Dirk Fieldhouse wrote on 22-02-21 11:41:
On 21/02/2021 22:44, Ray_Net wrote:
...>
I have two spam-mail at 6h30 and 23h30 each day.
All mails are totally different ..... the only partially fixed part
is that line:
"Received: from news1.afrophree.com (news1.afrophree.com [81.29.1.46]
(may be forged))"
The names of the news servers are always didderrent and thei domain
is NOT part of the ip adress.
The ip-adresses are always different, but still of the same domain
which is: iahoster.com
How can I create a filter to catch the range ip-adresses -->
% Information related to '81.29.0.0 - 81.29.15.255' ?
Create a message filter. Use the Customise... entry in the header
pull-down to add the Received header to the menu. Filter on "Received"
"contains" ".afrophree.com" -> Set Junk Status.
/df
Sorry ... your idea doesnot work, because the domain names are always
different the only fixed part is the ip adress range.from '81.29.0.0 to
81.29.15.255
Examples:
Received: from web-1.multhe.com (web-1.multhe.com [81.29.1.178] (may be
forged))
Received: from news1.afrophree.com (news1.afrophree.com [81.29.1.46]
(may be forged))
Received: from cloud-1.produchic.com (cloud-1.produchic.com
[81.29.1.244] (may be forged))
Received: from cloud-1.alizarcresit.com (cloud-1.alizarcresit.com
[81.29.1.47] (may be forged))
Received: from secure-1.boonawkerien.com (secure-1.boonawkerien.com
[81.29.1.238] (may be forged))
_______________________________________________
support-seamonkey mailing list
support-seamonkey@lists.mozilla.org
https://lists.mozilla.org/listinfo/support-seamonkey
