New filter rule "Account"

Haplo · Trooper Joined: Mar 14, 2003 Posts: 17 Location: USA

Please add the ability to filter by "account" name. That way I can treat emails from a specific account a certain way.

Using "The 'To' Field" rule with "contains" a specific "email@address" does not work because the "to" address is not always legitimate. So;

[The 'To' Field] [contains] [email@address]

becomes;

[Account] [is] [junk]

This way you can use regular expressions, like always, but the option to go by account name is added.

The reason? To automatically delete ALL emails from my "junk" email account. Thank you.

Perry · Lieutenant Joined: Oct 19, 2003 Posts: 291 Location: USA

denn988 · Guest

Perry,

Unfortunately, what you have suggested will not always work out. I have received as many e-mails that do not contain my address somewhere in the header as I have that do contain it.

That inclusion is totally dependent on the software that the mail servers in the delivery route are using.

The only way that you will be able to reliably filter based on account is if MWP writes the program to allow it. They already track it, as demostrated by the fact that you can choose to have the 'Account' column displayed.

They would need to add an 'Account' option to the filter rules in order to be able to filter based on the user account.

Perry · Lieutenant Joined: Oct 19, 2003 Posts: 291 Location: USA

atom · Cadet Joined: Mar 25, 2003 Posts: 9 Location: Australia

I actually came in here to make the same suggestion (not for the first time), I would VERY much like to see an Account option added to the filter choices please (along the lines of the OE option "Where the message is from the specified account"). Smile

DearWebby · Posted: Thu Nov 20, 2003 12:05 pm Post subject:

Andrew, you CAN use Perry's solution.
Filter this way: "TO" contains
AND (all rules)
Whatever other things you want to filter by.

If something is not specifically to that account, you don't want it anyway.

You can even make a filter that allows you to group a bunch of different TO addresses. In tha case filter the TO, RegExp does contain, |[email protected]|[email protected]
AND (all rules)
whatever other condition you filter by.

It's no big deal if you totally lose spams that have dictionary-attack style faked TO addresses. I doubt that you would read them anyway.

atom · Cadet Joined: Mar 25, 2003 Posts: 9 Location: Australia

Thanks for the suggestion Webby but I actually want to catch the spam and everything else that goes to specific accounts (some legit newsletters/mass mailings, emails from friends using BCC etc don't place the addy in the To: field anyway). The machine on our LAN here at home that shares the internet conn and runs MWP does different things for different peoples accounts and actions are based on those specific accounts.

We have tried filters that look for the relevant addy in the To: field as well as the headers but they simply don't catch everything. We do have email accounts where the servers don't always state the actual email address somewhere in the header if BCC or forged headers are used. Things become even more complicated/unpredictable when the account in question is a catch-all address for a domain.

It may be possible to use filters for many accounts but it would be heaps easier and more reliable to simply be able to specify the account as a filter option.

As someone noted earlier MWP already distinguishes between accounts for the Account column so hopefully it won't be too difficult to add the filter option.

DearWebby · Posted: Thu Nov 20, 2003 1:48 pm Post subject:

Andrew, accounts are just filters that look for which user name and which POP was used to retrieve that mail.

Catch-alls have gone out of fashion. They are spam generators because they just invite dumb dictionary-attacks. Use the "aliases" file to direct all the legitimate addresses to a certain user name, for example: billing@...,orders@...,recipes@...>mom@...
abuse@...,quotes@...,postmaster@...>dad@...
If you do that, you eliminate a ton of spam right on the server, and do the sorting and funneling right there.

After that you can just look for that uname anywhere in the header.

Ikeb · Posted: Thu Nov 20, 2003 2:48 pm Post subject:

DearWebby · Posted: Thu Nov 20, 2003 4:55 pm Post subject:

Sorry, I should have said
if the "Entire Header", ( not "To" ) contains the account address, ....

To get to you, your account address has to be SOMEWHERE in your header.

stan_qaz · Posted: Thu Nov 20, 2003 10:28 pm Post subject:

I'm not so sure about that, I have two in my inbox now that do not contain my address except in an

X-RCPT-TO: <[email protected]>

That I believe is added by the servers spam fighting software.

DearWebby · Posted: Thu Nov 20, 2003 11:11 pm Post subject:

"In the ENTIRE header" would catch that.

The "3" in that spot shows that it is from machine 3 on your LAN.

I use those for authenticating mails from myself or anybody on the LAN, when peeling off spam that has my address forged in.

Ikeb · Posted: Thu Nov 20, 2003 11:19 pm Post subject:

Guest · Posted: Thu Nov 20, 2003 11:59 pm Post subject:

DearWebby · Posted: Fri Nov 21, 2003 12:42 am Post subject:

Perry, sure, it would be nice if they added
"account"
as a choice in the rules, just like TO, FROM, etc., and by version 4 or 5 they probably will.
Right now though they seem to be too busy enough adding people to FirstAlert. With my reporting volume I doubt I'll be added before Christmas. Therefore I doubt we will see any of the stuff, that we have been asking for this summer, to appear before February.

In your particular case, I fail to see why one would want to pay for more than one ISP account. However, even if you are on rural dial-up and need multiple accounts for family members to be n simultaneously, you can still run all the mail through your main account, and use the other acounts strictly for dial-up.


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 939 pages served in previous 5 minutes. Page Rendered: 0.426 seconds.