A lot of spam comes in with the email of info@<domain>. I have setup a filter 'Where the From header contains specific words' as *info@*
This filter only catches about 50% of these emails.
I look at the source and the From: field always has info@, but the 'info' is replaced by a string of random characters on the emails that make it through this filter in the filter log, but the SMTP logs doesn't show this.
How can I trap all of these emails?
From header filter not working as expected
-
- Site Admin
- Posts: 1127
- Joined: Mon Jun 10, 2002 6:31 pm
- Location: Melbourne, Victoria, Australia
Re: From header filter not working as expected
The SMTP service does not log the "from:" header, but the envelope SMTP sender, which is the email address in the MAIL FROM SMTP command. If you just need to check the envelope sender you could make a scripted filter with something like:
If InStr(1,UCase("%SENDERADDRESS%"),"INFO@") > 0 then
FilterResult=1
End If
If InStr(1,UCase("%SENDERADDRESS%"),"INFO@") > 0 then
FilterResult=1
End If