blocking email

[DaveS]

About once a day I receive email from a person/group that is trying to sell
various drugs. I started by blocking that particular sender but, of course,
then I would get another one from another "person". It is becoming more than
annoying at this point so I started to track some of the data by copying the
properties of the email sent. as an example:


Received: from 216.148.227.126 (unknown[211.50.43.240](misconfigured
sender))

by rwcrmxc22.comcast.net (rwcrmxc22) with SMTP

id <20050507055801r2200r35hje>; Sat, 7 May 2005 05:58:53 +0000

X-Originating-IP: [211.50.43.240]

X-MID: <[email protected]>

Date: Sat, 07 May 2005 00:54:22 -0600

Message-Id: <[email protected]>

From: Bridgette Macdonald <[email protected]>

To: (e-mail address removed)

Subject: pact Hista-Vent DA

Mime-Version: 1.0

Content-Type: multipart/alternative;

boundary="----=_Part_27688098_12817731.1955172908426"



There is nothing common in any of the emails that I tracked (6 in the last
couple of days) except the bolded numbers in the SMTP id (2005050). That is
always the same.

Is there anything I can extract out of this that will allow me to put a stop
to Outlook accepting these emails. Or is there something else I could be
doing to stop this nonsense? BTW many of the emails are exactly the same
content which makes me believe they are coming from one group/person. I have
a personal firewall on my system as well as anti virus software as well. I'm
running Windows XP and keep the software up to the latest versions, etc.

Thanks for your help and if I should be redirecting this elsewhere please
feel free to correct me.

Dave -
to email me replace "spam" with "comcast"

 

[Milly Staples [MVP - Outlook]]

Try "with specific words in the sender's address" and use "@disconnect.net"

--
Milly Staples [MVP - Outlook]

Post all replies to the group to keep the discussion intact. Due to
the (insert latest virus name here) virus, all mail sent to my personal
account will be deleted without reading.

After furious head scratching, DaveS asked:

| About once a day I receive email from a person/group that is trying
| to sell various drugs. I started by blocking that particular sender
| but, of course, then I would get another one from another "person".
| It is becoming more than annoying at this point so I started to track
| some of the data by copying the properties of the email sent. as an
| example:
|
|
| Received: from 216.148.227.126 (unknown[211.50.43.240](misconfigured
| sender))
|
| by rwcrmxc22.comcast.net (rwcrmxc22) with SMTP
|
| id <20050507055801r2200r35hje>; Sat, 7 May 2005 05:58:53
| +0000
|
| X-Originating-IP: [211.50.43.240]
|
| X-MID: <[email protected]>
|
| Date: Sat, 07 May 2005 00:54:22 -0600
|
| Message-Id: <[email protected]>
|
| From: Bridgette Macdonald <[email protected]>
|
| To: (e-mail address removed)
|
| Subject: pact Hista-Vent DA
|
| Mime-Version: 1.0
|
| Content-Type: multipart/alternative;
|
| boundary="----=_Part_27688098_12817731.1955172908426"
|
|
|
| There is nothing common in any of the emails that I tracked (6 in the
| last couple of days) except the bolded numbers in the SMTP id
| (2005050). That is always the same.
|
| Is there anything I can extract out of this that will allow me to put
| a stop to Outlook accepting these emails. Or is there something else
| I could be doing to stop this nonsense? BTW many of the emails are
| exactly the same content which makes me believe they are coming from
| one group/person. I have a personal firewall on my system as well as
| anti virus software as well. I'm running Windows XP and keep the
| software up to the latest versions, etc.
|
| Thanks for your help and if I should be redirecting this elsewhere
| please feel free to correct me.
|
| Dave -
| to email me replace "spam" with "comcast"

 

[Brian Tillman]

Try "with specific words in the sender's address" and use
"@disconnect.net"

Personally, I'd use simply "disconnect" or "disconnect.net" (i.e., no "@")

 

[DaveS]

Milly Staples [MVP - Outlook]

Try "with specific words in the sender's address" and use
"@disconnect.net"

Personally, I'd use simply "disconnect" or "disconnect.net" (i.e., no "@")

The problem goes a little deeper than that. "disconnent.net" is one of the
address specific words. Every one of the emails has a different address.
i.e. hotmail.com; nylink.com; cobblestonepub.com; rashphoto.com;
broadcast.com etc. Yet the content is much of this is exactly the same.
Can it be that I get that many emails from different people with exactly the
same content selling crap like "Viagra', etc.?

Any other help would be greatly appreciated.

Dave - to email me replace "spam" with "comcast">

 

[Brian Tillman]

The problem goes a little deeper than that. "disconnent.net" is one
of the address specific words. Every one of the emails has a
different address. i.e. hotmail.com; nylink.com; cobblestonepub.com;
rashphoto.com; broadcast.com etc. Yet the content is much of this is
exactly the same.

Then filter on the body of the message, not the headers. Filter on the
Asian network (211.50.43) being used to send the mail.