Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

Question

Mac Mail Filter Help Needed

May 12, 2011 11:46PM PDT

A friend of mine had her computer compromised and it's spamming everyone in her address book. I set up a rule in Mac Mail (version 4.5 for Snow Leopard) as follows:

If [All] of the following conditions are met:

[Any recipient] [does not contain] (my e-mail address)

[From] [is equal to] (friend's e-mail address

Perform the following actions:

[Delete Message]

A message got through yesterday which I assume means I don't have the rule set up correctly. Basically I want to delete anything from this sender if I am not the only recipient. Any suggestions?

Discussion is locked

- Collapse -
Answer
That filter sounds about right
May 13, 2011 2:34AM PDT

what was it that was different on the email that got in?

P

- Collapse -
Nothing that I could see
May 13, 2011 5:04AM PDT

Same sender, multiple recipients, no subject. I can't use "no subject" as part of the rule because sometimes there is one even if it's just a single letter.

- Collapse -
You may have to live with the odd one or two but,
May 13, 2011 9:42AM PDT

why not get your friend to clean up her machine and get rid of the nasties there.

- Collapse -
She's trying
May 14, 2011 1:00AM PDT

But she's in another state and not that computer-savvy. I don't know what she's tried or whether she's taken it to Geek Squad or anything like that.

- Collapse -
Answer
Criteria must all be TRUE
May 19, 2011 6:59AM PDT

"If [All] of the following conditions are met:"

This means that all of your criteria must be true.

"[Any recipient] [does not contain] (my e-mail address)"

This criteria means the email does NOT contain your email address. if the email DOES contain your email address then the email gets through.

- Collapse -
Did I miss something?
May 19, 2011 9:30AM PDT

Isn't that what the OP wanted?

- Collapse -
In general
May 19, 2011 12:08PM PDT

All conditions must be true.

If he changes the critera: [Any recipient] [does not contain] (my e-mail address)

To: [Any recipient] [contains] (my e-mail address)

Then his rule will delete the email. Otherwise how is he getting the email if his email address is NOT contained in the Any recipient criteria?

Because his criteria states that his email address is NOT to be found among [Any recipients] if it is found, the email will NOT be deleted even if it is sent from his girlfriend's email account.
<img src="data:image/png;base64,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" style="position: absolute; visibility: visible; color: transparent; margin: 0px; border: medium none; z-index: 2147483647; left: 647px; top: 100px;" id="sm-target-image" />

- Collapse -
Read the first post again
May 19, 2011 10:05PM PDT

and you will see that his girlfriends machine is compromised and is sending spam out by itself.

- Collapse -
I disagree.
May 20, 2011 2:08AM PDT

I did read the OP first post. Below is the salient part that made me comment as I did.

"A message got through yesterday which I assume means I don't have the
rule set up correctly. Basically I want to delete anything from this
sender if I am not the only recipient. Any suggestions?"

He specifically said if he is not the only only recipient.

Therefore a contains is correct, though an exact with his email address would require a separate rule that runs first, in order to capture and accept an email from her that he wants to keep (addressed ONLY to him).

Or am I truly parsing his post incorrectly?

- Collapse -
Hmmm,
May 20, 2011 5:08AM PDT

could be me that's round the wrong way

P