SPAM rule is inconsistent - sometimes works sometimes not

[cannonball]

I have Mail Washer 7.15.5. i have a "Spam2" rule setup such that a "?" in the "from" or "subject" would be then be a SPAM. Yet, in some incoming email, that works, but in other email not. See attached. It shows red arrows pointing to those email which do not get the SPAM label as they should based on the rule. I have also attached an image of the rule.

Why does not Mail Washer flag all such "?" as SPAM? And how to correct?

[gingbat]

Yes, the filter wont catch these as the image you see is not what is actually in the email, check the FROM field in MWpro and you'll see what characters you need to be using in the filter....

First, click View>>Preview Pane to see this.
Click the email,
Click "Show email info" (at the top of the preview pane) > > Source tab

Scroll down to the FROM field....

eg:

MIME-Version: 1.0
Message-ID: <trinity-cde0d6b6-6d67-4b29-89f9-abba0107b16d-1726039177317@trinity-msg-rest-gmx-mailcom-live-8794977bf-ltsxs>
From: #######@mail.com
To: J C <####@gmail.com>
Subject: Re: Re: Re: Re: Re:
Content-Type: text/html; charset=UTF-8

[cannonball]

Hello again.

I did as you instructed...selected the email with the ? in FROM and SUBJECT, then went to the SOURCE and see that the FROM and SUBJECT shows some crazy stuff (see below for a copy of the SOURCE for the FROM and SUBJECT.) I am not sure what to put into the filter/rule to have this email follow the rule for SPAM2. Please advise.

MailWasher3.jpg (205.23 KiB) Viewed 1615 times

[gingbat]

Not exactly sure without the source of the email to test, (as possibly the character formatting will give the MW filters issues) but possibly the below filter would work?

2024-09-14_083911.jpg (60.78 KiB) Viewed 1575 times

The filter text is: A{20,}

It means if there is more than 20 A's in the subject mark it as spam, you can change the number to whatever you like.

Note also, good tips on regex filtering here:

https://riptutorial.com/regex

Also, this page is pretty good from forums:

http://forum.firetrust.com/viewtopic.ph ... a757b8635b