Forum Discussion

highroyds's avatar
highroyds
On our wavelength
2 months ago

Email filters

Hi,

I've been trying to block spam coming to one of my email addresses.  I followed the instructions by using the filters within the mail settings specially for blocking emails from certain domains.

No matter what I put the emails are STILL getting through.  The spam thats getting through are using one domain for the 'From' but another domain within the source.

I'm attaching a screenshot of the filter section, this is how I have my filters set for Domain is exactly with the @ symbol then the domain or with just the domain address.  I've even tried to block the emails but some how they still get through.  I would welcome some advice on how to get the filters to actually work please ??  

  • coenoby's avatar
    coenoby
    Very Insightful Person
    2 months ago
    highroyds wrote:

     I would welcome some advice on how to get the filters to actually work please ??  

    So are the emails from that domain currently going into your Spam folder?

    If so, you cannot use filter rules to block them because the VM filter rules are only applied to emails as they arrive in the Inbox. If VM are already flagging them as spam then you cannot use the filter rules to block them.

    Assuming they are appearing in your Inbox, my suggestion would be to go your filter rule, click  on "is exactly" and try "Contains". See of that works any better.

    Coenoby

  • Gareth_L's avatar
    Gareth_L
    Forum Team
    2 months ago

    Hello highroyds.

    We Just wanted to send a quick message to see if you followed the advice from coenoby.

    If you still need any further assistance please let us know.

    Gareth_L

  • 用心棒's avatar
    用心棒
    Very Insightful Person
    2 months ago

    Should the issue persist view the email's raw / source text and post just the from: header line here, for example:

    ⋮
From: "Halara by Buy Mailers" <mail@eu.buymailers.com>
⋮

    -- 
    I'm a Very Insightful Person, I'm here to share knowledge, I don't work for Virgin Media. Learn more
    Have I helped? Select Mark as Helpful Answer or 🖒 Kudos to say thanks

    • highroyds's avatar
      highroyds
      On our wavelength
      2 months ago

      Heres an example:
      Email address states: shop at 26mai.ne
      But the source states this:

      Received: from smtpclienthelo ([100.107.82.9])
	by dcdir5-prd-nl1-vmo.nl1.unified.services with LMTP
	id BGzTA/pFYWdbYgcAXpNwKw:T6138
	(envelope-from <hmi2aqwdbpu@aol.com>)

      I have set the filter for 26mai.ne & @26mai.ne & aol.com & @aol.com  with the contains options yet they are still coming through.

  • 用心棒's avatar
    用心棒
    Very Insightful Person
    2 months ago

    You have posted Received header value. What value is show for From: header value; this line with begin with the text From:?

    • highroyds's avatar
      highroyds
      On our wavelength
      2 months ago

      From section states
      shop at 26mai.ne
      The name changes to all different people from AA Confirm to AA to RAC etc or whoever they are trying to be pretending to be.

      • coenoby's avatar
        coenoby
        Very Insightful Person
        2 months ago
        highroyds wrote:

        From section states
        shop at 26mai.ne
        The name changes to all different people from AA Confirm to AA to RAC etc or whoever they are trying to be pretending to be.

        That means that instead of the sender's address you may have to look for a common factor that appears in the text of emails to use in a filter to identify these emails.

        That might be a particular phrase that is unusual. The AA and RAC have both warned about these scam emails and for example in this link:

        https://www.rac.co.uk/drive/news/motoring-news/rac-warns-not-to-get-caught-out-by-scammers/ 

        the RAC point out that "Crucially, the email included several American words and spellings – ‘jumper’ cables, ‘tire’ repair tools and emergency ‘flashlight’."

        The phrases I have highlighted might be worth using in a filter.

        Coenoby