Why are you filtering on the Subject line when the keyword is in the From line?
--
Gary VanderMolen, MS-MVP (Mail)
"JimO" <JimO@xxxxxx> wrote in message news:79EAC98E-F44E-49C6-BC2E-C2D698B4282E@xxxxxx
Quote:
> This is exactly what I did but it didn't work.. The Message Rule I created is:
>
> Apply this rule after the message arrives
> Where the Subject line contains 'Pfizer' or 'Lilly'
> Move it to the Junk e-mail folder
>
> Looking at one of the SPAM Emails, when I look at
> "Properties->Details->Message Source shows this around the From: line
>
> Date: Sun, 13 Jul 2008 20:04:04 -0800
> From: "Pfizer Internet " <Tyler.Mckay@xxxxxx>
> Subject: Order Reminder
>
> However, when I put this message in the InBox then "Apply now" the Message
> Rule to the InBox, this email is not moved to the Junk Email Folder. I would
> think it should have matched on the Message Rule, but it doesn't seem to.
>
> JimO
>
>
> "...winston" wrote:
> Quote:
>> Create the rule with the condition
>> Where the From Line Contains
>> Then
>> Manually Enter Pfizer
>> - or any combination(e.g. Pfiz)
>>
>> I just created a rule for the first four letters of a From and the last 5 letters from a From and moved messages to the Delete and
>> or Junk Mail folder of an email account. None of the 'From' recipients were in my WLM Contact list, nor in my Safe Senders.
>>
>> Note: Rules do not work on http accounts(e.g. Hotmail, Live, MSn.com).
>>
>>
>> --
>> ...winston
>> ms-mvp mail
>>
>>
>> "JimO" <JimO@xxxxxx> wrote in message news:E2C12FAD-9DDE-40D4-A37F-858637E9191C@xxxxxx Quote:
>> > I am getting a lot of spam from a spammer who keeps changing the (fake)
>> > return address of the sender. So blocking sender or domain doesn't stop this
>> > guy. However, (s)he does keep using the word "Pfizer" or "Lilly" in the
>> > "From" name, even thought the email address in between "<" and ">" on the
>> > "From" line keeps changing.
>> >
>> > I would like to set up a Message Rule for the "From" line to match the
>> > words "Pfizer" or "Lilly" in the "From" line, but WML does not seem to allow
>> > me to do it. The only thing it seems to check is the email adress between "<"
>> > and ">".
>> >
>> > Am I missing something? Any clue how to block this with a Message Rule?
>>
>>