Spam Filter ISP Support Forum

  New Posts New Posts RSS Feed - Filter by the Name in the To
  FAQ FAQ  Forum Search   Register Register  Login Login

Filter by the Name in the To

 Post Reply Post Reply
Author
ssullivan View Drop Down
Newbie
Newbie


Joined: 02 February 2006
Location: United States
Status: Offline
Points: 9
Post Options Post Options   Thanks (0) Thanks(0)   Quote ssullivan Quote  Post ReplyReply Direct Link To This Post Topic: Filter by the Name in the To
    Posted: 23 February 2010 at 11:30pm
I have been seeing some spam that has been coming in.  The name in the To field is the same but the email address it is tied to changes.  IE MyBigOne [jdoe@aol.com], MyBigOne [Janed@hotmail.com].  I would like to block it by name on the To (i.e. MyBigOne*).  How can I do this?
Back to Top
ssullivan View Drop Down
Newbie
Newbie


Joined: 02 February 2006
Location: United States
Status: Offline
Points: 9
Post Options Post Options   Thanks (0) Thanks(0)   Quote ssullivan Quote  Post ReplyReply Direct Link To This Post Posted: 24 February 2010 at 10:18am
The other catch to this would be.  If I allowed the Domain (i.e. yahoo.com) in a white list but was blocking it Name in the To (i.e. MyBigOne).  Which one takes happens?
Back to Top
yapadu View Drop Down
Senior Member
Senior Member


Joined: 12 May 2005
Status: Offline
Points: 272
Post Options Post Options   Thanks (0) Thanks(0)   Quote yapadu Quote  Post ReplyReply Direct Link To This Post Posted: 24 February 2010 at 11:35pm
The whitelist would take priority over all blacklists.  As soon as any condition for whitelist is found the message is allowed in.
Back to Top
ssullivan View Drop Down
Newbie
Newbie


Joined: 02 February 2006
Location: United States
Status: Offline
Points: 9
Post Options Post Options   Thanks (0) Thanks(0)   Quote ssullivan Quote  Post ReplyReply Direct Link To This Post Posted: 25 February 2010 at 9:36am

Okay that explains one part to this, but if the domain is not on the whotelist how can I block by just the Name that come across in the To field.

Back to Top
LogSat View Drop Down
Admin Group
Admin Group
Avatar

Joined: 25 January 2005
Location: United States
Status: Offline
Points: 4068
Post Options Post Options   Thanks (0) Thanks(0)   Quote LogSat Quote  Post ReplyReply Direct Link To This Post Posted: 26 February 2010 at 9:36pm
ssullivan,

The names/email addresses int he "to" and "from" headers are not the "real" recipient's and sender's email addresses - they are just text content that is inserted into the email's headers. They can match or mismatch the actual to/from addresses that mail servers act upon, depending on how the sender formats the email. When using the blacklist/whitelist filters to check addresses and domains, SpamFilter will only look at the real sender and recipient's addresses as specified in the MAIL FROM and RCPT TO smtp command. SpamFilter does not check the email addresses contained in the headers, as they can be easily faked.

This said, you can use the keyword filter to perform keyword searches against those headers, and thus look for the name in the "To:" header.

By default SpamFilter will not scan the headers for keywords, but you can use the following setting in the SpamFilter.ini file to change this behavior:

;if ScanAllHeaders is set to 1 SpamFilter will add all email's headers to the text examined for keywords and statistical Bayesian searches.

ScanAllHeaders=0


Roberto Franceschetti

LogSat Software

Spam Filter ISP
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down



This page was generated in 0.125 seconds.