<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
</head>
<body>
<div>
<div style="white-space:normal">
<p dir="auto">Thanks Bill for the very helpful information.<br>
Harvey (Portland, Oregon, USA)<br>
~ ~ ~ <br>
On 10 Sep 2019, at 9:00, mailmate-request@lists.freron.com wrote:</p>
<blockquote>
<p dir="auto">Date: Tue, 10 Sep 2019 09:38:26 -0400<br>
From: "Bill Cole" <mmlist-20120120@billmail.scconsult.com><br>
To: "MailMate Users" <mailmate@lists.freron.com><br>
Subject: Re: [MlMt] Filtering junk mail<br>
Message-ID:<br>
<EE9B4BFE-6E2C-4D92-A542-C692729BC67D@billmail.scconsult.com><br>
Content-Type: text/plain; format=flowed<br>
<br>
On 10 Sep 2019, at 0:02, Harvey S. Leff wrote:<br>
<br>
I've been receiving multiple messages daily from China. Their text is<br>
in Chinese and there are no images. I don't even know what they are<br>
selling. The return addresses follow a pattern. Two recent messages<br>
are from jdeefs1045@126.com and vsuayyn221346@163.com.<br>
<br>
For what it's worth: 126.com and 163.com are 2 of the freemail domains<br>
run by NetEase, a major Chinese tech company. Unless you have personal<br>
acquaintances in China, you are unlikely to ever receive legitimate mail<br>
from users in either domain. Those domains are bit like China's analogs<br>
to hotmail.com and live.com.<br>
<br>
They do go into my Junk mailbox, but I don't know a way to filter<br>
these messages further. Examination of their raw messages show they<br>
were both received by a server, ajax-webmail-wmsvr124 (Coremail).<br>
<br>
That hostname pattern in the oldest Received header of messages is<br>
typical of NetEase webmail, which uses the Chinese webmail server<br>
software Coremail.<br>
<br>
However, if I search my mailboxes for this name, nothing is found, so<br>
it appears that I cannot create a smart mailbox to snag these<br>
messages. Any ideas?<br>
<br>
1. Filtering on the freemail domains (126.com and 163.com) is likely to<br>
be more generally useful.<br>
<br>
2. That specific name is one of hundreds (maybe thousands) of<br>
similarly-named webmail servers that handle all of the NetEase freemail<br>
domains, their business customers, and their own corporate email. It's<br>
mildly interesting that your junk all hits that one server but possibly<br>
just a coincidence.<br>
<br>
3. MM by default just searches "Common Headers and Unquoted Text" which<br>
does not include Received headers. You can change that to search any<br>
specific header in the Conditions section of the Smart Mailbox editing<br>
window, wbhere each condition has a drop-down menu listing the Most<br>
common headers to seearch and "Other..." which opens a selection window<br>
allowing you to choose literally any header MM has ever seen.<br>
<br>
--<br>
Bill Cole<br>
bill@scconsult.com or billcole@apache.org<br>
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)</p>
</blockquote>
</div>
</div>
</body>
</html>