Join us to show up for other Firefox users 🦊. Earn fun badges and Mozilla swag vouchers! Find out more: https://mzl.la/askafox150

Windows 10 bereikte EO (einde ondersteuning) op 14 oktober 2025. Als je Windows 10 gebruikt, lees dan dit artikel.

Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

Zoeken in Support

Vermijd ondersteuningsscams. We zullen u nooit vragen een telefoonnummer te bellen, er een sms naar te sturen of persoonlijke gegevens te delen. Meld verdachte activiteit met de optie ‘Misbruik melden’.

Meer info

Deze conversatie is gearchiveerd. Stel een nieuwe vraag als u hulp nodig hebt.

How to create filter based upon ip address in header

  • 4 antwoorden
  • 1 heeft dit probleem
  • 192 weergaven
  • Laatste antwoord van rp108
  • Opgelost

rp108
rp108

Hi,

I am receiving spam/spoofing attempts from a foreign ip.

Unfortunately, the email has been spoofed to show that the email comes TO MY ADDRESS, and FROM MY ADDRESS.

The header has the ip address of the sender.

Is there a way to create a filter that examines the Header and if the ip or part-of the ip is there to filter the email?

Thankyou ! rp

Hi, I am receiving spam/spoofing attempts from a foreign ip. Unfortunately, the email has been spoofed to show that the email comes TO MY ADDRESS, and FROM MY ADDRESS. The header has the ip address of the sender. Is there a way to create a filter that examines the Header and if the ip or part-of the ip is there to filter the email? Thankyou ! rp

Gekozen oplossing

The header usually contains multiple Received headers. So it will only check the first encountered, as I said earlier. The result is the filter will be hit and miss, and most probably more miss than hit.

Is there any other commonality you could select like part of the Message-ID:

Dit antwoord in context lezen 👍 2

Alle antwoorden (4)

Matt
Matt
  • Top 10 Contributor

in Filters the list of things to match includes a customize entry. you can add any header field you like. But where the field occurs more than once the one closes to the top only will be read. (I think a bug, but it is how it works)

When adding a header field use the name exactly as it appears before the : once you have the header field you can then use contains to test for the IP address.

rp108
rp108 Vraageigenaar

Hi Matt,

Tnx so much for replying.

The exact Header text from one of these emails is; Received: from [184.154.177.50]

SO the field "name" is "Received" yes?

I just tried it. "Received" is now a choice !!!

So then I will use "contains" in the next Dialog Text Box and put in .... say at least the first few parts of the IP address, 184.154

So do you think that will work?

The reason that I am uncertain, is that I constructed a filter on just some of the plain text in the email and the Thunderbird filter seemed to ignore it.

Almost like there was some encoding going on that Thunderbird was happily decoding for me, but if that is so, I don't know how to see the "raw" text.

Hope this is not too much.

You are brilliant.

Many thanks, rp

Matt
Matt
  • Top 10 Contributor

Gekozen oplossing

The header usually contains multiple Received headers. So it will only check the first encountered, as I said earlier. The result is the filter will be hit and miss, and most probably more miss than hit.

Is there any other commonality you could select like part of the Message-ID:

rp108
rp108 Vraageigenaar

Tnx again Matt,

I will keep working with it, but now I understand how this works.

Tnx for sticking with me on this.

All the Best to you, rp