Here are headers from 3 different spam emails. All have similiar
originating IP addresses. Can anyone suggest a way to block emails using
OE6 using the first 2 or 3 fields of Original IP addresses? (Or other
suggestions?)
Thanks.
Fred
X-Originating-IP: [66.109.98.27]
X-Originating-IP: [66.109.98.20]
Received: from 3-18346-68-18346-56418-1-1140368800 ([172.18.12.132])
by vms051.mailsrvcs.net
(Sun Java System Messaging Server 6.2-2.05 (built Apr 28 2005))
with ESMTP id <0IUY000AL1MKEE00@vms051.mailsrvcs.net> for
analyzer@verizon.net; Sun, 19 Feb 2006 10:54:20 -0600 (CST)
Received: from cob11.namesarecheap.com (66.109.98.27)
by sv22pub.verizon.net (MailPass SMTP server v1.2.0 - 112105154401JY+PrW)
with ESMTP id <3-18346-68-18346-56418-1-1140368800> for
vms051pub.verizon.net; Sun, 19 Feb 2006 11:06:40 -0600
Received: from localhost (c-24-63-195-140.hsd1.ma.comcast.net
[24.63.195.140])
by cob11.namesarecheap.com (8.11.6-SOL3/8.11.6) with SMTP id k1JGITC30384
for
<advertising@techpubs.net>; Sun, 19 Feb 2006 08:18:29 -0800
Date: Sun, 19 Feb 2006 11:54:14 +0100
From: "Glucksman"<henry@yahoo.com>
Subject: Order V1agra Now
X-Originating-IP: [66.109.98.27]
To: <advertising@techpubs.net>
Message-id: <000001c62a4e$7b3c4180$0100007f@neska>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
Content-type: multipart/related; type="multipart/alternative";
boundary=------------ms020700070106060404020304
X-Priority: 3
X-MSMail-priority: Normal
Received: from 1-9071-209-9071-4236-1-1140339068 ([172.18.12.132])
by vms041.mailsrvcs.net
(Sun Java System Messaging Server 6.2-2.05 (built Apr 28 2005))
with ESMTP id <0IUX002CREYFWG70@vms041.mailsrvcs.net> for
analyzer@verizon.net; Sun, 19 Feb 2006 02:44:40 -0600 (CST)
Received: from cob11.namesarecheap.com (66.109.98.27)
by sv14pub.verizon.net (MailPass SMTP server v1.2.0 - 112105154401JY+PrW)
with ESMTP id <1-9071-209-9071-4236-1-1140339068> for
vms041pub.verizon.net;
Sun, 19 Feb 2006 02:51:09 -0600
Received: from total.com ([81.130.211.67]) by cob11.namesarecheap.com
(8.11.6-SOL3/8.11.6) with SMTP id k1J88wC11958 for <info@techpubs.net>;
Sun,
19 Feb 2006 00:08:59 -0800
Date: Sun, 19 Feb 2006 03:44:10 -0500
From: "Pavlos Soloman" <solomanupavlo@total.com>
Subject: Re: h alloo news
X-Originating-IP: [66.109.98.27]
To: info@techpubs.net
Reply-to: "Pavlos Soloman" <solomanupavlo@total.com>
Message-id: <000001c63530$a6ea40b0$2b9da8c0@cote>
MIME-version: 1.0
X-MIMEOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
Content-type: multipart/alternative;
boundary="----=_NextPart_000_0001_01C63506.BE1438B0"
X-Priority: 3
X-MSMail-priority: Normal
Received: from 1-28176-161-28176-5779-1-1140348741 ([172.18.12.133])
by vms043.mailsrvcs.net
(Sun Java System Messaging Server 6.2-2.05 (built Apr 28 2005))
with ESMTP id <0IUX000I3MPYFO80@vms043.mailsrvcs.net> for
analyzer@verizon.net; Sun, 19 Feb 2006 05:32:22 -0600 (CST)
Received: from cob2.namesarecheap.com (66.109.98.20)
by sv9pub.verizon.net (MailPass SMTP server v1.2.0 - 112105154401JY+PrW)
with ESMTP id <1-28176-161-28176-5779-1-1140348741> for
vms043pub.verizon.net; Sun, 19 Feb 2006 05:32:22 -0600
Received: from nat.imsys.ru (nat.imsys.ru [217.70.31.144] (may be forged))
by cob2.namesarecheap.com (8.11.6-SOL3/8.11.6) with SMTP id k1JB8JQ29779
for
<infoserv@calcems.com>; Sun, 19 Feb 2006 03:08:19 -0800
Date: Sun, 19 Feb 2006 14:32:10 +0000
From: "Gibbons Cara" <ihcunudmm@padres.com>
Subject: SPUR-M
X-Originating-IP: [66.109.98.20]
X-Sender: <ihcunudmm@padres.com>
To: infoserv@calcems.com
Message-id: <8c1c1e6717d.8c1c1e6717d207331783d@padres.com>
MIME-version: 1.0
Content-type: text/html; charset=ISO-8859-1
Content-transfer-encoding: 7bit
Fred - 19 Feb 2006 18:11 GMT
** Never mind, folks. I figured it out already. No need to reply.
Fred
Gary S. Terhune - 19 Feb 2006 18:45 GMT
HOW?? Please share! Pretty please?

Signature
Gary S. Terhune
MS MVP Shell/User
> ** Never mind, folks. I figured it out already. No need to reply.
>
> Fred
Michael Santovec - 19 Feb 2006 19:12 GMT
You can't block mail in OE based on IP address. The only fields
accessible in OE for message rules are FROM, TO, CC, SUBJECT, message
size, has attachment and message text in the body.

Signature
Mike - http://pages.prodigy.net/michael_santovec/techhelp.htm
> HOW?? Please share! Pretty please?
>
>> ** Never mind, folks. I figured it out already. No need to reply.
>>
>> Fred
Gary S. Terhune - 19 Feb 2006 19:44 GMT
OK, that's what I thought, <s>. Just wanted to be sure.

Signature
Gary S. Terhune
MS MVP Shell/User
> You can't block mail in OE based on IP address. The only fields
> accessible in OE for message rules are FROM, TO, CC, SUBJECT, message
[quoted text clipped - 5 lines]
> >>
> >> Fred
Fred - 20 Feb 2006 05:03 GMT
Are there email programs around that can do this?
> OK, that's what I thought, <s>. Just wanted to be sure.
>
[quoted text clipped - 7 lines]
> > >>
> > >> Fred
Gary S. Terhune - 20 Feb 2006 05:13 GMT
Not that I know of, but that doesn't mean anything. What about a firewall?

Signature
Gary S. Terhune
MS MVP Shell/User
> Are there email programs around that can do this?
>
[quoted text clipped - 9 lines]
> > > >>
> > > >> Fred
Gary S. Terhune - 20 Feb 2006 05:13 GMT
Nevermind, that was stupid. Must be time to go to bed.

Signature
Gary S. Terhune
MS MVP Shell/User
> Are there email programs around that can do this?
>
[quoted text clipped - 9 lines]
> > > >>
> > > >> Fred
DGuess - 20 Feb 2006 05:55 GMT
Filter IN your email
http://www.mindspring.com/~majik/messagerules.htm
> Nevermind, that was stupid. Must be time to go to bed.
>
[quoted text clipped - 12 lines]
>> > > >>
>> > > >> Fred
Gary S. Terhune - 20 Feb 2006 06:03 GMT
David! How nice to see you!
I'll take a look.

Signature
Gary S. Terhune
MS MVP Shell/User
> Filter IN your email
> http://www.mindspring.com/~majik/messagerules.htm
[quoted text clipped - 15 lines]
> >> > > >>
> >> > > >> Fred
Gary S. Terhune - 20 Feb 2006 06:04 GMT
Using OE rules to whitelist, eh?

Signature
Gary S. Terhune
MS MVP Shell/User
> Filter IN your email
> http://www.mindspring.com/~majik/messagerules.htm
[quoted text clipped - 15 lines]
> >> > > >>
> >> > > >> Fred
DGuess - 20 Feb 2006 06:26 GMT
> Using OE rules to whitelist, eh?
Makes sense to do with what you have to work with.
:-)
Fred - 20 Feb 2006 04:06 GMT
Thanks, Gary & Michael. You are correct.
Fred