Status: RO
X-UIDL: 87540