I'm using 1.63 Beta 11 with Windows 98. I have the "Known" filter activated, and I have it move "knowns" to a sub-folder of the Inbox, "Inbox\Known". Otherwise, they go to another sub-folder of the Inbox, "Inbox\Unknown". Worked great until I received a spam, in "Inbox\Known", from someone who was definitely not in my address book.
Here are the headers: ========== Received: from iafitim [216.247.132.30] by mail.henrybeaver.com (SMTPD32-6.06) id A81FE8D10056; Wed, 25 Jun 2003 14:21:19 -0400 To: <[EMAIL PROTECTED]> From: "Nolan" <[EMAIL PROTECTED]> Subject: Increase your size lo X-Priority: 3 Reply-To: <[EMAIL PROTECTED]> Message-ID: <[EMAIL PROTECTED]> Date: Wed, 25 Jun 2003 13:17:48 -0200 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_003_0057_XPOCVLVJ.UQFTKQVS" X-RCPT-TO: <[EMAIL PROTECTED]> X-UIDL: 346621659 Status: U ========== All I could think of was that the spammer's sticking _my_ address in the "Reply-To:" and/or the "X-RCPT-TO:" somehow fooled the Known filter, since _my_ address was in my address book. Sure enough, when I deleted my address from the address book, TB stopped sending it to Inbox\Known, and put it in Inbox\Unknown. Seems to me it shouldn't work that way. Chris Coyle ________________________________________________ Current version is 1.62r | "Using TBUDL" information: http://www.silverstones.com/thebat/TBUDLInfo.html