Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Spam influx

I have mail, Version 13.4 (3608.80.23.2.2). For the past couple of months I've been receiving email. I don't have and never have had an email like that, so I don't know how it can come to my account. The emails are alike its a whole page that looks like this: --_-------_dsfgdhhfgdjsf_----=_NextPart_AF9_3C66_D9OTWHJM.BHYNY9INhhmTOQ3I18e:

Content-Type: multipart/alternative; boundary="_----------=_hhmTOQ3I18e_----=_NextPart_AF9_3C66_D9OTWHJM.BHYNY9IN"




--_----------=_hhmTOQ3I18e_----=_NextPart_AF9_3C66_D9OTWHJM.BHYNY9IN

Content-Type: text/plain; charset=utf-8




--_----------=_hhmTOQ3I18e_----=_NextPart_AF9_3C66_D9OTWHJM.BHYNY9IN

Content-Type: text/html; charset=utf-8


When I create a rule to automatically put this in spam folder, another email pops up with the same gibberish from another sender. What can I do?


[Email Edited by Moderator]

MacBook Pro 15", macOS 10.15

Posted on Apr 3, 2020 6:15 AM

Reply
Question marked as Top-ranking reply

Posted on Apr 3, 2020 6:46 AM

You need to target the Return-Path address (just once) for the originator(s) of that spam. Apple does not include Return-Path in its list of available header fields that you construct Mail rules. However, you can add custom headers.


In any Mail rule, click a From header selector and a large secondary list will appear. At the very bottom is the Edit header list…, and here is my entry for Return-Path. Click the + button and add it exactly as shown below:



For the given SPAM message, you will want the following rule setting:



The right-most content is the actual Return-Path address of the particular spam message, and represents the Mail server address that they are using to send the spam to you. The content of the To:, From:, and Reply-To: header fields can be contrived, but they cannot spoof the Return-Path address.


There are alternative ways to get at that Return-Path content.

  1. Select the SPAM email message item
    1. Select Mail's View menu : Message : Raw Source — a window will apppear showing the message's headers
      1. The Return-Path header item may be conveniently the first line, or further down in the header fields that are shown. You want to copy/paste the entire Return-Path address enclosed within, and including the < and > characters into the third text field of your specific Mail rule for this spam. That field is partially shown in the example image above.
      2. Save the Rule, and a message will appear if you want to apply the rule. Agree, and the selected mail item will be handled. I send mine to Trash on my Mac, but you may initially want to send them to your Junk mail folder.
    2. I have an AppleScript that based on a selected message item, will display the From: and Return-Path addresses, for a very simple copy and paste from an AppleScript dialog that looks like the following using nonsense addresses:



If I did nothing, I would get about 30 spams per day from the same organization with almost as many different From: header addresses. They all use the same Return-Path server, and I control all of these visually different spam messages with one mail rule using the Return-Path.


Similar questions

7 replies
Question marked as Top-ranking reply

Apr 3, 2020 6:46 AM in response to rubynrse

You need to target the Return-Path address (just once) for the originator(s) of that spam. Apple does not include Return-Path in its list of available header fields that you construct Mail rules. However, you can add custom headers.


In any Mail rule, click a From header selector and a large secondary list will appear. At the very bottom is the Edit header list…, and here is my entry for Return-Path. Click the + button and add it exactly as shown below:



For the given SPAM message, you will want the following rule setting:



The right-most content is the actual Return-Path address of the particular spam message, and represents the Mail server address that they are using to send the spam to you. The content of the To:, From:, and Reply-To: header fields can be contrived, but they cannot spoof the Return-Path address.


There are alternative ways to get at that Return-Path content.

  1. Select the SPAM email message item
    1. Select Mail's View menu : Message : Raw Source — a window will apppear showing the message's headers
      1. The Return-Path header item may be conveniently the first line, or further down in the header fields that are shown. You want to copy/paste the entire Return-Path address enclosed within, and including the < and > characters into the third text field of your specific Mail rule for this spam. That field is partially shown in the example image above.
      2. Save the Rule, and a message will appear if you want to apply the rule. Agree, and the selected mail item will be handled. I send mine to Trash on my Mac, but you may initially want to send them to your Junk mail folder.
    2. I have an AppleScript that based on a selected message item, will display the From: and Return-Path addresses, for a very simple copy and paste from an AppleScript dialog that looks like the following using nonsense addresses:



If I did nothing, I would get about 30 spams per day from the same organization with almost as many different From: header addresses. They all use the same Return-Path server, and I control all of these visually different spam messages with one mail rule using the Return-Path.


Apr 3, 2020 7:03 AM in response to rubynrse

rubynrse wrote:

I have mail, Version 13.4 (3608.80.23.2.2). For the past couple of months I've been receiving email addressed to Linda@aol.com. I don't have and never have had an email like that,

When I create a rule to automatically put this in spam folder, another email pops up with the same gibberish from another sender. What can I do?


You have both server side and client side filtering.


If you don't want to spend your time writing rules...

SpamSieve is the best one-time software purchase I ever made in over 10 years:


SpamSieve: Easy-to-use Mac spam filter for Apple Mail ...




Apr 3, 2020 7:06 AM in response to rubynrse

I have a single rule on my Mojave installation. I called it Junk These, but it could be named PITA 😎. In that single rule, I have seven if [any] conditions including those using Return-Path. You can add multiple conditions by clicking the + symbol of the last condition. I have one action — move the spam to the mailbox Trash on my Mac.


In Mail Preferences : Junk Mail, I have √ Enable junk mail filtering, √ Sender of message is in my Contacts, and √ Filter junk mail before applying my rules.

Spam influx

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.