Visitor

 • 

9 Messages

Friday, November 18th, 2022 6:54 PM

Closed

email filters based on header fields

I'm trying to create a filter to detect emails with specific domains in the Return-Path and X-Auth-ID header fields, and move them to a Junk folder, but can't get it to work.

For example, I have created a rule with this header condition:

It doesn't work and the emails go straight to my inbox. I don't think the problem is in the Contains syntax, because I've used similar syntax to successfully create filters based on the contents of the Sender/From field. 

I'm trying to set up these filters to reduce the number of phishing emails in my inbox. I check the Junk folder and mark anything that is spam as spam, but how long does it take the email server to see the pattern to these emails, and automatically mark them as spam? 

I'd also like to echo the many other posters who are shocked at the dismal lack of documentation for how Comcast's email filters work.  I've seen links to OX Middleware and Sieve regular expressions in the forums, and after reading them I've cobbled together a decent set of filters through trial and error. I have a programming background so sort of know what I'm doing, but I pity the average Comcast user trying to combat the tidal wave of spam and phishing emails we are all receiving these days.  

This conversation is no longer open for comments or replies and is no longer visible to community members.

Oldest First
Selected Oldest First

Official Employee

 • 

2.8K Messages

4 years ago

Thank you very much for reaching out to us here @user_1c8394. If you have the Automatically move spam and potentially harmful messages to the Spam folder option enabled, and are also having issues after you have set up a separate filter with a rule name and condition, I can troubleshoot that from here. I would need you to send me a direct message with the full name and complete address for your service. 

To send a direct message [private message]:

   Click the "Direct Message" icon or  https://forums.xfinity.com/direct-messaging

   Click the "New message" (pencil and paper) icon

   The "To:" line prompts you to "Type the name of a person". Instead, type "Xfinity Support" there.

   - As you are typing a drop-down list appears. Select "Xfinity Support" from that list.

   - An "Xfinity Support" graphic replaces the "To:" line.

   Type your message in the text area near the bottom of the window

   Press Enter to send it

Visitor

 • 

9 Messages

4 years ago

The Header rule with name: X-Auth-ID contains: @dreamvacations.com is working now.  It may be that it was preceded by another rule that took precedence.

At any rate, I would still like to know why I keep receiving these emails which are clearly spam, and which I mark as spam?  They appear to come from my comcast email address, but the Return-Path is a different email (@aol.com or @yahoo.com domains), and X-Auth-ID is always smarlin@dreamvacations.com.  What's the best way to report these phishing emails? Mark them as spam, send them to abuse@comcast.net, or both?

Problem Solver

 • 

954 Messages

Here is our great Xfinity link, https://internetsecurity.xfinity.com/help/report-abuse that you can use to report things like this and more! 

I no longer work for Comcast.

forum icon

New to the Community?

Start Here