Ideally, your spam filter product should be detecting these types of messages but you asked about filter rules so if you are experienced with rules then you need to be looking for either a logic error or an error in the rule itself. To determine which, place your problem rule as the first rule in the list and temporarily change the action to a "set message color" action. This keeps a message available for testing while providing a visual indicator whether the rule worked. If it works you know you had a logic issue within the list of rules. If it doesn't work you know the problem is with the rule itself. Remember that read message are not filtered so if you have messages already in your new mail folder that you want to filter you need to make sure they are marked as unread.
If you are not familiar with rules, here is a primer...
If you wish to delete messages that contain specific From: header
content the best thing to do is to open the Raw view of one of those
messages and copy the entire From: header line. Then, in the New mail
filtering rules > Rule applied when folder is opened, create an
Expression rule and paste the From: header line in as the expression.
Expression rules have wildcard capabilities (see the Help file for more
info) but using the copy/paste approach insures that you delete only the
messages containing that specific From: header. If you wish to
experiment with wildcards I suggest temporarily changing the action to a
"Set message colour" action. This will allow you to identify which
messages are being detected by the rule to insure your wildcards are not
going to cause the deletion of valid messages.
Another rule type
is the Header rules. This is valuable for detecting content in headers
but is less specific in its detections (again, read the Help file for
info). Examples of Header filter rules would be:
If Subject contains "viagra" Delete
If Subject contains "male enhancement" Delete
Care
must be used when using Header rules. Such rules would delete every
message that contains "viagra" or "male enhancement" anywhere in the
Subject: header. You would not receive that message from your wife
containing the subject "Hurry home! Don't forget to pick up more Viagra". <G>
HTH