Cannot screen Junk Mail - It arrives with *MY* address as the return/reply addess.
I have been getting junk mail that lists my address as the return address. Of course, you cannot screen it as SPAM/Junk, because you would screen your own mail! Moreover, cloaklinks.com is not in the header information. How do I clobber/screen these clowns?? Thanks!!! Joe
Here is some header information of a typical note: . From - Fri Jun 26 14:22:11 2015 X-Account-Key: account1 X-UIDL: 717a954a-1be6-11e5-85ef-9477f57ed7f0 X-Mozilla-Status: 0001 X-Mozilla-Status2: 00000000 X-Mozilla-Keys: Return-Path: <jhughey@hvc.rr.com> Received: from dnvrco-pub-iedge-vip.email.rr.com ([107.14.70.245])
by dnvrco-fep01.email.rr.com (InterMail vM.8.04.01.13 201-2343-100-167-20131028) with ESMTP id <20150626093346.BRSF9108.dnvrco-fep01.email.rr.com@dnvrco-pub-iedge-vip.email.rr.com> for <jhughey@hvc.rr.com>; Fri, 26 Jun 2015 09:33:46 +0000
Return-Path: <jhughey@hvc.rr.com> Received: from [203.80.1.11] ([203.80.1.11:40661] helo=emailalert6.singtao.com) by dnvrco-iedge01 (envelope-from <jhughey@hvc.rr.com>) (ecelerity 3.5.0.35861 r(Momo-dev:tip)) with ESMTP id 98/D8-18000-A7C1D855; Fri, 26 Jun 2015 09:33:46 +0000 Received: from hkg01ww073 (unknown [203.80.1.60]) by emailalert6.singtao.com (Postfix) with SMTP id 20A681F8277 for <jhughey@hvc.rr.com>; Fri, 26 Jun 2015 17:02:26 +0800 (HKT) thread-index: AdCv7tMiw6aEmI4fQseBTcTU2BmEgg== Thread-Topic: The Standard Email News From: <jhughey@hvc.rr.com> To: <jhughey@hvc.rr.com> Subject: The Standard Email News Date: Fri, 26 Jun 2015 17:02:27 +0800 Message-ID: <123D35AF7CC543CF81789014FBE1337D@hkg01ww073> MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="----=_NextPart_000_44E17A_01D0B031.E145D2C0" X-Mailer: Microsoft CDO for Windows 2000 Content-Class: urn:content-classes:message Importance: normal Priority: normal X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.4913 X-RR-Connecting-IP: 107.14.64.6:25 X-Authority-Analysis: v=2.1 cv=GfKZnGnL c=1 sm=1 tr=0 a=xt6At7kyUM7QooNsL0JnaA==:117 a=xt6At7kyUM7QooNsL0JnaA==:17 a=ayC55rCoAAAA:8 a=0oj8HZZGiqAA:10 a=iCrbP50nAAAA:8 a=say5LEtv9FYA:10 a=XAFQembCKUMA:10 a=r77TgQKjGQsHNAKrUKIA:9 a=9iDbn-4jx3cA:10 a=cKsnjEOsciEA:10 a=gZbpxnkM3yUA:10 a=UoP6nO4NAAAA:8 a=LG09BQL3fjLgmR1u20YA:9 a=wPNLvfGTeEIA:10 a=B-7tEVZ4L08A:10 a=IFpbO1rE_CQA:10 a=lrFD4AenVO4A:10 a=RT5R9CO1q6QA:10 a=9bLWB3ewZYUMPXc1HI4A:9 a=PQPjo_BaagYA:10 a=XxLkWGrZPL8A:10 a=__LLkpPIc04A:10 a=m6Sgl8gyW6gA:10 X-Cloudmark-Score: 0 . This is a multi-part message in MIME format. .
=_NextPart_000_44E17A_01D0B031.E145D2C0
Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit . Hi there! How would link to hit lottery 5 times in a row in three months time? Well, you gotta check this out while this is not yet gone! www.cloaklinks.com/go/winlotto To your success, Marina Bayer _ >From : jhughey@hvc.rr.com cloaklinks.com/go/winlotto .
=_NextPart_000_44E17A_01D0B031.E145D2C0
Content-Type: text/html Content-Transfer-Encoding: 7bit . Hi there! . How would link to hit lottery 5 times in a row in three months time? . Well, you gotta check this out while this is not yet gone! . www.cloaklinks.com/go/winlotto
. To your success, Marina Bayer
_
From : jhughey@hvc.rr.com
<a href="cloaklinks.com/go/winlotto">cloaklinks.com/go/winlotto</a>
Chosen solution
Thank you for the junquilla link! I shall try it out! .
Read this answer in context 👍 0All Replies (6)
Follow-up: I did a reverse look-up of two domains, hkstar.com and singtao.com, got the registrant's name and sent a note with the complaint and header. The hkstar.com bounced back, but singtao.com seems ok. Hopefully they will take action. .
The Junk filter in Thunderbird doesn't take much notice of email addresses. It identifies certain tokens (words to you and me) in the message. Those tokens will be awarded values or scores according to whether they appear in Junk or Not Junk messages. So, go ahead and mark these messages as Junk and they will help build up a picture of which messages are Junk. The Junk filter won't blacklist your email address.
Why do you think the absence of "cloakinks" in the message header matters? The Junk controls look at the message text too.
The junquilla add-on gives you greater visibility of what's going on.
Thank you Zenos! . Not being up to date with internet spamming, I was not aware of tokens being used for blocking, so I had reasoned only the header domains were used. I shall test this from another Email resource. . Regarding cloaklinks .... If cloaklinks.com was in the message *and* in the header, it would be a direct solicitation, and it could be easily blocked. Anticipating suggestions to block cloaklinks.com, I included the comment. . Thanks again! . Joe
Chosen Solution
Thank you for the junquilla link! I shall try it out! .
Thank you Christ1 for the Backscatter link. Fascinating article. Strange how the recipient's email address gets listed in the bouncing process.