HELP - Junk Rules NOT WORKING!!!

[M Skabialka]

The only junk rules I have which seem to work are those that filter on the
recipients name, absolutely NONE of them work that use words in the subject
or message.

I am bombarded with more and more junk mail every day, it takes more and
more time away from my work.

Is there a secret to writing junk rules filtering for words? I know it
won't look at HTML messages but the subject isn't in HTML, or is it????

All help would be appreciated!

Thanks,
Mich

 

[M Skabialka]

Here's a little of what I found in some of today's junk email based on what
you suggested....
Received: from 192.173.8.73 ([218.148.78.205]) - Kyonggi-do, Korea, South
Received: from 192.173.8.73 ([61.248.184.174]) - Pusan-gwangyoksi, Korea,
South
Received: from keromail.com ([205.251.248.204]) - Newfoundland and
Labrador, Canada
Received: from SERVER ([217.219.104.99]) - Fars, Iran
Received: from 192.173.8.73 ([61.171.18.184]) - Shanghai, China

(I used this site for the info:
http://www.geobytes.com/IpLocator.htm?GetLocation)

If only there were a pattern! None seem to come from the same place....

But, back to the original question; why doesn't filtering on words in the
subject line work?
Mich

 

[tk]

Here's a little of what I found in some of today's junk email based on what
you suggested....
Received: from 192.173.8.73 ([218.148.78.205]) - Kyonggi-do, Korea, South
Received: from 192.173.8.73 ([61.248.184.174]) - Pusan-gwangyoksi, Korea,
South
Received: from keromail.com ([205.251.248.204]) - Newfoundland and
Labrador, Canada
Received: from SERVER ([217.219.104.99]) - Fars, Iran
Received: from 192.173.8.73 ([61.171.18.184]) - Shanghai, China

(I used this site for the info:
http://www.geobytes.com/IpLocator.htm?GetLocation)

If only there were a pattern! None seem to come from the same place....

But, back to the original question; why doesn't filtering on words in the
subject line work?
Mich

You probably want to begin filtering on the message header. I've received
a

lot of spam from "isp.webly.net" I now delete all messages that come from
that address.

I discovered this by keeping all of my spam for a short period of time and
then viewing the headers by right-clicking and selecting "options" on an
individual message. After you look at several messages you should see a
pattern.

I checked the lines before the from lines to get to the IP address and not
the "usually" spoofed return address. To get some information that is
harder

to fake. Hope this helps.

D. Bryant


the

Wouldn't it be nice if someone from Microsoft had a reply???? This sucks!!