Rule to block mail with Sent = None

[erichv]

The last bit of spam that gets through ens at the bottom of the lis
with sent = "none" - usually a 6kB mail but I can't block it on that a
some valid mails are also 6kB.
I tried setting date as < a date in the near past but that does no
stop it.

Any ideas?

Return-path: <xxxxxxx> where xxxxx is my address
Envelope-to: xxxxxxxxx
Delivery-date: Thu, 11 Feb 2010 13:55:20 +0200
Received: from h109-187-179-20.dyn.bashtel.ru ([109.187.179.20])
by www24.jnb2.host-h.net with smtp (Exim 4.69)
(envelope-from <xxxxxxx>)
id 1NfXdf-0005ld-0Q
for xxxxxxxxx; Thu, 11 Feb 2010 13:55:20 +0200
To: <xxxxxxxx>
Subject: Local representation needed
From: Irma Crouch <xxxxxxx>
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: Clear (ClamAV 0.95.3/10379/Thu Feb 11 05:10:46 2010)
X-Unfudged-Spam-Score: 4.9 (++++)
Delivered-To: xxxxx

 

[Brian Tillman [MVP-Outlook]]

The last bit of spam that gets through ens at the bottom of the list
with sent = "none" - usually a 6kB mail but I can't block it on that as
some valid mails are also 6kB.
I tried setting date as < a date in the near past but that does not
stop it.

Any ideas?

Return-path: <xxxxxxx> where xxxxx is my address
Envelope-to: xxxxxxxxx
Delivery-date: Thu, 11 Feb 2010 13:55:20 +0200
Received: from h109-187-179-20.dyn.bashtel.ru ([109.187.179.20])
by www24.jnb2.host-h.net with smtp (Exim 4.69)
(envelope-from <xxxxxxx>)
id 1NfXdf-0005ld-0Q
for xxxxxxxxx; Thu, 11 Feb 2010 13:55:20 +0200
To: <xxxxxxxx>
Subject: Local representation needed
From: Irma Crouch <xxxxxxx>
MIME-Version: 1.0
Content-Type: text/html; charset="ISO-8859-1"
Content-Transfer-Encoding: 7bit
X-Virus-Scanned: Clear (ClamAV 0.95.3/10379/Thu Feb 11 05:10:46 2010)
X-Unfudged-Spam-Score: 4.9 (++++)
Delivered-To: xxxxxx

Have you tried raising the sensitivity of the Junk E-mail filter? If these
messages are all from a Russian server, use a rule that looks for ".ru " in
the message header.

 

[erichv]

Have you tried raising the sensitivity of the Junk E-mail filter? I
these
messages are all from a Russian server, use a rule that looks for ".r
" in
the message header.

Thanks for coming back to me!

The example I chose just happens to be a .ru origen but a lot come
from yahoo (e-mail address removed) or (e-mail address removed) and simila
sites that does not filter out that easily. The only common denominato
is the "None" in the "sent" column