EUDORA SPAM FILTER 23
Bogus Email "From" Hotmail, AOL or Yahoo
Catches:
Email with forged headers claiming to be from "Hotmail", "AOL" or "Yahoo"
This is actually a set of three different filters, each performing a similar function.
Email claiming to be from Hotmail but not having the Hotmail-added header "X-Originating-IP"
is most likely fake. Email from Hotmail, AOL or Yahoo that does not have "Hotmail", "AOL" or
"Yahoo" in the Message-ID header, are most likely fake.

| Match: |
Incoming and Manual |
| Header |
From: |
| Verb: |
contains |
| Value: |
HOTMAIL |
| conjunction |
and |
| Header |
X-Originating-IP
(you must type this header in, it's not a selection) |
| Verb: |
Doesn't appear |
| Value: |
|
| Actions: |
Transfer To Spam.mbx (or to the trash) |
| |
Make Label 3 |
| |
Skip Rest |
This filter looks in the "From:" header - if it claims to be from a Hotmail account, it
should have the Hotmail X-Originating-IP header added. Exceptions - email from Hotmail
users but forwarded from a third party such as Hallmark e-greeting cards or Ebay will
not have the Hotmail X-Originating-IP header added. These users will not be a problem if they
are included on your whitelist.

| Match: |
Incoming and Manual |
| Header |
From: |
| Verb: |
contains |
| Value: |
AOL |
| conjunction |
and |
| Header |
Message-ID
(you must type this header in, it's not a selection) |
| Verb: |
Doesn't contain |
| Value: |
AOL.COM |
| Actions: |
Transfer To Spam.mbx (or to the trash) |
| |
Make Label 3 |
| |
Skip Rest |
This filter looks in the "From:" header - if it claims to be from an AOL account, it should
have "AOL.COM" in the Message-ID header. Exceptions - email from AOL users but
forwarded from a third party such as Hallmark e-greeting cards or Ebay will not contain
AOL.COM in the message-ID header. These users will not be a problem if they are included on
your whitelist.

| Match: |
Incoming and Manual |
| Header |
From: |
| Verb: |
contains |
| Value: |
YAHOO |
| conjunction |
and |
| Header |
Message-ID
(you must type this header in, it's not a selection) |
| Verb: |
Doesn't contain |
| Value: |
YAHOO |
| Actions: |
Transfer To Spam.mbx (or to the trash) |
| |
Make Label 3 |
| |
Skip Rest |
This filter looks in the "From:" header - if it claims to be from a Yahoo account,
it should have "YAHOO" in the Message-ID header. Exceptions - email from
Yahooligans but forwarded from a third party such as Hallmark e-greeting cards or Ebay
will not contain "Yahoo" in the Message-ID header. These users will not be a problem if they
are included on your whitelist.