On 28-05-2008 15:12 CET, FTR composed this enchanting statement:
> I get more and more spam that uses my forged email address in the FROM
> field. In one case the X-me-spamlevel says it's "not-spam". Plaints
> don't help as is evident if you see what spam-rbl returns as email
> address to complain :
> cris@7s.ro.REMOVE.THIS.SUFFIX gabi_lol2002@yahoo.com
>
What about the 'address book filter' mentioned in the subject?

You can do several things:

1) review your ISP service: check on the filters they apply (on your behalf)

2) enable Thunderbird's adaptive filter (Junk Settings) for the relevant
mail account

3) send a formal complaint to the host 'S.C. IZO GROUP NETWORKS S.R.L'
of IP address "91.90.121.219", including the message source (Ctrl+U).

M.

FTR wrote:
> Melchert Fruitema wrote:
>> On 28-05-2008 17:48 CET, FTR composed this enchanting statement:
>>> Melchert Fruitema wrote:
>>>> On 28-05-2008 15:12 CET, FTR composed this enchanting statement:
>>>>> I get more and more spam that uses my forged email address in the
>>>>> FROM field. In one case the X-me-spamlevel says it's "not-spam".
>>>>> Plaints don't help as is evident if you see what spam-rbl returns
>>>>> as email address to complain :
>>>>> cris@7s.ro.REMOVE.THIS.SUFFIX gabi_lol2002@yahoo.com
>>>>>
>>>> What about the 'address book filter' mentioned in the subject?
>>
>> See below.
>>
>>>> You can do several things:
>>>>
>>>> 1) review your ISP service: check on the filters they apply (on your
>>>> behalf)
>>>
>>> They filter about 250 every other week but thus is visibly not enough
>>>>
>>>> 2) enable Thunderbird's adaptive filter (Junk Settings) for the
>>>> relevant mail account
>>>
>>> I didn't say but this was of xourse the first step.
>> So JMC is not catching it. A few more questions pop up.
>>
>> Is your address book, including your email address, exempt for JMC, by
>> any change?
>
> What do you mean with "my address book exempt for the junk mail control" ?
>

Junk Mail Controls (JMC) can exempt any address in your address book
from filtering.

This is set on an account by account basis

Tools-->Account Settings-->-->Junk Settings
[] Do not mark mail as junk if sender is in:

Moz Champion (Dan) wrote:
> FTR wrote:
>> Melchert Fruitema wrote:
>>> On 28-05-2008 17:48 CET, FTR composed this enchanting statement:
>>>> Melchert Fruitema wrote:
>>>>> On 28-05-2008 15:12 CET, FTR composed this enchanting statement:
>>>>>> I get more and more spam that uses my forged email address in the
>>>>>> FROM field. In one case the X-me-spamlevel says it's "not-spam".
>>>>>> Plaints don't help as is evident if you see what spam-rbl returns
>>>>>> as email address to complain :
>>>>>> cris@7s.ro.REMOVE.THIS.SUFFIX gabi_lol2002@yahoo.com
>>>>>>
>>>>> What about the 'address book filter' mentioned in the subject?
>>>
>>> See below.
>>>
>>>>> You can do several things:
>>>>>
>>>>> 1) review your ISP service: check on the filters they apply (on
>>>>> your behalf)
>>>>
>>>> They filter about 250 every other week but thus is visibly not enough
>>>>>
>>>>> 2) enable Thunderbird's adaptive filter (Junk Settings) for the
>>>>> relevant mail account
>>>>
>>>> I didn't say but this was of xourse the first step.
>>> So JMC is not catching it. A few more questions pop up.
>>>
>>> Is your address book, including your email address, exempt for JMC,
>>> by any change?
>>
>> What do you mean with "my address book exempt for the junk mail
>> control" ?
>>
>
> Junk Mail Controls (JMC) can exempt any address in your address book
> from filtering.
>
> This is set on an account by account basis
>
> Tools-->Account Settings-->-->Junk Settings
> [] Do not mark mail as junk if sender is in:
>
>
Ok, now I understand the idea. I already do this. But this preference
does not filter the spams that use my own forged email adresses. Any
idea how to avoid this ?

FTR wrote:
> Moz Champion (Dan) wrote:
>> FTR wrote:
>>> Melchert Fruitema wrote:
>>>> On 28-05-2008 17:48 CET, FTR composed this enchanting statement:
>>>>> Melchert Fruitema wrote:
>>>>>> On 28-05-2008 15:12 CET, FTR composed this enchanting statement:
>>>>>>> I get more and more spam that uses my forged email address in the
>>>>>>> FROM field. In one case the X-me-spamlevel says it's "not-spam".
>>>>>>> Plaints don't help as is evident if you see what spam-rbl returns
>>>>>>> as email address to complain :
>>>>>>> cris@7s.ro.REMOVE.THIS.SUFFIX gabi_lol2002@yahoo.com
>>>>>>>
>>>>>> What about the 'address book filter' mentioned in the subject?
>>>>
>>>> See below.
>>>>
>>>>>> You can do several things:
>>>>>>
>>>>>> 1) review your ISP service: check on the filters they apply (on
>>>>>> your behalf)
>>>>>
>>>>> They filter about 250 every other week but thus is visibly not enough
>>>>>>
>>>>>> 2) enable Thunderbird's adaptive filter (Junk Settings) for the
>>>>>> relevant mail account
>>>>>
>>>>> I didn't say but this was of xourse the first step.
>>>> So JMC is not catching it. A few more questions pop up.
>>>>
>>>> Is your address book, including your email address, exempt for JMC,
>>>> by any change?
>>>
>>> What do you mean with "my address book exempt for the junk mail
>>> control" ?
>>>
>>
>> Junk Mail Controls (JMC) can exempt any address in your address book
>> from filtering.
>>
>> This is set on an account by account basis
>>
>> Tools-->Account Settings-->-->Junk Settings
>> [] Do not mark mail as junk if sender is in:
>>
>>
> Ok, now I understand the idea. I already do this. But this preference
> does not filter the spams that use my own forged email adresses. Any
> idea how to avoid this ?


You have EXEMPTED your address (which we can assume is in your address
book) from JMC filtering. Ergo, JMC will not suffice for those specific
emails.

Personally, the number of spam with your email on it (as the from)
should be exceedingly small. If it is being done by a spammer, he
usually moves on after one send or so. If it is the result of someone
being infected with a virus or trojan, it may be more problematic. Take
a look at the headers of the spam with your email address (as the from)
on it - are they coming from a specific range of IP addresses (or even
the same?) - that would indicate it is someone who is infected and a
virus or trojan is using his computer (and your email addy from his
address book) to email the spam. In either case, it usually passes quite
quickly.

In any case, here is an adaptation of the basic spam filter that should
work in your situation.

IF [your email]
and
IF [your email]

then move to junk folder


If it is true spam, then your email will not be in the to or cc field
but rather a bcc, so it it is spam (to or cc is not you) then a simple
check to see if it is marked from your address (as the from) will do the
trick.

Moz Champion (Dan) wrote:
> FTR wrote:
>> Moz Champion (Dan) wrote:
>>> FTR wrote:
>>>> Melchert Fruitema wrote:
>>>>> On 28-05-2008 17:48 CET, FTR composed this enchanting statement:
>>>>>> Melchert Fruitema wrote:
>>>>>>> On 28-05-2008 15:12 CET, FTR composed this enchanting statement:
>>>>>>>> I get more and more spam that uses my forged email address in
>>>>>>>> the FROM field. In one case the X-me-spamlevel says it's
>>>>>>>> "not-spam". Plaints don't help as is evident if you see what
>>>>>>>> spam-rbl returns as email address to complain :
>>>>>>>> cris@7s.ro.REMOVE.THIS.SUFFIX gabi_lol2002@yahoo.com
>>>>>>>>
>>>>>>> What about the 'address book filter' mentioned in the subject?
>>>>>
>>>>> See below.
>>>>>
>>>>>>> You can do several things:
>>>>>>>
>>>>>>> 1) review your ISP service: check on the filters they apply (on
>>>>>>> your behalf)
>>>>>>
>>>>>> They filter about 250 every other week but thus is visibly not enough
>>>>>>>
>>>>>>> 2) enable Thunderbird's adaptive filter (Junk Settings) for the
>>>>>>> relevant mail account
>>>>>>
>>>>>> I didn't say but this was of xourse the first step.
>>>>> So JMC is not catching it. A few more questions pop up.
>>>>>
>>>>> Is your address book, including your email address, exempt for JMC,
>>>>> by any change?
>>>>
>>>> What do you mean with "my address book exempt for the junk mail
>>>> control" ?
>>>>
>>>
>>> Junk Mail Controls (JMC) can exempt any address in your address book
>>> from filtering.
>>>
>>> This is set on an account by account basis
>>>
>>> Tools-->Account Settings-->-->Junk Settings
>>> [] Do not mark mail as junk if sender is in:
>>>
>>>
>> Ok, now I understand the idea. I already do this. But this preference
>> does not filter the spams that use my own forged email adresses. Any
>> idea how to avoid this ?
>
>
> You have EXEMPTED your address (which we can assume is in your address
> book) from JMC filtering. Ergo, JMC will not suffice for those specific
> emails.
>
> Personally, the number of spam with your email on it (as the from)
> should be exceedingly small. If it is being done by a spammer, he
> usually moves on after one send or so. If it is the result of someone
> being infected with a virus or trojan, it may be more problematic. Take
> a look at the headers of the spam with your email address (as the from)
> on it - are they coming from a specific range of IP addresses (or even
> the same?) - that would indicate it is someone who is infected and a
> virus or trojan is using his computer (and your email addy from his
> address book) to email the spam. In either case, it usually passes quite
> quickly.
>
> In any case, here is an adaptation of the basic spam filter that should
> work in your situation.
>
> IF [your email]
> and
> IF [your email]
>
> then move to junk folder
>
>
> If it is true spam, then your email will not be in the to or cc field
> but rather a bcc, so it it is spam (to or cc is not you) then a simple
> check to see if it is marked from your address (as the from) will do the
> trick.

Thanks. I immediately try it out.