I get mail with received dates that are in the future

Forum for MailWasher Pro 7 and/or older 2011/2012 versions.
squeek73
Mystified Moa
Posts: 7
Joined: Tue Jan 15, 2019 9:58 am

I get mail with received dates that are in the future

Fri Mar 08, 2019 5:43 am

I'd like to filter any email that has a received date of (current date)+1 year.

Is there a way to do that? If not, is there a way to just filter with received date late than 2020 (I can change it myself to 2021, 2022, etc.)
User avatar
Digerati
Microsoft MVP
Location: Nebraska, USA
Posts: 1921
Joined: Thu Jul 24, 2008 3:16 pm

Re: I get mail with received dates that are in the future

Fri Mar 08, 2019 6:22 am

Did you verify your computer's datetime clock is correct? Including timezone?

I used to get emails with future dates though typically they were a day or two, not a year. I don't remember which is the default (Sent or Received) but I added whatever was not there to my message grid so I could see when something was sent compared to when I actually received it. Typically, I received emails within a minute or two. But some times, it can take days.

Are these you get always spam?
Image Bill (AFE7Ret)
Freedom is NOT Free!
Image Windows and Devices for IT, 2007 - 2018
Heat is the bane of all electronics!
─────────────────────
squeek73
Mystified Moa
Posts: 7
Joined: Tue Jan 15, 2019 9:58 am

Re: I get mail with received dates that are in the future

Fri Mar 08, 2019 6:31 am

My clock is right, including timezone.

These emails have dates on them like 12/20/2036.
User avatar
Digerati
Microsoft MVP
Location: Nebraska, USA
Posts: 1921
Joined: Thu Jul 24, 2008 3:16 pm

Re: I get mail with received dates that are in the future

Fri Mar 08, 2019 6:35 am

I ask again, are they always spam? Or are some legit? Are they from all different domains?

If you send an email to yourself, are the dates correct?

I really have no clue why this might be happening - so I am just throwing out questions in the hope something might trigger a thought.
Image Bill (AFE7Ret)
Freedom is NOT Free!
Image Windows and Devices for IT, 2007 - 2018
Heat is the bane of all electronics!
─────────────────────
squeek73
Mystified Moa
Posts: 7
Joined: Tue Jan 15, 2019 9:58 am

Re: I get mail with received dates that are in the future

Fri Mar 08, 2019 8:00 am

They are always spam, and yes, different domains, most of which don't even exist. Yes, the dates are correct.

And I misspoke; it's the DATE:, not the received date.

Here's an example:

Return-Path: <return@lockorder.com>
From: Inogen Oxygen <EnGmRZtI@lockorder.com>
Subject: Get your free info kit now!
Date: Mon, 20 Dec 2100 23:59:59 +0000

I shouldn't get email from the next century unless I used my time machine, which is in the shop.

So, can we filter by date (or date range)?
User avatar
Digerati
Microsoft MVP
Location: Nebraska, USA
Posts: 1921
Joined: Thu Jul 24, 2008 3:16 pm

Re: I get mail with received dates that are in the future

Fri Mar 08, 2019 8:38 am

Well, sorry, this is out of my wheelhouse. Hopefully someone else with more insight to this will step in with some advice.
Image Bill (AFE7Ret)
Freedom is NOT Free!
Image Windows and Devices for IT, 2007 - 2018
Heat is the bane of all electronics!
─────────────────────
User avatar
rusticdog
Firetrust Monkey
Posts: 15864
Joined: Mon Jun 13, 2005 6:27 pm

Re: I get mail with received dates that are in the future

Fri Mar 08, 2019 11:36 am

OK sure, the Date: header is easy to forge in emails. But there is no nice way to filter on date in MailWasher, so instead you need to pattern match on the year.

You could try creating a Custom Filter, look in the Header for the following REGEX

Code: Select all

^Date:.+2(0|1)(0|[2-9])[0-9]
To break that down
^Date: means the line must start with Date:
.+ is to match any characters (this is catch the Day, Month etc)

2 is to match 2
(0|1) is to match either 0 or 1 (the | means OR)
(0|[2-9]) is match 0 or 2 through to 9 (so basically not 1)
[0-9] to match any number

Next year you need to change (0|[2-9]) to be ([0-1]|[3-9])


Now that I've typed all that, probably the better way would be to do a filter where the year doesn't match

So if the HEADER, DOESN'T CONTAIN, REGEX

Code: Select all

^Date:.+(2018|2019)
Then you just need to enter any years you want excluded, e.g.
(2017|2018|2019|2020)
squeek73
Mystified Moa
Posts: 7
Joined: Tue Jan 15, 2019 9:58 am

Re: I get mail with received dates that are in the future

Fri Mar 08, 2019 1:27 pm

Thanks. I was hoping MWP could parse it out as a real date value, and filter it that way, but your way will do.
User avatar
Digerati
Microsoft MVP
Location: Nebraska, USA
Posts: 1921
Joined: Thu Jul 24, 2008 3:16 pm

Re: I get mail with received dates that are in the future

Sat Mar 09, 2019 6:02 am

rusticdog wrote:OK sure, the Date: header is easy to forge in emails. But there is no nice way to filter on date in MailWasher, so instead you need to pattern match on the year
I thought of this and that's one reason I asked if these were coming from the same domain. While a spammer can easily spoof different domain names too, it sounds like squeek73's "future" spam is coming from different spammers. While that too is possible, it seems odd (to me anyway) to have a rash of spam with future dates coming from different spammer all of a sudden now. :scratch
Image Bill (AFE7Ret)
Freedom is NOT Free!
Image Windows and Devices for IT, 2007 - 2018
Heat is the bane of all electronics!
─────────────────────

Return to “MailWasher Pro 7”