Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More

Filter emails on ASN

  • 3 respostas
  • 1 has this problem
  • 1 view
  • Last reply by sfhowes

more options

For a few years now I've been plagued by property investment spam, always coming from different sender addresses and domains and different subject lines, making it very hard to filter. I currently have a filter containing over 30 lines and counting! The only consistent commonality is that the IP address in the last Received: line in the headers, and the ip address of the sender's email always belong to AS 16276.

Is there an add-on filter that will enable me to mark all mail from AS 16276 as spam?

For a few years now I've been plagued by property investment spam, always coming from different sender addresses and domains and different subject lines, making it very hard to filter. I currently have a filter containing over 30 lines and counting! The only consistent commonality is that the IP address in the last Received: line in the headers, and the ip address of the sender's email always belong to AS 16276. Is there an add-on filter that will enable me to mark all mail from AS 16276 as spam?

All Replies (3)

more options

You can add custom headers to a filter or Classic Search, Ctrl+Shift+F. Add the Received header and test it with search.

http://kb.mozillazine.org/Filters_(Thunderbird)#Custom_headers

more options

Thank you @sfhowes, yes, I could add a custom header "Received:", but that only contains the IP address of the originating MTA. But AS16276 has 144 disjoint blocks of IP addresses and the source of spam can be any IP address in any of those blocks. So that doesn't help.

I think I need an extension that would automatically do an AS lookup on the originating MTA's IP address. Is there such a thing? Would it be feasibe to create?

more options

I'm not aware of such an extension or the difficulty in creating one. Most attempts to create spam filters are inadequate. Myself, I don't use TB's Junk controls, and find the spam management performed by my account providers to be very effective.