Print Page | Close Window

Filter by the Name in the To

Printed From: LogSat Software
Category: Spam Filter ISP
Forum Name: Spam Filter ISP Support
Forum Description: General support for Spam Filter ISP
URL: https://www.logsat.com/spamfilter/forums/forum_posts.asp?TID=6804
Printed Date: 05 February 2025 at 12:01pm


Topic: Filter by the Name in the To
Posted By: ssullivan
Subject: Filter by the Name in the To
Date Posted: 23 February 2010 at 11:30pm
I have been seeing some spam that has been coming in.  The name in the To field is the same but the email address it is tied to changes.  IE MyBigOne [jdoe@aol.com], MyBigOne [ mailto:Janed@hotmail.com - Janed@hotmail.com ].  I would like to block it by name on the To (i.e. MyBigOne*).  How can I do this?


Replies:
Posted By: ssullivan
Date Posted: 24 February 2010 at 10:18am
The other catch to this would be.  If I allowed the Domain (i.e. yahoo.com) in a white list but was blocking it Name in the To (i.e. MyBigOne).  Which one takes happens?

Posted By: yapadu
Date Posted: 24 February 2010 at 11:35pm
The whitelist would take priority over all blacklists.  As soon as any condition for whitelist is found the message is allowed in.

Posted By: ssullivan
Date Posted: 25 February 2010 at 9:36am

Okay that explains one part to this, but if the domain is not on the whotelist how can I block by just the Name that come across in the To field.

Posted By: LogSat
Date Posted: 26 February 2010 at 9:36pm
ssullivan,

The names/email addresses int he "to" and "from" headers are not the "real" recipient's and sender's email addresses - they are just text content that is inserted into the email's headers. They can match or mismatch the actual to/from addresses that mail servers act upon, depending on how the sender formats the email. When using the blacklist/whitelist filters to check addresses and domains, SpamFilter will only look at the real sender and recipient's addresses as specified in the MAIL FROM and RCPT TO smtp command. SpamFilter does not check the email addresses contained in the headers, as they can be easily faked.

This said, you can use the keyword filter to perform keyword searches against those headers, and thus look for the name in the "To:" header.

By default SpamFilter will not scan the headers for keywords, but you can use the following setting in the SpamFilter.ini file to change this behavior:

;if ScanAllHeaders is set to 1 SpamFilter will add all email's headers to the text examined for keywords and statistical Bayesian searches.

ScanAllHeaders=0




-------------
Roberto Franceschetti

http://www.logsat.com" rel="nofollow - LogSat Software

http://www.logsat.com/sfi-spam-filter.asp" rel="nofollow - Spam Filter ISP


Print Page | Close Window