You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Spam influx

I have mail, Version 13.4 (3608.80.23.2.2). For the past couple of months I've been receiving email. I don't have and never have had an email like that, so I don't know how it can come to my account. The emails are alike its a whole page that looks like this: --_-------_dsfgdhhfgdjsf_----=_NextPart_AF9_3C66_D9OTWHJM.BHYNY9INhhmTOQ3I18e:

Content-Type: multipart/alternative; boundary="_----------=_hhmTOQ3I18e_----=_NextPart_AF9_3C66_D9OTWHJM.BHYNY9IN"




--_----------=_hhmTOQ3I18e_----=_NextPart_AF9_3C66_D9OTWHJM.BHYNY9IN

Content-Type: text/plain; charset=utf-8




--_----------=_hhmTOQ3I18e_----=_NextPart_AF9_3C66_D9OTWHJM.BHYNY9IN

Content-Type: text/html; charset=utf-8


When I create a rule to automatically put this in spam folder, another email pops up with the same gibberish from another sender. What can I do?


[Email Edited by Moderator]

MacBook Pro 15", macOS 10.15

Posted on Apr 3, 2020 6:15 AM

Reply
Question marked as Top-ranking reply

Posted on Apr 3, 2020 6:46 AM

You need to target the Return-Path address (just once) for the originator(s) of that spam. Apple does not include Return-Path in its list of available header fields that you construct Mail rules. However, you can add custom headers.


In any Mail rule, click a From header selector and a large secondary list will appear. At the very bottom is the Edit header list…, and here is my entry for Return-Path. Click the + button and add it exactly as shown below:



For the given SPAM message, you will want the following rule setting:



The right-most content is the actual Return-Path address of the particular spam message, and represents the Mail server address that they are using to send the spam to you. The content of the To:, From:, and Reply-To: header fields can be contrived, but they cannot spoof the Return-Path address.


There are alternative ways to get at that Return-Path content.

  1. Select the SPAM email message item
    1. Select Mail's View menu : Message : Raw Source — a window will apppear showing the message's headers
      1. The Return-Path header item may be conveniently the first line, or further down in the header fields that are shown. You want to copy/paste the entire Return-Path address enclosed within, and including the < and > characters into the third text field of your specific Mail rule for this spam. That field is partially shown in the example image above.
      2. Save the Rule, and a message will appear if you want to apply the rule. Agree, and the selected mail item will be handled. I send mine to Trash on my Mac, but you may initially want to send them to your Junk mail folder.
    2. I have an AppleScript that based on a selected message item, will display the From: and Return-Path addresses, for a very simple copy and paste from an AppleScript dialog that looks like the following using nonsense addresses:



If I did nothing, I would get about 30 spams per day from the same organization with almost as many different From: header addresses. They all use the same Return-Path server, and I control all of these visually different spam messages with one mail rule using the Return-Path.


Similar questions

7 replies
Question marked as Top-ranking reply

Apr 3, 2020 6:46 AM in response to rubynrse

You need to target the Return-Path address (just once) for the originator(s) of that spam. Apple does not include Return-Path in its list of available header fields that you construct Mail rules. However, you can add custom headers.


In any Mail rule, click a From header selector and a large secondary list will appear. At the very bottom is the Edit header list…, and here is my entry for Return-Path. Click the + button and add it exactly as shown below:



For the given SPAM message, you will want the following rule setting:



The right-most content is the actual Return-Path address of the particular spam message, and represents the Mail server address that they are using to send the spam to you. The content of the To:, From:, and Reply-To: header fields can be contrived, but they cannot spoof the Return-Path address.


There are alternative ways to get at that Return-Path content.

  1. Select the SPAM email message item
    1. Select Mail's View menu : Message : Raw Source — a window will apppear showing the message's headers
      1. The Return-Path header item may be conveniently the first line, or further down in the header fields that are shown. You want to copy/paste the entire Return-Path address enclosed within, and including the < and > characters into the third text field of your specific Mail rule for this spam. That field is partially shown in the example image above.
      2. Save the Rule, and a message will appear if you want to apply the rule. Agree, and the selected mail item will be handled. I send mine to Trash on my Mac, but you may initially want to send them to your Junk mail folder.
    2. I have an AppleScript that based on a selected message item, will display the From: and Return-Path addresses, for a very simple copy and paste from an AppleScript dialog that looks like the following using nonsense addresses:



If I did nothing, I would get about 30 spams per day from the same organization with almost as many different From: header addresses. They all use the same Return-Path server, and I control all of these visually different spam messages with one mail rule using the Return-Path.


Apr 3, 2020 7:03 AM in response to rubynrse

rubynrse wrote:

I have mail, Version 13.4 (3608.80.23.2.2). For the past couple of months I've been receiving email addressed to Linda@aol.com. I don't have and never have had an email like that,

When I create a rule to automatically put this in spam folder, another email pops up with the same gibberish from another sender. What can I do?


You have both server side and client side filtering.


If you don't want to spend your time writing rules...

SpamSieve is the best one-time software purchase I ever made in over 10 years:


SpamSieve: Easy-to-use Mac spam filter for Apple Mail ...




Apr 3, 2020 7:06 AM in response to rubynrse

I have a single rule on my Mojave installation. I called it Junk These, but it could be named PITA 😎. In that single rule, I have seven if [any] conditions including those using Return-Path. You can add multiple conditions by clicking the + symbol of the last condition. I have one action — move the spam to the mailbox Trash on my Mac.


In Mail Preferences : Junk Mail, I have √ Enable junk mail filtering, √ Sender of message is in my Contacts, and √ Filter junk mail before applying my rules.

Spam influx

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.