EUDORA SPAM FILTER
Rejecting Email With HTML and/or  HTTP: Links

I don't currently use this filter, but present it here to show how it's done.

Most spam email these days (68% of mine) is in HTML format - basically so it can be dressed up as a web page. Most, but not all spam also contains http: links (93% of mine) to web sites  - after all, that where the evil spam-clowns want you to go, credit card in hand, right? It's not difficult to filter for either of these conditions alone, but put them both together in one filter, and you can catch 66% of all the spam that comes along. If you put this filter right after your passlist filter, with a couple of other highly effective filters, you could get by nicely

The downside of filtering for html  is that some of our unknown email correspondents will send their email in this format, resulting in false-positive hits. Ditto filtering for http: - many people will send you links, or will have a link in their signature line. This is only a problem for people not on our passlist. So if you use this filter, you should eyeball your spam box before flushing it and look for any hits that may be legitimate correspondence from strangers.  I suggest setting this filter with a colored label and placing it at or near the bottom of your list of filters, so that very few emails get to this filter and need to be evaluated.  

Filtering Email Only For HTML Content

Match:	Incoming and Manual
Header	«Body»
Verb:	regexp (case insensitive)
Value:	^<x-html>
Actions:	Transfer To Spam.mbx
	Skip Rest

 

Filtering Email With Both HTML Content and Http: Links

Match:	Incoming and Manual
Header	«Body»
Verb:	regexp (case insensitive)
Value:	^<x-html>
conjunction	and
Header:	«Body»
Verb:	contains
Value:	http:
Actions:	Transfer To Spam.mbx
	Make Label 5
	Skip Rest

NOTE*  The <x-html>  tag if present is contained in the body of the email but is only visible if you turn off the "Use Microsoft's Viewer" option in Eudora, or else open the mailbox file with a text editor such as Notepad. The <x-html> tag if present generally follows the Eudora Headers and is located at the start of the body of the email, and at the start of a line (hence the ^ character in the regexp).  A closing tag </x-html> occurs at the end of the body to close the tag.