Hi Guy,

 Ooooo, nice observation.

This particular flavor of spam does indeed NOT have a To: entry.

I take it you are using the "Spam and Content controls" -> "Content control"?

(I have been using "Mail filtering rules", I may need to broaden my skill set :-)

Many thanks.

Hi,

I regularly receive quite a bit of SPAM mail, one type in particular is defying my attempts to quietly file it away unseen.

The header contents are always different, so is the "sucker link" address they want you to click, so I can't make a rule based on them.

There is one constant however, the phrase "Can't see the images? - Click here" which is buried in an HTML string;

<a href="http://a.GetLowerAutoInsPremiums.com/5419069321864.CIS3.2/886798/217226/1000-008-B-4/1000/your.html"><b>Can't See The Images? - Click Here!</b><br><....

Try as I may, I have been unable to get the new mail filtering rule to trigger on this phrase.

Can the New Mail Filter "look inside" HTML?

 Thanks,

Garry.

Not addressing your query...

 Are these mails actually addressed TO: your email address?

I have one client that receives a lot of spam, maybe 50% of the mails.
Of those 90% or more are not addressed to their address, or the TO: field is empty.

What I've done is to employ a custom Content Control and place it first in the order.

The Content Control rules are:
ifnot exists "to" weight 101 tag "No TO Header"
ifnot header "to" contains "USER@EXAMPLE.COM" weight 101 tag "Not TO My Address"

General
Applies to Internet

Exceptions
Then put everyone's email address you expect to get messages from in the Whitelist.

Message Tests
The file with the above two rules.
Weight 100
Bytes 3000

Actions
Move to Junk/Spam folder
Add headers