For filtering total garbage it is useful to filter on the Received: lines -- but remembering that these too can be forged :-(
I find that a filter such as:
received:\bfrom\s+(A-Za-z0-9*.)+xn--p1acf\b
does the trick... BUT it appears to only look at the first Received: line it comes across :-(
For filtering total garbage it is useful to filter on the Received: lines -- but remembering that these too can be forged :-(
I find that a filter such as:
received:\bfrom\s+(A-Za-z0-9*.)+xn--p1acf\b
does the trick... BUT it appears to only look at the first Received: line it comes across :-(