Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.sys.mac.apps > #21202 > unrolled thread

Mail app and junk

Back to article view | Back to comp.sys.mac.apps

Contents

  Mail app and junk pfj@doesn't.exist.com (Peter James) - 2014-02-25 08:19 +0000
    Re: Mail app and junk pfj@doesn't.exist.com (Peter James) - 2014-02-25 08:24 +0000
      Re: Mail app and junk Francois <xanrov@numericable.fr> - 2014-02-25 16:17 +0100
      Re: Mail app and junk Jolly Roger <jollyroger@pobox.com> - 2014-02-25 16:33 +0000
        Re: Mail app and junk Francois <xanrov@numericable.fr> - 2014-02-25 21:17 +0100
          Re: Mail app and junk Jolly Roger <jollyroger@pobox.com> - 2014-02-25 21:13 +0000
          Re: Mail app and junk Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-02-26 13:42 +0000
        Re: Mail app and junk pfj@doesn't.exist.com (Peter James) - 2014-02-25 20:36 +0000
          Re: Mail app and junk Jolly Roger <jollyroger@pobox.com> - 2014-02-25 21:21 +0000
            Re: Mail app and junk Jolly Roger <jollyroger@pobox.com> - 2014-02-25 21:27 +0000
              Re: Mail app and junk pfj@doesn't.exist.com (Peter James) - 2014-02-26 10:10 +0000
                Re: Mail app and junk Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-02-26 13:50 +0000
                Re: Mail app and junk Jolly Roger <jollyroger@pobox.com> - 2014-02-26 16:17 +0000
                  Re: Mail app and spam Erilar <drache@chibardun.netinvalid> - 2014-02-26 18:10 +0000
                  Re: Mail app and junk pfj@doesn't.exist.com (Peter James) - 2014-02-27 07:47 +0000
                    Re: Mail app and junk Jolly Roger <jollyroger@pobox.com> - 2014-02-27 15:01 +0000
              Re: Mail app and junk Lewis <g.kreme@gmail.com.dontsendmecopies> - 2014-02-26 13:48 +0000

#21202 — Mail app and junk

I seem to be getting a lot of email with headings similar to:

****SPAM:14.5**** 
A lot of mail has the heading as above, with the only thing different
being the number and decimal after the colon.

I'm rather puzzled as to who is identifying the mail as Spam, and why
Mail app won't delete it as per the spam filters I've installed.

Peter

-- 
-
The e-mail address obviously doesn't exist.  If it's essential
that you contact me then try peterATpfjamesDOTcoDOTuk

[toc] | [next] | [standalone]

#21203

Peter James <pfj@doesn't.exist.com> wrote:

> I seem to be getting a lot of email with headings similar to:
> 
> ****SPAM:14.5**** 
> A lot of mail has the heading as above, with the only thing different
> being the number and decimal after the colon.
> 
> I'm rather puzzled as to who is identifying the mail as Spam, and why
> Mail app won't delete it as per the spam filters I've installed.
> 
> Peter
I should have added to the OP the fact that if I right click on the
subject header and then click on "Apply Rules" the message is deleted.
If the rule exists then why doesn't Apple Mail app delete it upon
receipt?

Peter

-- 
-
The e-mail address obviously doesn't exist.  If it's essential
that you contact me then try peterATpfjamesDOTcoDOTuk

[toc] | [prev] | [next] | [standalone]

#21205

On 25/02/14 09:24, Peter James wrote:
> Peter James <pfj@doesn't.exist.com> wrote:
>
>> I seem to be getting a lot of email with headings similar to:
>>
>> ****SPAM:14.5****
>> A lot of mail has the heading as above, with the only thing different
>> being the number and decimal after the colon.
>>
>> I'm rather puzzled as to who is identifying the mail as Spam, and why
>> Mail app won't delete it as per the spam filters I've installed.
>>
>> Peter
> I should have added to the OP the fact that if I right click on the
> subject header and then click on "Apply Rules" the message is deleted.
> If the rule exists then why doesn't Apple Mail app delete it upon
> receipt?
>
> Peter
>

Exactly the same for me. I note that spam Sieve often doesn't consider 
the message as bad, and even, sometimes,the message is not spam at all.

[toc] | [prev] | [next] | [standalone]

#21206

On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
> Peter James <pfj@doesn't.exist.com> wrote:
>
>> I seem to be getting a lot of email with headings similar to:
>> 
>> ****SPAM:14.5**** 
>> A lot of mail has the heading as above, with the only thing different
>> being the number and decimal after the colon.
>> 
>> I'm rather puzzled as to who is identifying the mail as Spam, and why
>> Mail app won't delete it as per the spam filters I've installed.
>> 
> I should have added to the OP the fact that if I right click on the
> subject header and then click on "Apply Rules" the message is deleted.
> If the rule exists then why doesn't Apple Mail app delete it upon
> receipt?

The "****SPAM:14.5****" text is not being added by Apple Mail. So you or
your email provider must be using a spam facility that is adding that.

Choosing View > Message > Raw Source from the Mail menu bar will show
you the entire message, including the message headers. Either post the
headers in a reply here, or look at them yourself for clues as to what
spam facility is adding that text to your messages. 

To view the rules you have in place, choose Mail > Preferences from the
Mail menu bar, and then click the Rules tab at the top. One of the rules
in this list is responsible for deleting the messages. Examine each rule
and you will find one or more of them is looking for some criteria that
matches aspects of these messages.

Reply back here with what you find.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]

#21211

On 25/02/14 17:33, Jolly Roger wrote:
> On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
>> Peter James <pfj@doesn't.exist.com> wrote:
>>
>>> I seem to be getting a lot of email with headings similar to:
>>>
>>> ****SPAM:14.5****
>>> A lot of mail has the heading as above, with the only thing different
>>> being the number and decimal after the colon.
>>>
>>> I'm rather puzzled as to who is identifying the mail as Spam, and why
>>> Mail app won't delete it as per the spam filters I've installed.
>>>
>> I should have added to the OP the fact that if I right click on the
>> subject header and then click on "Apply Rules" the message is deleted.
>> If the rule exists then why doesn't Apple Mail app delete it upon
>> receipt?
>
> The "****SPAM:14.5****" text is not being added by Apple Mail. So you or
> your email provider must be using a spam facility that is adding that.
>
> Choosing View > Message > Raw Source from the Mail menu bar will show
> you the entire message, including the message headers. Either post the
> headers in a reply here, or look at them yourself for clues as to what
> spam facility is adding that text to your messages.
>
> To view the rules you have in place, choose Mail > Preferences from the
> Mail menu bar, and then click the Rules tab at the top. One of the rules
> in this list is responsible for deleting the messages. Examine each rule
> and you will find one or more of them is looking for some criteria that
> matches aspects of these messages.
>
> Reply back here with what you find.
>
Just got one , this time dumped as spam by spam Sieve. My IP is 
numericable.fr. Looks like it's not them who are adding this "SPAM" 
stamp, but as this is like Arab for me, here is the header :

  Return-Path: <49910-83149362@desideratum.fr.cu.cc>
Delivered-To: xanrov@numericable.fr
Received: from av8.nc.sdv.fr (av8.nc.sdv.fr [10.0.0.32])
	by pop10-5.nc.sdv.fr (Postfix) with ESMTP id 88A3D9FB33
	for <xanrov@numericable.fr>; Tue, 25 Feb 2014 20:59:18 +0100 (CET)
Received: from mx6.tech.numericable.fr (av8.nc.sdv.fr [10.0.0.32])
	by av8.nc.sdv.fr (Postfix) with ESMTP id 6DFC813F632
	for <xanrov@numericable.fr>; Tue, 25 Feb 2014 20:59:18 +0100 (CET)
X-Vr-SpamScore: 144
Received: from ip7.p8.fr.cu.cc (ip7.p8.fr.cu.cc [212.83.168.217])
	by mx6.tech.numericable.fr (Postfix) with ESMTP id 6626A11F73E
	for <xanrov@numericable.fr>; Tue, 25 Feb 2014 20:59:18 +0100 (CET)
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed/relaxed; s=default; 
d=mesideespromo.fr.cu.cc;
 
h=Content-Type:MIME-Version:List-Unsubscribe:To:Subject:From:Reply-To:Message-ID:Date; 
i=serviceclient@mesideespromo.fr.cu.cc;
  bh=gzw2pmvMKg6Wwyxln1sCw7eJLxY=;
 
b=hNwfgtAzAMdLjcIdEhqkgzb8rWegM/xeFWKK7GjzACjYWIUK8EAcSYjZXZneuk1zyI1kF1cOlWI1
 
FXGMZQ7m5PdSN0C872Bk03nnclzBfCaGayzBu/nrVVg2aJzjQmnhEqbrg0l/irK77xFEK8cGlcOS
    WMlTPMQKcGZ2IYzBHw8=
DomainKey-Signature: a=rsa-sha1; c=nofws; q=dns; s=default; 
d=mesideespromo.fr.cu.cc;
 
b=JAXlfZaVDav7Kp0CWNg+u9FC6ydGC+Q9nEIsf5a3PN5HoHL/hy/4nJ/UIS3kXgo7yx70zmnhgB3l
 
tUZ4xYo2JfcZvTvfbBNW3QbZyS03oB9mq4BdUd0CXj5ypLP45QPkv0w9wbMYJISornJz1bZhR0Dz
    fiD9UOI5mqNBWNAIvu0=;
Content-Type: multipart/alternative;
  boundary="=_dc228dcf690019a99a621ec57d8fb92f"
MIME-Version: 1.0
Precedence: bulk
List-Unsubscribe: 
<http://api.mesideespromo.fr.cu.cc/unsubscribe.html?ue=49705928&us=a647b78&uk=XkmlivahC3nQ2cFqVgnz16cmDRoXQiUKqVH7>,
 
<mailto:v2-49705928-a647b78-XkmlivahC3nQ2cFqVgnz16cmDRoXQiUKqVH7@list-unsubscribe.net>
To: xanrov@numericable.fr
X-Tracker: 49910-83149362
Subject: 
***SPAM***=?UTF-8?Q?Dans_l=27attente_de_la_confirmation_de_vos_coordonn?=
  =?UTF-8?Q?=C3=A9es?=
From: "Invitation Z15XB992" <serviceclient@mesideespromo.fr.cu.cc>
Reply-To: "Invitation Z15XB992" <abuse@mesideespromo.fr.cu.cc>
Message-ID: <0.0.5.427.1CF3263A2393C0E.0@ip7.p8.fr.cu.cc>
Date: Tue, 25 Feb 2014 20:56:12 +0100
X-AV-Checked: clean on av8

--=_dc228dcf690019a99a621ec57d8fb92f
Content-Transfer-Encoding: 8bit
Content-Type: text/plain; charset=UTF-8

What do you make of it ?

[toc] | [prev] | [next] | [standalone]

#21213

On 2014-02-25, Francois <xanrov@numericable.fr> wrote:
>
> Just got one

Hmm... I was replying to Peter James, the original poster in this
thread. Unless you are Peter James, or you are using the same email
provider and spam facility as Peter James, I'd rather you not confuse
matters with your own information. If you need help with something,
please start a new thread of your own.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]

#21223

In message <bn4c2cFc8nrU1@mid.individual.net> 
  Francois <xanrov@numericable.fr> wrote:
> On 25/02/14 17:33, Jolly Roger wrote:
>> On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
>>> Peter James <pfj@doesn't.exist.com> wrote:
>>>
>>>> I seem to be getting a lot of email with headings similar to:
>>>>
>>>> ****SPAM:14.5****
>>>> A lot of mail has the heading as above, with the only thing different
>>>> being the number and decimal after the colon.
>>>>
>>>> I'm rather puzzled as to who is identifying the mail as Spam, and why
>>>> Mail app won't delete it as per the spam filters I've installed.
>>>>
>>> I should have added to the OP the fact that if I right click on the
>>> subject header and then click on "Apply Rules" the message is deleted.
>>> If the rule exists then why doesn't Apple Mail app delete it upon
>>> receipt?
>>
>> The "****SPAM:14.5****" text is not being added by Apple Mail. So you or
>> your email provider must be using a spam facility that is adding that.
>>
>> Choosing View > Message > Raw Source from the Mail menu bar will show
>> you the entire message, including the message headers. Either post the
>> headers in a reply here, or look at them yourself for clues as to what
>> spam facility is adding that text to your messages.
>>
>> To view the rules you have in place, choose Mail > Preferences from the
>> Mail menu bar, and then click the Rules tab at the top. One of the rules
>> in this list is responsible for deleting the messages. Examine each rule
>> and you will find one or more of them is looking for some criteria that
>> matches aspects of these messages.
>>
>> Reply back here with what you find.
>>
> Just got one , this time dumped as spam by spam Sieve. My IP is 
> numericable.fr. Looks like it's not them who are adding this "SPAM" 
> stamp, but as this is like Arab for me, here is the header :

Some spam software is stupid enough that it will not scan emails that it
sees are already tagged.


-- 
Battlemage? That's not a profession. It barely qualifies as a hobby.
'Battlemage' is about impressive a title as 'Lord of the Dance'. <PAUSE>
I'm adding Lord of the Dance to my titles.

[toc] | [prev] | [next] | [standalone]

#21212

Jolly Roger <jollyroger@pobox.com> wrote:

> On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
> > Peter James <pfj@doesn't.exist.com> wrote:
> >
> >> I seem to be getting a lot of email with headings similar to:
> >> 
> >> ****SPAM:14.5**** 

> 
> The "****SPAM:14.5****" text is not being added by Apple Mail. So you or
> your email provider must be using a spam facility that is adding that.
I checked the raw header of the message and found the following,
inserted by my provider.


Message-ID:
<20140225194614.9671.2012902307.swift@med-fit.activehosted.com>
X-Message-Linecount: 370
X-Connected-IP: 67.228.34.46:45722
X-Body-Linecount: 347
X-Message-Size: 12631
X-Body-Size: 11224
X-Received-Count: 2
X-Recipient-Count: 1
X-Local-Recipient-Count: 1
X-Local-Recipient-Defer-Count: 0
X-Local-Recipient-Fail-Count: 0
X-Spam-Score: 5.6
X-Spam-Score-Int: 56
X-Spam-Bar: +++++
X-Spam-Report: Spam detection software, running on the system
"j.spamless.aa.net.uk", has
 processed this message and it scored (5.6 points).
  pts  rule name              description
 ---- ----------------------
--------------------------------------------------
 -0.0 RCVD_IN_DNSWL_NONE     RBL: Sender listed at
http://www.dnswl.org/, no
                             trust
                             [67.228.34.46 listed in list.dnswl.org]
 -0.0 SPF_HELO_PASS          SPF: HELO matches SPF record
 -0.0 SPF_PASS               SPF: sender matches SPF record
 -0.5 RP_MATCHES_RCVD        Envelope sender domain matches handover
relay domain
  5.0 KAM_BODY_URIBL_PCCC    Body contains URI listed in PCCC URIBL
                             [URIs: emlnk1.com]
  0.1 URI_HAS_IMAGES         URI: contains images
  0.6 HTML_IMAGE_RATIO_04    BODY: HTML has a low ratio of text to image
area
  0.1 HTML_MESSAGE           BODY: HTML included in message
  0.3 HTML_STOOPID_02        RAW: stupid HTML: empty STRONG tag
 -0.1 DKIM_VERIFIED          DKIM_VERIFIED
 -0.1 DKIM_VALID             Message has at least one valid DKIM or DK
signature
  0.1 DKIM_SIGNED            Message has a DKIM or DK signature, not
necessarily valid
  0.0 RCVD_NOT_IN_IPREPDNS   Sender not listed at
                             http://www.chaosreigns.com/iprep/
  0.1 KAM_UNSUB1             Unsubscription Spams
X-Spam-Mark-Threshold: 5 (System default as User or Domain preference
has not set)
X-Spam-Reject-Threshold: 20 (System default as User or Domain preference
has not set)
X-Spam-Flag: YES
Subject: ****SPAM:5.6**** Sonomed Ultrasound Offers 
X-Delivered-To: peter@pfjames.co.uk (peter@pfjames.co.uk)
X-Message-Age: 4
X-AA-BETA: r=m_s-s_t m2=56 m3= m4= m5= m8= m9= rejint= reqint=


--_=_swift-1491679998530cee1edf7342.15803331_=_
Content-Type: text/plain; charset=utf-8

_____________________________________________________________
I have two rules that I thought would delete these messages unread, and
they read:

Any message that contains SPAM delete
and
Any message that contains  ****SPAM?**** delete

I seem to remember reading that the ? symbol in these circumstances
would be read as any symbol or number.  Or am I wrong here?

Peter

-- 
-
The e-mail address obviously doesn't exist.  If it's essential
that you contact me then try peterATpfjamesDOTcoDOTuk

[toc] | [prev] | [next] | [standalone]

#21214

On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
> Jolly Roger <jollyroger@pobox.com> wrote:
>
>> On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
>> > Peter James <pfj@doesn't.exist.com> wrote:
>> >
>> >> I seem to be getting a lot of email with headings similar to:
>> >> 
>> >> ****SPAM:14.5**** 
>> 
>> The "****SPAM:14.5****" text is not being added by Apple Mail. So you or
>> your email provider must be using a spam facility that is adding that.

> I checked the raw header of the message and found the following,
> inserted by my provider.
>
[snip]
>
> X-Spam-Report: Spam detection software, running on the system
> "j.spamless.aa.net.uk", has processed this message and it scored (5.6
> points).
>   pts  rule name              description
> X-Spam-Flag: YES
> Subject: ****SPAM:5.6**** Sonomed Ultrasound Offers 
[snip]

Someone upstream from you (probably your email provider) is using this
service to mark spam for you. You'll need to contact them if you want
them to change the way spam messages are marked or treated.

> I have two rules that I thought would delete these messages unread, and
> they read:
>
> Any message that contains SPAM delete

Do you mean "any message whose *subject* contains "SPAM"?

If so, this rule should get triggered when this message is encountered
in your Inbox.

> and
> Any message that contains  ****SPAM?**** delete
>
> I seem to remember reading that the ? symbol in these circumstances
> would be read as any symbol or number.  Or am I wrong here?

No, I haven't ever seen the "?" character used in Mail rules. I just did
a test and the "?" character seems to be taken literally - in other
words only a subject with "****SPAM?***" would match. 

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]

#21215

On 2014-02-25, Jolly Roger <jollyroger@pobox.com> wrote:
> On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
>> Jolly Roger <jollyroger@pobox.com> wrote:
>>
>>> On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
>>> > Peter James <pfj@doesn't.exist.com> wrote:
>>> >
>>> >> I seem to be getting a lot of email with headings similar to:
>>> >> 
>>> >> ****SPAM:14.5**** 
>>> 
>>> The "****SPAM:14.5****" text is not being added by Apple Mail. So you or
>>> your email provider must be using a spam facility that is adding that.
>
>> I checked the raw header of the message and found the following,
>> inserted by my provider.
>>
> [snip]
>>
>> X-Spam-Report: Spam detection software, running on the system
>> "j.spamless.aa.net.uk", has processed this message and it scored (5.6
>> points).
>>   pts  rule name              description
>> X-Spam-Flag: YES
>> Subject: ****SPAM:5.6**** Sonomed Ultrasound Offers 
> [snip]
>
> Someone upstream from you (probably your email provider) is using this
> service to mark spam for you. You'll need to contact them if you want
> them to change the way spam messages are marked or treated.
>
>> I have two rules that I thought would delete these messages unread, and
>> they read:
>>
>> Any message that contains SPAM delete
>
> Do you mean "any message whose *subject* contains "SPAM"?
>
> If so, this rule should get triggered when this message is encountered
> in your Inbox.
>
>> and
>> Any message that contains  ****SPAM?**** delete
>>
>> I seem to remember reading that the ? symbol in these circumstances
>> would be read as any symbol or number.  Or am I wrong here?
>
> No, I haven't ever seen the "?" character used in Mail rules. I just did
> a test and the "?" character seems to be taken literally - in other
> words only a subject with "****SPAM?***" would match. 

BTW, notice the "X-Spam-Flag: YES" header above? You could create a rule
to specifically look for that header if you wanted. Here's how:

1. From the Mail menu bar, choose Mail > Preferences, then click the
Rules tab at the top.
2. Click Add Rule.
3. Click the "Any recipient" menu and choose "Edit header list".
4. Click the [+] button and add a new header named "X-Spam-Flag".
5. Click the "Any recipient" menu again and choose "X-Spam-Flag".
6. Click the "contains" menu and choose "is equal to".
7. Type the word "YES" in the text box.
8. Set the rest of the options in the rule window accordingly.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]

#21222

Jolly Roger <jollyroger@pobox.com> wrote:

> snipped
> BTW, notice the "X-Spam-Flag: YES" header above? You could create a rule
> to specifically look for that header if you wanted. Here's how:
> 
> 1. From the Mail menu bar, choose Mail > Preferences, then click the
> Rules tab at the top.
> 2. Click Add Rule.
> 3. Click the "Any recipient" menu and choose "Edit header list".
This brings up a box with menu choices shown as :
From
To
CC
Subject
I assume "From would be the correct choice?
> 4. Click the [+] button and add a new header named "X-Spam-Flag".
Header?  Do you mean "Description" or "Any recipient?
> 5. Click the "Any recipient" menu again and choose "X-Spam-Flag".
Trying either of description or any recipient fails to show
"X-Flag-Spam"
> 6. Click the "contains" menu and choose "is equal to".
> 7. Type the word "YES" in the text box.
> 8. Set the rest of the options in the rule window accordingly.

Using Mail 7.2 and OS X 10.9.2

Peter

-- 
-
The e-mail address obviously doesn't exist.  If it's essential
that you contact me then try peterATpfjamesDOTcoDOTuk

[toc] | [prev] | [next] | [standalone]

#21225

In message <1lho6po.p367r61qd574gN%pfj@doesn't.exist.com> 
  Peter James <pfj@doesn't.exist.com> wrote:
> Jolly Roger <jollyroger@pobox.com> wrote:

>> snipped
>> BTW, notice the "X-Spam-Flag: YES" header above? You could create a rule
>> to specifically look for that header if you wanted. Here's how:
>> 
>> 1. From the Mail menu bar, choose Mail > Preferences, then click the
>> Rules tab at the top.
>> 2. Click Add Rule.
>> 3. Click the "Any recipient" menu and choose "Edit header list".
> This brings up a box with menu choices shown as :
> From
> To
> CC
> Subject
> I assume "From would be the correct choice?

No. Click on the words "Any recipient" and you get a very long list of
things to match on. The last item is "Edit Header List…" as is about 20
down.

<https://www.dropbox.com/s/dofdjxhh866dhl4/Screenshot%202014-02-26%2006.50.31.PNG>

>> 4. Click the [+] button and add a new header named "X-Spam-Flag".
> Header?  Do you mean "Description" or "Any recipient?

Start over with the instructions.

-- 
Don't be afraid to be weak, Don't be too proud to be strong.

[toc] | [prev] | [next] | [standalone]

#21227

On 2014-02-26, Peter James <pfj@doesn't.exist.com> wrote:
> Jolly Roger <jollyroger@pobox.com> wrote:
>
>> snipped
>> BTW, notice the "X-Spam-Flag: YES" header above? You could create a rule
>> to specifically look for that header if you wanted. Here's how:
>> 
>> 1. From the Mail menu bar, choose Mail > Preferences, then click the
>> Rules tab at the top.
>> 2. Click Add Rule.
>> 3. Click the "Any recipient" menu and choose "Edit header list".

> This brings up a box with menu choices shown as :
> From
> To
> CC
> Subject

Why'd you stop there? Like I said, "Edit header list" is what you want.
It's at the very bottom:

<http://jollyroger.kicks-ass.org/mail/rules-edit_header_list.png>

> I assume "From would be the correct choice?

No. "Edit header list" is the correct choice. See above.

>> 4. Click the [+] button and add a new header named "X-Spam-Flag".

> Header?  Do you mean "Description" or "Any recipient?

See above.

>> 5. Click the "Any recipient" menu again and choose "X-Spam-Flag".

> Trying either of description or any recipient fails to show
> "X-Flag-Spam"

See above.

>> 6. Click the "contains" menu and choose "is equal to".
>> 7. Type the word "YES" in the text box.
>> 8. Set the rest of the options in the rule window accordingly.

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]

#21228 — Re: Mail app and spam

OK, changed subject line.
This may or not be useful, but here goes.
My ISP uses a spam filter that tends to miss some, but I discovered there
was a way to stop the persistent misses. The basic way to add to their
"spam” list is just to forward with full headers, but some persistent junk
was getting past.  I can, however, go directly to my "console" and add
"enemies", so I began opening the headers o look for the parts that were
not mutating and found good candidates.  Some of my real email got caught
up in my experiments, so I hd to individually label them "friend", but I am
now getting VERY little spam on either laptop or iPad(Mail.app on both)

I discovered that the part of the spammers' addresses after the @ did NOT
change.


-- 
Erilar, biblioholic medievalist with iPad

[toc] | [prev] | [next] | [standalone]

#21229

Jolly Roger <jollyroger@pobox.com> wrote:

> On 2014-02-26, Peter James <pfj@doesn't.exist.com> wrote:
> > Jolly Roger <jollyroger@pobox.com> wrote:
> >
> >> snipped
> >> BTW, notice the "X-Spam-Flag: YES" header above? You could create a rule
> >> to specifically look for that header if you wanted. Here's how:
> >> 
> >> 1. From the Mail menu bar, choose Mail > Preferences, then click the
> >> Rules tab at the top.
> >> 2. Click Add Rule.
> >> 3. Click the "Any recipient" menu and choose "Edit header list".
> 
> > This brings up a box with menu choices shown as :
> > From
> > To
> > CC
> > Subject
> 
> Why'd you stop there? Like I said, "Edit header list" is what you want.
> It's at the very bottom:
> 
> <http://jollyroger.kicks-ass.org/mail/rules-edit_header_list.png>
> 
> > I assume "From would be the correct choice?
> 
> No. "Edit header list" is the correct choice. See above.
> 
> >> 4. Click the [+] button and add a new header named "X-Spam-Flag".
> 
> > Header?  Do you mean "Description" or "Any recipient?
> 
> See above.
> 
> >> 5. Click the "Any recipient" menu again and choose "X-Spam-Flag".
> 
> > Trying either of description or any recipient fails to show
> > "X-Flag-Spam"
> 
> See above.
> 
> >> 6. Click the "contains" menu and choose "is equal to".
> >> 7. Type the word "YES" in the text box.
> >> 8. Set the rest of the options in the rule window accordingly.
OK, all done.  And it proves when in doubt, read the blxxxy instructions
carefully.
Many thanks,
Peter

-- 
-
The e-mail address obviously doesn't exist.  If it's essential
that you contact me then try peterATpfjamesDOTcoDOTuk

[toc] | [prev] | [next] | [standalone]

#21230

On 2014-02-27, Peter James <pfj@doesn't.exist.com> wrote:
> OK, all done.  And it proves when in doubt, read the blxxxy instructions
> carefully.
> Many thanks,
> Peter

De nada... : )

-- 
E-mail sent to this address may be devoured by my ravenous SPAM filter.
I often ignore posts from Google. Use a real news client instead.

JR

[toc] | [prev] | [next] | [standalone]

#21224

In message <bn4g5cFcrkaU3@mid.individual.net> 
  Jolly Roger <jollyroger@pobox.com> wrote:
> On 2014-02-25, Jolly Roger <jollyroger@pobox.com> wrote:
>> On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
>>> Jolly Roger <jollyroger@pobox.com> wrote:
>>>
>>>> On 2014-02-25, Peter James <pfj@doesn't.exist.com> wrote:
>>>> > Peter James <pfj@doesn't.exist.com> wrote:
>>>> >
>>>> >> I seem to be getting a lot of email with headings similar to:
>>>> >> 
>>>> >> ****SPAM:14.5**** 
>>>> 
>>>> The "****SPAM:14.5****" text is not being added by Apple Mail. So you or
>>>> your email provider must be using a spam facility that is adding that.
>>
>>> I checked the raw header of the message and found the following,
>>> inserted by my provider.
>>>
>> [snip]
>>>
>>> X-Spam-Report: Spam detection software, running on the system
>>> "j.spamless.aa.net.uk", has processed this message and it scored (5.6
>>> points).
>>>   pts  rule name              description
>>> X-Spam-Flag: YES
>>> Subject: ****SPAM:5.6**** Sonomed Ultrasound Offers 
>> [snip]
>>
>> Someone upstream from you (probably your email provider) is using this
>> service to mark spam for you. You'll need to contact them if you want
>> them to change the way spam messages are marked or treated.
>>
>>> I have two rules that I thought would delete these messages unread, and
>>> they read:
>>>
>>> Any message that contains SPAM delete
>>
>> Do you mean "any message whose *subject* contains "SPAM"?
>>
>> If so, this rule should get triggered when this message is encountered
>> in your Inbox.
>>
>>> and
>>> Any message that contains  ****SPAM?**** delete
>>>
>>> I seem to remember reading that the ? symbol in these circumstances
>>> would be read as any symbol or number.  Or am I wrong here?
>>
>> No, I haven't ever seen the "?" character used in Mail rules. I just did
>> a test and the "?" character seems to be taken literally - in other
>> words only a subject with "****SPAM?***" would match. 

> BTW, notice the "X-Spam-Flag: YES" header above? You could create a rule
> to specifically look for that header if you wanted. Here's how:

An this is the BEST way to filter messages that test positive for spam.

*HOWEVER* it is a bad idea to filter on X-Spam-Flag: No and assume that
header indicates a good email.

> 1. From the Mail menu bar, choose Mail > Preferences, then click the
> Rules tab at the top.
> 2. Click Add Rule.
> 3. Click the "Any recipient" menu and choose "Edit header list".
> 4. Click the [+] button and add a new header named "X-Spam-Flag".
> 5. Click the "Any recipient" menu again and choose "X-Spam-Flag".
> 6. Click the "contains" menu and choose "is equal to".
> 7. Type the word "YES" in the text box.
> 8. Set the rest of the options in the rule window accordingly.

Use a similar methodology to sort list messages on the List-ID header.


-- 
Well boys, we got three engines out, we got more holes in us than a
horse trader's mule, the radio is gone and we're leaking fuel and if we
was flying any lower why we'd need sleigh bells on this thing... but we
got one little budge on those Roosskies.  At this height why they might
harpoon us but they dang sure ain't gonna spot us on no radar screen!

[toc] | [prev] | [standalone]

Back to top | Article view | comp.sys.mac.apps

csiph-web