Windows 10 reached EOS (end of support) on October 14, 2025. If you are on Windows 10, see this article.

Avatar for Username

Search Support

Avoid support scams. We will never ask you to call or text a phone number or share personal information. Please report suspicious activity using the “Report Abuse” option.

Learn More
Open

Creating a filter for email pretending to be from my ISP Sonic.net

I-Thunderbird Junk email and spam
ronks1 replied
ronks1
ronks1

A substantial portion of email spam that I receive has a couple of characteristics: - the subject line includes "Sonic", and - the sender is plainly not Sonic.

For example:

Return-Path: <live1@tomokawasaki.or.jp> Received: from tomokawasaki.or.jp (tomokawasaki.or.jp [122.1.223.161]) by mwb-sdgw-mts-005c1.ocn.ad.jp (Postfix) with ESMTP id 063B61400008F for <ronks@sonic.net>; Sun, 19 Jul 2026 07:07:06 +0900 (JST) From: =?UTF-8?B?U29uaWMg0JLRlmxs0ZbQv2c=?= <live1@tomokawasaki.or.jp> (From translates to "Sonic Billing" here; in other spam it is cleartext) Subject: Automatic Payment Unsuccessful To: <ronks@sonic.net>

I am wondering if it is possible to construct a filter that says basically: If Subject includes Sonic AND From does not include Sonic Then Send to Trash (or mark as spam or whatever)

Can this be done?

A substantial portion of email spam that I receive has a couple of characteristics: - the subject line includes "Sonic", and - the sender is plainly not Sonic. For example: ----- Return-Path: <live1@tomokawasaki.or.jp> Received: from tomokawasaki.or.jp (tomokawasaki.or.jp [122.1.223.161]) by mwb-sdgw-mts-005c1.ocn.ad.jp (Postfix) with ESMTP id 063B61400008F for <ronks@sonic.net>; Sun, 19 Jul 2026 07:07:06 +0900 (JST) From: =?UTF-8?B?U29uaWMg0JLRlmxs0ZbQv2c=?= <live1@tomokawasaki.or.jp> (From translates to "Sonic Billing" here; in other spam it is cleartext) Subject: Automatic Payment Unsuccessful To: <ronks@sonic.net> ----- I am wondering if it is possible to construct a filter that says basically: If Subject includes Sonic AND From does not include Sonic Then Send to Trash (or mark as spam or whatever) Can this be done?

All Replies (2)

david
david
  • Abanikeli abali-10 abaPhezulu

Yes, set the filter as subject contains sonic and sender does not contain sonic

ronks1
ronks1 Umnini wombuzo

Thanks! But I posed the question wrong, sorry. Much of this type of spam does include Sonic in the subject line, but obviously not all of it.

As you can see from the example above, the From: field does contain some code that appears as "Sonic Billing", but the Received: field does not. I think those are the two fields I need to compare, not Subject. Would "Customize Headers | New message header" get me access to the Received: field, and how should I enter it if so?

Buza umbuzo

You must log in to your account to reply to posts. Please start a new question, if you do not have an account yet.