Buscar en Ayuda

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

How to set message filter to remove all e-mail which have url *.ru in source of message ?

  • 9 respuestas
  • 2 tienen este problema
  • 18 visitas
  • Última respuesta de todus

more options

This is a sample of thousand of spam from russian spamers:

Message from CTRL + U <a href="http://www.google.com/url?q=%68%74%74%70%3A%2F%2F%79%70%6d%63%74%79%2e%6c%65%6e%6f%72%6f%6b%2e%72%75&sa=D&sntz=1&usg=AFQjCNFqlKnlQB_xmBoQ_85nniB_hHkDKA">Bot Online przyniesie Ci bogactwo i satysfakcje.</a>

Message when we point the cursor on the link in email: <a href="http://www.google.com/url?q=http://ypmcty.lenorok.ru&sa=D&sntz=1&usg=AFQjCNFqlKnlQB_xmBoQ_85nniB_hHkDKA">Bot Online przyniesie Ci bogactwo i satysfakcje.</a>

How to build proper filter to free from russian m$thafuck#$rs

This is a sample of thousand of spam from russian spamers: Message from CTRL + U <a href="http://www.google.com/url?q=%68%74%74%70%3A%2F%2F%79%70%6d%63%74%79%2e%6c%65%6e%6f%72%6f%6b%2e%72%75&sa=D&sntz=1&usg=AFQjCNFqlKnlQB_xmBoQ_85nniB_hHkDKA">Bot Online przyniesie Ci bogactwo i satysfakcje.</a> Message when we point the cursor on the link in email: <a href="http://www.google.com/url?q=http://ypmcty.lenorok.ru&sa=D&sntz=1&usg=AFQjCNFqlKnlQB_xmBoQ_85nniB_hHkDKA">Bot Online przyniesie Ci bogactwo i satysfakcje.</a> How to build proper filter to free from russian m$thafuck#$rs

Solución elegida

Maybe https://addons.mozilla.org/en-US/thunderbird/addon/gmailui/ or https://addons.mozilla.org/en-us/thunderbird/addon/filtaquilla/ will help. They both offer regular expressions and allow you to force a literal search.

But generally I find managing filters to handle spam a waste of time.

Leer esta respuesta en su contexto 👍 0

Todas las respuestas (9)

more options

Do you use Thunderbird? if yes then just click this link. You will do it https://support.mozilla.org/en-US/kb/thunderbird-and-junk-spam-messages#w_tell-thunderbird-what-is-junk

more options

Sorry - I does not work. I need filter solution that will check BODY source of HTML message and throw to trash email which have: lenorok.ru (HEX = %6c%65%6e%6f%72%6f%6b%2e%72%75)

more options

name="lenorok.ru" enabled="yes" type="17" action="JunkScore" actionValue="100" action="Move to folder" actionValue="mailbox://nobody@Local%20Folders/Junk" condition="OR (body,contains,lenorok.ru) OR (body,contains,%6c%65%6e%6f%72%6f%6b%2e%72%75)"

Modificadas por Gnospen el

more options

So I presume you set up all the Junk Controls and then selected various emails from a .ru email address and marked them as 'Junk' to train the Junk filter.

If you need message filter to search for items that are not being picked up by Junk controls. Tools > Message Filters or Menu icon > Message Filters > Message Filters Apply filter when 'Manually Run' and 'Getting new mail' Filter after Junk Classification match any of the following From and Contains and .ru Body and Contains and .ru

Perform action Set junk Status and Junk Move Message to and Junk folder on account click on OK

Make sure the filter is enabled. Make sure the filter is at the top, so it runs it first. Make sure it is the only filter enabled.

It is useful to enable the filter log so you can see the results. click on 'filter Log' select 'enable filter log' click on 'Close'

If you have some emails in the Inbox that have a .ru in either From or Body, then test the filter by manually running the filter on the Inbox. run selected filter on 'Inbox' click on 'Run Now'

more options

Gnospen said

name="lenorok.ru" enabled="yes" type="17" action="JunkScore" actionValue="100" action="Move to folder" actionValue="mailbox://nobody@Local%20Folders/Junk" condition="OR (body,contains,lenorok.ru) OR (body,contains,%6c%65%6e%6f%72%6f%6b%2e%72%75)"

This filter catch only: lenorok.ru - if I send sampe email with: lenorok.ru in message filter work.

But if there is lenorok.ru in HEX = %6c%65%6e%6f%72%6f%6b%2e%72%75 filter does not catch it out. This HEX we can see using CTRL + U (view source of email message)

more options

I ran just body contains %6c%65%6e%6f%72%6f%6b%2e%72%75 on support- mail and yours were picked

So maybe you should have two filters.

EDIT You are right, When its surrounded with other hex it doesnt find it

Modificadas por Gnospen el

more options

Gnospen said

I ran just body contains %6c%65%6e%6f%72%6f%6b%2e%72%75 on support- mail and yours were picked So maybe you should have two filters. EDIT You are right, When its surrounded with other hex it doesnt find it

Yes - Thunderbird does not find it. It is strange - when you resend email with surrounded HEX like:

Uwaga! Tutaj mozna zarobic pieniadze w Internecie! <http://www.google.com/url?q=%68%74%74%70%3A%2F%2F%62%37%62%69%70%65%2e%6c%65%6e%6f%72%6f%6b%2e%72%75&sa=D&sntz=1&usg=AFQjCNGQc5m2zrHjaNqZVrkf_-tT9mX-3g>

the filter will throw it to trash.

BUT if we get this email directly from the spammers filter in Thunderbird does not catch the HEX.

more options

Solución elegida

Maybe https://addons.mozilla.org/en-US/thunderbird/addon/gmailui/ or https://addons.mozilla.org/en-us/thunderbird/addon/filtaquilla/ will help. They both offer regular expressions and allow you to force a literal search.

But generally I find managing filters to handle spam a waste of time.

more options

Zenos said

Maybe https://addons.mozilla.org/en-US/thunderbird/addon/gmailui/ or https://addons.mozilla.org/en-us/thunderbird/addon/filtaquilla/ will help. They both offer regular expressions and allow you to force a literal search. But generally I find managing filters to handle spam a waste of time.

Zenos you are my GURU :) Gmailui fix the problem. Over 1000 spam mails per day go to trash by filtering. Thank you very much.