Filter for crashing emails

[Trevor Smith]

If you want to automatically filter out URL-Encoded, MIME-Encoded
emails (the ones that cause PMMail to crash the second they are
viewed in the preview pane or in a 'read message' window) you *can*
do the following (I have tested it on one of the 'bad' emails):

Create a new filter with the following settings:

1. Enabled
2. Incoming
3. Complex
4. These settings in the entry field (remember to substitute YOUR
email address instead of mine):

!(Header.toid="trevor@haligonian.com")
  & 
(Header.Content-Type="text/html")

5. Actions:
   a) Set status - read
   b) Move message - Trash
   c) Delete message - Local copy
   d) Inform user


The above filter will cause the message to be irretrievably deleted
from your system (and not leave your folder indicator with a 'new
unread message' green hat indicator) and notify you. If you have
"Perform True Deletes" set (in the Account Settings..., Preferences
page) you probably can skip step 5b above.

This filter will delete *ANY* message with a type of text/html which
is *NOT* addressed specifically to the email address you enter. If
someone sends a message to a friend of yours and BCC:s *you* and the
message contains HTML, IT WILL BE DELETED BEFORE YOU EVER SEE IT.

USE THE ABOVE FILTER WITH CAUTION!

A safer method is to create a folder for "suspicious" emails and have
the filter move them there instead of deleting them. You can inspect
them later but with foreknolwedge that they might be malicious.

If anyone has other samples of these evil emails, please send them to
me AS ATTACHMENTS -- NOT JUST BY FORWARDING THEM. PLEASE explain
clearly in the subject line that these emails are the crashing kind
so I don't open the attachments by accident.

To send an email as an attachment with PMMail, just drag the message
from the message list and drop it in the attachment area of an
outgoing message.


-- 
 Trevor Smith          |          trevor@haligonian.com
 PGP public key available at: www.haligonian.com/trevor

PGP Public Key Fingerprint= A68C C4EC C163 5C0A 6CFA  671F 05D4 0B30 318B AFD6