Windows live Mail isolating spam from dot me (Montenegro)

[Norwichman]

Hi,

I am getting a lot of spam and although the subject lines and "to" lines are always different, the one constant thing is that the "from" lines all end in .me (dot me) although the part before the dot changes. I believe this is a Montenegro area code.

I have been trying to find a way to make a rule that I can use to isolate and delete these ones but am not sure if it is possible to do this in WLM.

Any help would be appreciated.

thanks in advance,

Geoff.

 

[Slartybart]

If you configured your eMail account to use POP3, you can create filtering rules to stop the download or delete the eMail from the server.

If your eMail account is not POP3, then you can set the safety options (blue menu upper left -> options -> safety options)
Press the International tab and add .me to the blocked TLD list.

 

[Norwichman]

Re: Spam from .me

Many thanks for the reply.

I am using pop3 but the rules options for "from", only permit adding a contact to block. However following your second remark, I have added the .me to the international list and hopefully this will work in pop3 as well. I'll give it a try.

Thanks once again

 

[Slartybart]

Many thanks for the reply.

I am using pop3 but the rules options for "from", only permit adding a contact to block. However following your second remark, I have added the .me to the international list and hopefully this will work in pop3 as well. I'll give it a try.

Thanks once again

I tried a few wildcard tests (*.me and just .me) - it looks as though the TLD is the sure way to go. Other filters might block too much since the key is 'contains' - I didn't think rules were specific enough and they might affect good mail from Mr.Merlin

The International TLD setting should work for POP3 accounts. The eMail header doesn't change based on the account type, so WLM can check the From field in the header for the TLD .me - and block it.

Post your results after a few days of running with the TLD filter - good luck. If it doesn't work, the eMail might not actually come from the .me TLD - it only displays that it does. That case is a little more difficult to filter.


Just a note: WLM will only allow you to create rules for POP3 accounts - it makes sense given the way IMAP works (syncing folders).

 

[Norwichman]

Unfortunately the TLD method did not work as I had another load today. I noticed that the timestamp doesn't agree with the Montenegro time zone anyway. The actual timestamp on the emails is -07:00 which I think puts it somewhere in the US. I guess I will just live with it until goes away. Fortunately WLM is pretty good at putting it into the Spam folder.

Thanks again for the help.

 

[Slartybart]

You're welcome.

Spammers a tricky - if the eMail originates from the same domains, then you can stop it.

Right click on a spam msg and select properties
Click the details button
Scroll down to Authentication-Results: and look at the from: tag
The sending domain is also in the Received fields.

The later From: (before To: and Subject is simply text and can be anything a spammer wants it to be.

The easy part is blocking eMail once you know the real sending information. The hard part is if you're getting a lot and they are different domains (or a common domain such as Yahoo).

I have only a few blocks, filters and haven't seen spam for quite a while. If one does get through, I add it to a block or filter depending on the sending information.

Good luck,

Bill