Message rule being bypassed ??

Windows XP and OE 6.
I have made a rule requiring messages with "mcibatreasurer in the to or from
lines" to be transferred to a special folder. With most messages this is
working well but a couple recently have remained in the in-box and I expect
these are spam (if not more sinister).

Here is the message source for one of these :-

Return-Path:
X-Original-To:
X-Envelope-To:
Delivered-To:
Received: from 234-200-246-201.adsl.terra.cl (234-200-246-201.adsl.terra.cl
[201.246.200.234])
by banzai.systems.pipex.net (Postfix) with ESMTP id 0E8B0E000087;
Mon, 11 Aug 2008 03:20:14 +0100 (BST)
Message-ID: 01c8fb37$446fa680$eac8f6c9@supports
From: "Evangeline Blake"
To:
Subject: Fireworks CS3
Date: Sun, 10 Aug 2008 22:20:17 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2670
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
X-Spam: Not detected
X-Antivirus: avast! (VPS 080809-0, 09/08/2008), Outbound message
X-Antivirus-Status: Clean


Does this explain how this is getting by ? What have I missed? What do I
need to alter in the rule for these to be transferred out of my in-box ?

--
Regards, Jack Sadie

Is 'Stop processing more rules' included in the rule?

Some one needs to update their OE.
--
Ronald Sommer

"Jack Sadie" wrote in message
...
Windows XP and OE 6.
I have made a rule requiring messages with "mcibatreasurer in the to or
from lines" to be transferred to a special folder. With most messages this
is working well but a couple recently have remained in the in-box and I
expect these are spam (if not more sinister).

Here is the message source for one of these :-

Return-Path:
X-Original-To:
X-Envelope-To:
Delivered-To:
Received: from 234-200-246-201.adsl.terra.cl
(234-200-246-201.adsl.terra.cl [201.246.200.234])
by banzai.systems.pipex.net (Postfix) with ESMTP id 0E8B0E000087;
Mon, 11 Aug 2008 03:20:14 +0100 (BST)
Message-ID: 01c8fb37$446fa680$eac8f6c9@supports
From: "Evangeline Blake"
To:
Subject: Fireworks CS3
Date: Sun, 10 Aug 2008 22:20:17 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2670
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
X-Spam: Not detected
X-Antivirus: avast! (VPS 080809-0, 09/08/2008), Outbound message
X-Antivirus-Status: Clean


Does this explain how this is getting by ? What have I missed? What do I
need to alter in the rule for these to be transferred out of my in-box ?

--
Regards, Jack Sadie

"Jack Sadie" wrote in message
...
Windows XP and OE 6.
I have made a rule requiring messages with "mcibatreasurer in the to or
from lines" to be transferred to a special folder. With most messages this
is working well but a couple recently have remained in the in-box and I
expect these are spam (if not more sinister).

Here is the message source for one of these :-

Return-Path:
X-Original-To:
X-Envelope-To:
Delivered-To:
Received: from 234-200-246-201.adsl.terra.cl
(234-200-246-201.adsl.terra.cl [201.246.200.234])
by banzai.systems.pipex.net (Postfix) with ESMTP id 0E8B0E000087;
Mon, 11 Aug 2008 03:20:14 +0100 (BST)
Message-ID: 01c8fb37$446fa680$eac8f6c9@supports
From: "Evangeline Blake"
To:
Subject: Fireworks CS3
Date: Sun, 10 Aug 2008 22:20:17 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2670
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
X-Spam: Not detected
X-Antivirus: avast! (VPS 080809-0, 09/08/2008), Outbound message
X-Antivirus-Status: Clean


Does this explain how this is getting by ? What have I missed? What do I
need to alter in the rule for these to be transferred out of my in-box ?

--
Regards, Jack Sadie



The rule needs to be above other rules and contain Stop processing more
rules.

--
Frank Saunders MS-MVP IE,OE/WM
Do not reply with email

In general:

Have all rules that divert mail to folders first.

Delete it from server next.

All others last.

Make sure that every rule also has Stop processing more rules checked,
unless that option is grayed out.

How to set up OE Message Rules:
http://www.oeupdates.com/outlook-exp...lock-spam.html

http://www.timeatlas.com/mos/Email/O...tlook_Express/

http://www.jackieswebworks.com/outlo...ss%20notes.htm

Some Message Rule Ideas:
http://www.mindspring.com/~majik/messagerules.htm

Some tips:
http://insideoe.tomsterdam.com/tips/rules.htm

Controlling Junk Mail in Outlook Express:
http://www.microsoft.com/windows/IE/.../junkmail.mspx

Message Rules not working?:
http://www.tomsterdam.com/insideoe/faqs/why.htm#rules
--

Bruce Hagen
MS-MVP Outlook Express
Imperial Beach, CA


"Jack Sadie" wrote in message
...
Windows XP and OE 6.
I have made a rule requiring messages with "mcibatreasurer in the to or
from lines" to be transferred to a special folder. With most messages this
is working well but a couple recently have remained in the in-box and I
expect these are spam (if not more sinister).

Here is the message source for one of these :-

Return-Path:
X-Original-To:
X-Envelope-To:
Delivered-To:
Received: from 234-200-246-201.adsl.terra.cl
(234-200-246-201.adsl.terra.cl [201.246.200.234])
by banzai.systems.pipex.net (Postfix) with ESMTP id 0E8B0E000087;
Mon, 11 Aug 2008 03:20:14 +0100 (BST)
Message-ID: 01c8fb37$446fa680$eac8f6c9@supports
From: "Evangeline Blake"
To:
Subject: Fireworks CS3
Date: Sun, 10 Aug 2008 22:20:17 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2670
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
X-Spam: Not detected
X-Antivirus: avast! (VPS 080809-0, 09/08/2008), Outbound message
X-Antivirus-Status: Clean


Does this explain how this is getting by ? What have I missed? What do I
need to alter in the rule for these to be transferred out of my in-box ?

--
Regards, Jack Sadie

On Mon, 11 Aug 2008 09:42:55 +0100, Jack Sadie wrote:

Windows XP and OE 6.
I have made a rule requiring messages with "mcibatreasurer in the to or from
lines" to be transferred to a special folder. With most messages this is
working well but a couple recently have remained in the in-box and I expect
these are spam (if not more sinister).

Here is the message source for one of these :-

Return-Path:
X-Original-To:
X-Envelope-To:
Delivered-To:
Received: from 234-200-246-201.adsl.terra.cl (234-200-246-201.adsl.terra.cl
[201.246.200.234])
by banzai.systems.pipex.net (Postfix) with ESMTP id 0E8B0E000087;
Mon, 11 Aug 2008 03:20:14 +0100 (BST)
Message-ID: 01c8fb37$446fa680$eac8f6c9@supports
From: "Evangeline Blake"
To:

The problem is that neither the "To:", nor the "From:" include the text
string, "mcibatreasurer".

MS Outlook Express does not look at the "X-Original-To:", or the
"X-Envelope-To:" lines. It does not look at any other header lines that
"From:", "To:" (and/or "Cc:"), and "Subject:".

--
Norman
~Shine, bright morning light,
~now in the air the spring is coming.
~Sweet, blowing wind,
~singing down the hills and valleys.

Thanks guys for the replies, all of which added something useful.

I have now moved that rule to be first in the list; it already had the stop
processing bit there.

I am very concerned at this last point by Norman Miller. If the X-original
lines are ignored then the spammers have found an easy way round any rules
for the to or cc lines, and surely that's a near disaster.
Norman does not offer any solution.
--
Regards, Jack Sadie



"N. Miller" wrote in message
...
On Mon, 11 Aug 2008 09:42:55 +0100, Jack Sadie wrote:

Windows XP and OE 6.
I have made a rule requiring messages with "mcibatreasurer in the to or
from
lines" to be transferred to a special folder. With most messages this is
working well but a couple recently have remained in the in-box and I
expect
these are spam (if not more sinister).

Here is the message source for one of these :-

Return-Path:
X-Original-To:
X-Envelope-To:
Delivered-To:
Received: from 234-200-246-201.adsl.terra.cl
(234-200-246-201.adsl.terra.cl
[201.246.200.234])
by banzai.systems.pipex.net (Postfix) with ESMTP id 0E8B0E000087;
Mon, 11 Aug 2008 03:20:14 +0100 (BST)
Message-ID: 01c8fb37$446fa680$eac8f6c9@supports
From: "Evangeline Blake"
To:

The problem is that neither the "To:", nor the "From:" include the text
string, "mcibatreasurer".

MS Outlook Express does not look at the "X-Original-To:", or the
"X-Envelope-To:" lines. It does not look at any other header lines that
"From:", "To:" (and/or "Cc:"), and "Subject:".

--
Norman
~Shine, bright morning light,
~now in the air the spring is coming.
~Sweet, blowing wind,
~singing down the hills and valleys.

The filtering rules in OE are weak. The only headers you can filter on
are FROM, TO, CC and SUBJECT. You cannot filter on any of the
X-headers, Received headers, etc.

--

Mike - http://pages.prodigy.net/michael_santovec/techhelp.htm



"Jack Sadie" wrote in message
...
Thanks guys for the replies, all of which added something useful.

I have now moved that rule to be first in the list; it already had the
stop processing bit there.

I am very concerned at this last point by Norman Miller. If the
X-original lines are ignored then the spammers have found an easy way
round any rules for the to or cc lines, and surely that's a near
disaster.
Norman does not offer any solution.
--
Regards, Jack Sadie



"N. Miller" wrote in message
...
On Mon, 11 Aug 2008 09:42:55 +0100, Jack Sadie wrote:

Windows XP and OE 6.
I have made a rule requiring messages with "mcibatreasurer in the to
or from
lines" to be transferred to a special folder. With most messages
this is
working well but a couple recently have remained in the in-box and I
expect
these are spam (if not more sinister).

Here is the message source for one of these :-

Return-Path:
X-Original-To:
X-Envelope-To:
Delivered-To:
Received: from 234-200-246-201.adsl.terra.cl
(234-200-246-201.adsl.terra.cl
[201.246.200.234])
by banzai.systems.pipex.net (Postfix) with ESMTP id 0E8B0E000087;
Mon, 11 Aug 2008 03:20:14 +0100 (BST)
Message-ID: 01c8fb37$446fa680$eac8f6c9@supports
From: "Evangeline Blake"
To:

The problem is that neither the "To:", nor the "From:" include the
text
string, "mcibatreasurer".

MS Outlook Express does not look at the "X-Original-To:", or the
"X-Envelope-To:" lines. It does not look at any other header lines
that
"From:", "To:" (and/or "Cc:"), and "Subject:".

--
Norman
~Shine, bright morning light,
~now in the air the spring is coming.
~Sweet, blowing wind,
~singing down the hills and valleys.

"Jack Sadie" wrote in message
...
Windows XP and OE 6.
I have made a rule requiring messages with "mcibatreasurer in the to or
from lines" to be transferred to a special folder. With most messages this
is working well but a couple recently have remained in the in-box and I
expect these are spam (if not more sinister).

Here is the message source for one of these :-

Return-Path:
X-Original-To:
X-Envelope-To:
Delivered-To:
Received: from 234-200-246-201.adsl.terra.cl
(234-200-246-201.adsl.terra.cl [201.246.200.234])
by banzai.systems.pipex.net (Postfix) with ESMTP id 0E8B0E000087;
Mon, 11 Aug 2008 03:20:14 +0100 (BST)
Message-ID: 01c8fb37$446fa680$eac8f6c9@supports
From: "Evangeline Blake"
To:
Subject: Fireworks CS3
Date: Sun, 10 Aug 2008 22:20:17 -0400
MIME-Version: 1.0
Content-Type: text/plain;
format=flowed;
charset="iso-8859-1";
reply-type=original
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2670
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2670
X-Spam: Not detected
X-Antivirus: avast! (VPS 080809-0, 09/08/2008), Outbound message
X-Antivirus-Status: Clean


Does this explain how this is getting by ? What have I missed? What do I
need to alter in the rule for these to be transferred out of my in-box ?

--
Regards, Jack Sadie