Do you mean something like this. Obviously I may need more qualifiers.
What I am really asking is if I can match a field like envelope-from like this?

If CriteriaMet([envelope-from],"*") <> _
CriteriaMet([ME_FROM],"*") Then
FilterResult=1
End If

Thanks

Never looked at the Criteria script editor. Looks promising. Maybe I can do a country match on the envelope-from field and then give it a spam probability of 100. I will look for some examples. Not sure of the correct syntax with this feature.

I know there has been a lot of talk for a long time about detecting spoofed emails, but is there actually a way to do it? Maybe with an MTA script or something? Here is an example of what I am seeing from the email source envelope-from <info@spoof.com.ar> From: "good_user@mydomain.com" <info@spoof.c...

+1....again. Is anyone from Mailenable looking here?

The new wave of spam has the message body as a jpg image without text so it cannot be filtered as spam.

We need new filter criteria that can identify if an email message body is only an image. Or if there is no text in the message body.

+1 !

I would like to see the from email added to the Bad Mail and Quarantine lists.
Also would be nice if the fields were selectable so you can remove the ones you do not need.
Thank you

I am trying to create a subject line filter, but the offending emails have the subject line encrypted during connection between the client and server and are not being recognized by the filter.

How can I get around this?

Please enhance that to - Greylist any email that does not return an SPF-pass

I like the new SPF greylisting feature, but it needs to be enhanced to greylist all non SPF-pass emails. Including soft fail and no SPF record.
Or add a filter action to greylist the email being checked

I want to convert all my phone/mobile users to use webmail instead of an email client for security reasons.

The question that pops up is how can the user get notified when a new email arrives using webmail on the phone?

Thanks for your response. I recommend adding a global email whitelist, or at least a whitelist at the management level. Very few of my users use webmail, rather their client such as Outlook. I personally would use the global whitelist for TLD's. Adding wildcards fixed the filters issue. You need to ...

After trying lots of things and browsing the web I found the answer. you must use wildcards before the word unless it is a complete email address for the From header match The safest bet is to just use a "*" wildcard character before and after any word in the list. Now it works. They don't mention t...

I am having a lot of messages pass because the filter criteria " Where the From header line contains specific words" is inspecting the wrong field. There are two from fields. The initial Received: from user.net and the From field after the subject line which contains the email address of the sender....

How do I prevent a legit email from ending up in Junk? There is no email whitelist. Not having email address whitelists is a bad idea. I am not going to whitelist, let's say, a gmail, or yahoo SMTP IP just so one user is whitelisted. That is insane and more of a security risk than a spoofed email. B...