Apply this rule after the message arrives
Where the message body contains 'string'
and Where the To or CC line contains
'102807-14...@spamg.com'
Copy it to the PaymentsPRACTISE folder
and Stop processing more rules
works when 'string' ='ING' (which occurs everywhere below) but fails
when 'string' ='$828' or 'Camden '
Headers +body of test email=
Return-Path:
<+102807-1424a+myaddy+b46df0c831.saver#ingdir...@spamg.com>
Received: from hrndva-mxlb.mail.rr.com ([10.128.255.16])
by hrndva-imta07.mail.rr.com with ESMTP
id
<20080301024116.INHZ30.h...@hrndva-mxlb.mail.rr.com>
for <X...@rr.com>; Sat, 1 Mar 2008 02:41:16 +0000
X-IronPort: hrndva-mx13.mail.rr.com 338057042
X-RR-Connecting-IP: 216.75.35.164
Received: from gourmet.spamg.com ([216.75.35.164])
by hrndva-mxlb.mail.rr.com with ESMTP; 01 Mar 2008 02:40:41 +0000
Received: from spamg.com (localhost.localdomain [127.0.0.1])
by spamg.com (8.13.8/8.13.7) with ESMTP id m212edDa023221
for <X...@rr.com>; Sat, 1 Mar 2008 02:40:39 GMT
Received: (from jqh1@localhost)
by spamg.com (8.13.8/8.13.8/Submit) id m212edsi023217
for X...@rr.com; Sat, 1 Mar 2008 02:40:39 GMT
Received: from INGDEXTRAN02.ingdirect.com (ingdextran02.ingdirect.com
[63.113.210.141])
by spamg.com (8.13.8/8.13.7) with ESMTP id m212ecB1023182
for <102807-14...@spamg.com>; Sat, 1 Mar 2008 02:40:39 GMT
Date: Fri, 29 Feb 2008 21:40:16 -0500
Message-ID: <23720165.485711204339216682.JavaMail.dgwprod@INGDESASSD6>
From: "ING DIRECT - sa...@ingdirect.com"
<+102807-1424a+myaddy+b46df0c831.saver#ingdir...@spamg.com>
To: 102807-14...@spamg.com
Subject: Transfer Money Notice (trusted: ingdirect.com)
X-Antivirus: AVG for E-mail 7.5.516 [269.21.3/1307]
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="=======AVGMAIL-47CC52624C89======="
--=======AVGMAIL-47CC52624C89=======
Content-Type: multipart/alternative;
boundary="----=_Part_33612_6749213.1204339216682"
------=_Part_33612_6749213.1204339216682
Content-Type: text/html
Content-Transfer-Encoding: 8bit
<html xmlns="http://www.w3.w4.com/1999/xhtml">
<head>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link href="http://FAKEemail/ing.css" rel="stylesheet"
type="text/css">
</head>
<body marginheight="0" marginwidth="0" topmargin="0" alink="#000066"
link="#000066" vlink="#ff6600" bgcolor="#ffffff">
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td><img src="http://FAKEemail/images/estate_top_generic_blank.gif"
width="450" height="61" alt="" border="0"></td>
</tr>
</table>
<table border="2" cellpadding="0" cellspacing="0" width="450"
bordercolor="#000066">
<tr>
<td bgcolor="#ffffff" valign="top">
<table border="0" cellpadding="7" cellspacing="0" width="440"
bgcolor="#ffffff">
<tr>
<td width="300" valign="top">
<p>Dear Larry,<br>Customer Number: XXXXXXX853</p>
<p>
Date: February 29, 2008</p>
<p>
This email is to notify you that Camden Property has
initiated a
withdrawal for $828.07 from your ING DIRECT
Electric Orange
.
</p>
<p>
Your confirmation number is 0918865889.
</p>
<p>
To view your account balance, login to <a
href="http://www.FAKE.com">ingdirect.com</a>.
</p>
<div align="left">
<table border="0" width="280">
<tr>
<td><img src="http://FAKEemail/images/estate_fdic_generic.gif"
width="75" height="16" alt="FDIC" border="0"></td><td
width="70"> </td><td align="right"><img
src="http://FAKEemail/images/estate_equalhousing_generic.gif"
width="25" height="31" alt="equal housing lender" border="0"></td>
</tr>
</table>
</div>
</td><td valign="top" bgcolor="white" align="center" width="77"><img
src="http://FAKEemail/images/estate_bouncingball_generic.gif"
width="77" height="72" alt="" border="0"><br>
<br>
<img src="http://FAKEemail/images/estate_vertical_generic.gif"
width="35" height="238" alt="" border="0"></td>
</tr>
</table>
</td>
</tr>
</table>
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td><img src="http://FAKEemail/images/estate_bottom_generic.gif"
width="450" height="25" alt="" border="0"></td>
</tr>
</table>
</body>
</html>
Your help is MUCH appreciated. Thanks- bye- Larry
----------------------------------------------------------------------
A working unsecure OS is infinitely better than non-working secure OS.
Just spent 1 week cleaning up the mess WUpdate made preventing
hypothetical security problems. http://microscum.com/comsense/
Outlook Express is family of Internet Explorer and Outlook of the Office
family.
Here is the link for the right forum
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.outlookexpress.general
Good Luck!
--
Robert Sparnaaij [MVP-Outlook]
Coauthor, Configuring Microsoft Outlook 2003
http://www.howto-outlook.com/
Outlook FAQ, HowTo, Downloads, Add-Ins and more
http://www.msoutlook.info/
Real World Questions, Real World Answers
-----
"Larry(LJL269)" <N...@EMAIL.COM> wrote in message
news:ug6ot39cnm857mdm4...@4ax.com...
Thanks- bye- Larry
On Sat, 15 Mar 2008 21:25:55 +0100, "Roady [MVP]"
<newsgroups_DELETE_@_DELETE_sparnaaij_NO_._SPAM_net> wrote:
>Note that this is an Microsoft Office Outlook forum.
>
>Outlook Express is family of Internet Explorer and Outlook of the Office
>family.
>
>Here is the link for the right forum
>http://www.microsoft.com/communities/newsgroups/en-us/default.aspx?dg=microsoft.public.outlookexpress.general
>
>Good Luck!
----------------------------------------------------------------------