Mail Rules for "Content"

topic posted Tue, March 9, 2010 - 12:38 PM by  Unsubscribed
I'm receiving several spams a day from different addresses, all with links that, when you look at the message raw source, point to pages at "". When I visit preferences>account>rules, and enter that as content in messages that i want to move to junk, or delete, it doesn't do the job. Possibly because the links don't contain that part of the URL as seen in a plain message, only when I show view it as "Raw Source." I've spent a bit of time trying to figure something else they have in common but can only come up with this.

Am I out of luck?
posted by:
  • Re: Mail Rules for "Content"

    Tue, March 9, 2010 - 2:47 PM
    Could be that the filtering rules in Mail suck. It's one of the many reasons I use GyazMail instead, since I found the rules feature severely lacking.
  • Re: Mail Rules for "Content"

    Tue, March 9, 2010 - 2:50 PM
    My favorite method of spam filtering and opt-in bulk filtering is to have a website. You don't even need any content. Most places give you plaenty of free mail aliases.

    So, first get an address that's unlikely (n52l;, and never give it out. Then, whenever you give out your address, create a new alias based on the website ( When you get spam back, you know what the source is. A simpler way to do this is to set up one address as a "catch all" account, then you don't need to go and specifically create aliases.

    THEN, when you get spam from whatever@, you can set up a rule based on that address. (and send a nasty letter to whoever forwarded your address, like I did with Mac Mall).
    • Re: Mail Rules for "Content"

      Tue, March 9, 2010 - 3:07 PM
      I have an even easier method. I pay SpamSoap $3.50/mo to filter spam before it ever reaches my mail server. As a result, I get about a dozen spams a year. And then I don't have to spend any time maintaining email aliases and can happily continue using the same address I've been giving out since 1995.
      • Re: Mail Rules for "Content"

        Tue, March 9, 2010 - 3:22 PM
        ...and have you taken the time to filter through all the spams to find out how many real emails you're not getting?
        • Re: Mail Rules for "Content"

          Tue, March 9, 2010 - 5:04 PM
          I receive a Quarantine report each night (assuming I receive questionable spams that day) and can release them. Usually, there are 5-10 listed in the report and about 3 or 4 times each month it false positives. Otherwise, no problems whatsoever.

          It also blocks viruses and more.
          • Unsu...

            Re: Mail Rules for "Content"

            Wed, March 10, 2010 - 7:14 AM
            I've been relatively free of spam until lately with three or four sex e-mails from the people promoting the site(s). Would be curious to know how they got through earthlink's not-so-bad spam filters. As soon as I get through reading multiple manuals on new purchases lately, I'm going to dig into SpamSoap. Missing important e-mails would have been the only thing that would have spooked me about that. The report makes me more willing to pursue it. Thanks.
  • Re: Mail Rules for "Content"

    Wed, March 10, 2010 - 2:16 PM
    I've been adding about one or two new filters a week. The app works best when you select the evil spam, then open the "add rules" and choose "If any" "from" "+" "subject" then "move to message to trash"

    The form fields will autofill with the from address and subject. Copy/paste from the raw headers doesn't seem to work, but letting the app find the from address does.

    It's a pain when some of these assholes use auto-generated phony addresses and change the subject characters by one (p.r.o.n, p._r.o.n., p.r._o.n., etc.)

    Why can't we find a way to zone in on the bots' authors and DOS them?
    • Re: Mail Rules for "Content"

      Wed, March 10, 2010 - 4:11 PM
      "Why can't we find a way to zone in on the bots' authors and DOS them? "
      the hard part is Mail masking. I can, for example send you a letter from You to You. All i need is your address. The hitch to that is the message often stores IP address chains in the header to assist tracking.

      However, for bulk mailing, all you have to do is find a place that registers websites, give them a fake ID and use the mailer on their server to send. This works a few times before people catch on and turn off mail forwarding.

      the next step is to send out a virus that automatically sends TO all of the addresses on your machine, and scrambles them to form the From address. Then attach your virus to a windoze crack for the latest version of Photoshop, nude pictures of [fill in the latest hottie], or fake a torrent of the newest movie and you get instant widespread distribution. Have the virus check a file in a server you've Pwned and nothing links back to you. Have them send all the addresses to another server and you have an instant list of active mail accounts that's worth selling to other opt-in bulk mailers.

      Since all of this depends upon other people's servers that you've broken into, the risk is only as high as your method of cracking. the only thing you can actually do about it is to send letters to the sysops of the infected systems and let them know they've been Pwned. You can do that anonymously via spam cop. They've even started releasing forwarding addresses that allow you to auto-forward your spam to them via your junk mail filter.
  • Re: Mail Rules for "Content"

    Wed, March 10, 2010 - 4:36 PM
    I'm very happy with Spamsieve.
    • Re: Mail Rules for "Content"

      Thu, March 11, 2010 - 7:46 AM
      SpamSieve is great...but must run on your mail client. Which means your iPhone still gets nailed with spam. I was getting 60/hr. Every 15 minutes my iPhone would alert me that I had new email...and it was always 15 new spams.
      • Re: Mail Rules for "Content"

        Thu, March 11, 2010 - 8:36 AM
        I have a dedicated machine that acts as a mail sub-server in a way. All my accounts are IMAP and that machine is on all the time. So it filters the mail so that my working machine and iPhone don't get the spam.
        • Re: Mail Rules for "Content"

          Thu, March 11, 2010 - 1:42 PM
          I seem to be spam free on my Gmail & mac accounts. When I had spam, and tack it back to source, it mostly seems to come from the East coast of USA . Sure it can be spoof, but if its coming out of USA, should something be done about. We are paying for all this garbage traffic. In Australia we passed laws a few years ago to hit these guys hard.

Recent topics in "Mac OS X"