Visitor
•
9 Messages
email filters based on header fields
I'm trying to create a filter to detect emails with specific domains in the Return-Path and X-Auth-ID header fields, and move them to a Junk folder, but can't get it to work.
For example, I have created a rule with this header condition:

It doesn't work and the emails go straight to my inbox. I don't think the problem is in the Contains syntax, because I've used similar syntax to successfully create filters based on the contents of the Sender/From field.
I'm trying to set up these filters to reduce the number of phishing emails in my inbox. I check the Junk folder and mark anything that is spam as spam, but how long does it take the email server to see the pattern to these emails, and automatically mark them as spam?
I'd also like to echo the many other posters who are shocked at the dismal lack of documentation for how Comcast's email filters work. I've seen links to OX Middleware and Sieve regular expressions in the forums, and after reading them I've cobbled together a decent set of filters through trial and error. I have a programming background so sort of know what I'm doing, but I pity the average Comcast user trying to combat the tidal wave of spam and phishing emails we are all receiving these days.




XfinityJohnG
Official Employee
•
2.8K Messages
4 years ago
Thank you very much for reaching out to us here @user_1c8394. If you have the Automatically move spam and potentially harmful messages to the Spam folder option enabled, and are also having issues after you have set up a separate filter with a rule name and condition, I can troubleshoot that from here. I would need you to send me a direct message with the full name and complete address for your service.
To send a direct message [private message]:
Click the "Direct Message" icon or https://forums.xfinity.com/direct-messaging
Click the "New message" (pencil and paper) icon
The "To:" line prompts you to "Type the name of a person". Instead, type "Xfinity Support" there.
- As you are typing a drop-down list appears. Select "Xfinity Support" from that list.
- An "Xfinity Support" graphic replaces the "To:" line.
Type your message in the text area near the bottom of the window
Press Enter to send it
0
0
user_1c8394
Visitor
•
9 Messages
4 years ago
The Header rule with name: X-Auth-ID contains: @dreamvacations.com is working now. It may be that it was preceded by another rule that took precedence.
At any rate, I would still like to know why I keep receiving these emails which are clearly spam, and which I mark as spam? They appear to come from my comcast email address, but the Return-Path is a different email (@aol.com or @yahoo.com domains), and X-Auth-ID is always smarlin@dreamvacations.com. What's the best way to report these phishing emails? Mark them as spam, send them to abuse@comcast.net, or both?
1
0