'to' equals 'from'

The filtering plug-in for ArGoSoft Mail Server (Pro and .NET)
Junior Member
Posts: 11
Joined: Tue Dec 02, 2008 12:34 am

'to' equals 'from'

Postby dstj » Tue Dec 02, 2008 12:38 am

I can't for the life of me get this filter to work.
Getting alot of spam with 'To' and 'From' fields that are equal.
I created the filter...

if 'To' equals '{From}'
and 'X-ArGoMail-Authenticated' is missing
then delete message and
stop all filters

Any pointers as to what i am doing wrong ??
Thanks in advance.

Dave

Developer
User avatar
Posts: 4431
Joined: Tue Apr 20, 2004 3:43 pm

Postby Alexander Telegin » Tue Dec 02, 2008 12:42 am

The 'equals' requires that they should be identical. Could you please post some email header here that you think must be caught.

Junior Member
Posts: 11
Joined: Tue Dec 02, 2008 12:34 am

Postby dstj » Tue Dec 02, 2008 12:50 am

Here are the headers ( i replaced my real domain with 'mydomain')

Received: from [88.0.204.16] by mail.mydomain.net with SMTP (HELO 16.Red-88-0-204.dynamicIP.rima-tde.net)
(ArGoSoft Mail Server Pro for WinNT/2000/XP, Version 1.8 (1.8.9.5)); Mon, 1 Dec 2008 17:37:21 -0600
To: <dstk@mydomain.com>
Subject: Re: Order status
From: <dstk@mydomain.com>
MIME-Version: 1.0
Importance: High
Content-Type: text/html
Return-Path: <dstk@mydomain.com>
Message-ID: <oa4ty6rs470hxhv.011220081737@mail.mydomain.net>
Date: Mon, 1 Dec 2008 17:37:21 -0600
SPF-Received: softfail


Here is part of the argo logs responsible for that spam email ...

12/1/2008 5:37:21 PM - ( 34921) Received 510 bytes
12/1/2008 5:37:21 PM - ( 34921) Processing server extension 1: C:\Program Files\Server Side Solutions\MailFilter\MailFilter.dll
12/1/2008 5:37:21 PM - ( 34921) Processing entry point ProcessFilter1
12/1/2008 5:37:21 PM - ( 34921) ProcessFilter1 returned 0
12/1/2008 5:37:21 PM - ( 34921) Preprocessing completed
12/1/2008 5:37:21 PM - ( 34921) Putting a message from dstk@mydomain.com, addressed to 1 recipients, to the outbox
12/1/2008 5:37:21 PM - ( 34921) Message from dstk@mydomain.com to 1 recipients has been queued
12/1/2008 5:37:21 PM - ( 34921) 250 Message accepted for delivery. <oa4ty6rs470hxhv.011220081737@mail.mydomain.net>
12/1/2008 5:37:22 PM - ( 34921) QUIT
12/1/2008 5:37:22 PM - ( 34921) 221 Aba he
12/1/2008 5:37:22 PM - SMTP connection with 88.0.204.16 [88.0.204.16] ended. ID=34921
12/1/2008 5:37:22 PM - { 34921} END SMTP

Developer
User avatar
Posts: 4431
Joined: Tue Apr 20, 2004 3:43 pm

Postby Alexander Telegin » Tue Dec 02, 2008 2:52 am

I just have tried, and it works here. Maybe it was overlapped by some other filter, or some of these fields contain invisible control chars or spaces. Try to add 'or To contains {From}' to condition.

Junior Member
Posts: 11
Joined: Tue Dec 02, 2008 12:34 am

Postby dstj » Tue Dec 02, 2008 3:27 am

Thanks Alex, but when i try adding the condition 'or To contains {From}' , I get error message saying 'The word/expression already exists'. :(

Developer
User avatar
Posts: 4431
Joined: Tue Apr 20, 2004 3:43 pm

Postby Alexander Telegin » Tue Dec 02, 2008 11:38 am

Then add new filter

if 'To' contains '{From}'
and 'X-ArGoMail-Authenticated' is missing
then delete message and
stop all filters

Junior Member
Posts: 11
Joined: Tue Dec 02, 2008 12:34 am

Postby dstj » Tue Dec 02, 2008 8:47 pm

That's exactly what i put originally (see first post).
It doesn't work

Expert
User avatar
Posts: 449
Joined: Sun May 02, 2004 2:12 pm

Postby DFitch » Tue Dec 02, 2008 9:19 pm

Dave,

The difference is you used 'equal' and Alex using 'contains'.

Did you just try removing equals and replace with contains?

D
hMailServer 5.3.3: External MySql
Win2k3 Server | eWall 4.0 Anti-Spam Anti-Virus SMTP Proxy
SpamAssassin 3.31 - ClamAV on backend Ubuntu Server (VMware)

Junior Member
Posts: 11
Joined: Tue Dec 02, 2008 12:34 am

Postby dstj » Tue Dec 02, 2008 11:22 pm

I've tried both 'equals' and 'contains' during my testing, still no luck.
I've just moved the filter to different place in the lineup of filters.
I'm hoping that will make a difference somehow ?
I'll keep you posted.
THanks for all the help.

Dave

Junior Member
Posts: 11
Joined: Tue Dec 02, 2008 12:34 am

Postby dstj » Sun Dec 07, 2008 12:02 am

Alex, the filter started catching the spam after i unchecked 'Do not filter outgoing emails' in the misc options.

Does this stand to reason ?

Next

Return to MailFilter - General

Who is online

Users browsing this forum: No registered users and 1 guest