Message Body Rule Not Working

L

Larry(LJL269)

RULE in OE6 (OS=XP/SP2) =

Apply this rule after the message arrives
Where the message body contains 'string'
and Where the To or CC line contains
'(e-mail address removed)'
Copy it to the PaymentsPRACTISE folder
and Stop processing more rules

works when 'string' ='ING' (which occurs everywhere below) but fails
when 'string' ='$828' or 'Camden '

Headers +body of test email=

Return-Path:
<+102807-1424a+myaddy+b46df0c831.saver#[email protected]>
Received: from hrndva-mxlb.mail.rr.com ([10.128.255.16])
by hrndva-imta07.mail.rr.com with ESMTP
id
<20080301024116.INHZ30.hrndva-imta07.mail.rr.com@hrndva-mxlb.mail.rr.com>
for <[email protected]>; Sat, 1 Mar 2008 02:41:16 +0000
X-IronPort: hrndva-mx13.mail.rr.com 338057042
X-RR-Connecting-IP: 216.75.35.164
Received: from gourmet.spamg.com ([216.75.35.164])
by hrndva-mxlb.mail.rr.com with ESMTP; 01 Mar 2008 02:40:41 +0000
Received: from spamg.com (localhost.localdomain [127.0.0.1])
by spamg.com (8.13.8/8.13.7) with ESMTP id m212edDa023221
for <[email protected]>; Sat, 1 Mar 2008 02:40:39 GMT
Received: (from jqh1@localhost)
by spamg.com (8.13.8/8.13.8/Submit) id m212edsi023217
for (e-mail address removed); Sat, 1 Mar 2008 02:40:39 GMT
Received: from INGDEXTRAN02.ingdirect.com (ingdextran02.ingdirect.com
[63.113.210.141])
by spamg.com (8.13.8/8.13.7) with ESMTP id m212ecB1023182
for <[email protected]>; Sat, 1 Mar 2008 02:40:39 GMT
Date: Fri, 29 Feb 2008 21:40:16 -0500
Message-ID: <23720165.485711204339216682.JavaMail.dgwprod@INGDESASSD6>
From: "ING DIRECT - (e-mail address removed)"
<+102807-1424a+myaddy+b46df0c831.saver#[email protected]>
To: (e-mail address removed)
Subject: Transfer Money Notice (trusted: ingdirect.com)
X-Antivirus: AVG for E-mail 7.5.516 [269.21.3/1307]
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="=======AVGMAIL-47CC52624C89======="

--=======AVGMAIL-47CC52624C89=======
Content-Type: multipart/alternative;
boundary="----=_Part_33612_6749213.1204339216682"

------=_Part_33612_6749213.1204339216682
Content-Type: text/html
Content-Transfer-Encoding: 8bit

<html xmlns="http://www.w3.w4.com/1999/xhtml">
<head>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link href="http://FAKEemail/ing.css" rel="stylesheet"
type="text/css">
</head>
<body marginheight="0" marginwidth="0" topmargin="0" alink="#000066"
link="#000066" vlink="#ff6600" bgcolor="#ffffff">
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td><img src="http://FAKEemail/images/estate_top_generic_blank.gif"
width="450" height="61" alt="" border="0"></td>
</tr>
</table>
<table border="2" cellpadding="0" cellspacing="0" width="450"
bordercolor="#000066">
<tr>
<td bgcolor="#ffffff" valign="top">
<table border="0" cellpadding="7" cellspacing="0" width="440"
bgcolor="#ffffff">
<tr>
<td width="300" valign="top">
<p>Dear Larry,<br>Customer Number: XXXXXXX853</p>
<p>
Date: February 29, 2008</p>
<p>
This email is to notify you that Camden Property has
initiated a
withdrawal for $828.07 from your ING DIRECT
Electric Orange
 
R

Roady [MVP]

Note that this is an Microsoft Office Outlook forum.

Outlook Express is family of Internet Explorer and Outlook of the Office
family.

Here is the link for the right forum
http://www.microsoft.com/communitie...px?dg=microsoft.public.outlookexpress.general

Good Luck!



Larry(LJL269) said:
RULE in OE6 (OS=XP/SP2) =

Apply this rule after the message arrives
Where the message body contains 'string'
and Where the To or CC line contains
'(e-mail address removed)'
Copy it to the PaymentsPRACTISE folder
and Stop processing more rules

works when 'string' ='ING' (which occurs everywhere below) but fails
when 'string' ='$828' or 'Camden '

Headers +body of test email=

Return-Path:
<+102807-1424a+myaddy+b46df0c831.saver#[email protected]>
Received: from hrndva-mxlb.mail.rr.com ([10.128.255.16])
by hrndva-imta07.mail.rr.com with ESMTP
id
<20080301024116.INHZ30.hrndva-imta07.mail.rr.com@hrndva-mxlb.mail.rr.com>
for <[email protected]>; Sat, 1 Mar 2008 02:41:16 +0000
X-IronPort: hrndva-mx13.mail.rr.com 338057042
X-RR-Connecting-IP: 216.75.35.164
Received: from gourmet.spamg.com ([216.75.35.164])
by hrndva-mxlb.mail.rr.com with ESMTP; 01 Mar 2008 02:40:41 +0000
Received: from spamg.com (localhost.localdomain [127.0.0.1])
by spamg.com (8.13.8/8.13.7) with ESMTP id m212edDa023221
for <[email protected]>; Sat, 1 Mar 2008 02:40:39 GMT
Received: (from jqh1@localhost)
by spamg.com (8.13.8/8.13.8/Submit) id m212edsi023217
for (e-mail address removed); Sat, 1 Mar 2008 02:40:39 GMT
Received: from INGDEXTRAN02.ingdirect.com (ingdextran02.ingdirect.com
[63.113.210.141])
by spamg.com (8.13.8/8.13.7) with ESMTP id m212ecB1023182
for <[email protected]>; Sat, 1 Mar 2008 02:40:39 GMT
Date: Fri, 29 Feb 2008 21:40:16 -0500
Message-ID: <23720165.485711204339216682.JavaMail.dgwprod@INGDESASSD6>
From: "ING DIRECT - (e-mail address removed)"
<+102807-1424a+myaddy+b46df0c831.saver#[email protected]>
To: (e-mail address removed)
Subject: Transfer Money Notice (trusted: ingdirect.com)
X-Antivirus: AVG for E-mail 7.5.516 [269.21.3/1307]
Mime-Version: 1.0
Content-Type: multipart/mixed;
boundary="=======AVGMAIL-47CC52624C89======="

--=======AVGMAIL-47CC52624C89=======
Content-Type: multipart/alternative;
boundary="----=_Part_33612_6749213.1204339216682"

------=_Part_33612_6749213.1204339216682
Content-Type: text/html
Content-Transfer-Encoding: 8bit

<html xmlns="http://www.w3.w4.com/1999/xhtml">
<head>
<META http-equiv="Content-Type" content="text/html; charset=UTF-8">
<link href="http://FAKEemail/ing.css" rel="stylesheet"
type="text/css">
</head>
<body marginheight="0" marginwidth="0" topmargin="0" alink="#000066"
link="#000066" vlink="#ff6600" bgcolor="#ffffff">
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td><img src="http://FAKEemail/images/estate_top_generic_blank.gif"
width="450" height="61" alt="" border="0"></td>
</tr>
</table>
<table border="2" cellpadding="0" cellspacing="0" width="450"
bordercolor="#000066">
<tr>
<td bgcolor="#ffffff" valign="top">
<table border="0" cellpadding="7" cellspacing="0" width="440"
bgcolor="#ffffff">
<tr>
<td width="300" valign="top">
<p>Dear Larry,<br>Customer Number: XXXXXXX853</p>
<p>
Date: February 29, 2008</p>
<p>
This email is to notify you that Camden Property has
initiated a
withdrawal for $828.07 from your ING DIRECT
Electric Orange
.
</p>
<p>
Your confirmation number is 0918865889.
</p>
<p>
To view your account balance, login to <a
href="http://www.FAKE.com">ingdirect.com</a>.
</p>
<div align="left">
<table border="0" width="280">
<tr>
<td><img src="http://FAKEemail/images/estate_fdic_generic.gif"
width="75" height="16" alt="FDIC" border="0"></td><td
width="70">&nbsp;</td><td align="right"><img
src="http://FAKEemail/images/estate_equalhousing_generic.gif"
width="25" height="31" alt="equal housing lender" border="0"></td>
</tr>
</table>
</div>
</td><td valign="top" bgcolor="white" align="center" width="77"><img
src="http://FAKEemail/images/estate_bouncingball_generic.gif"
width="77" height="72" alt="" border="0"><br>
<br>
<img src="http://FAKEemail/images/estate_vertical_generic.gif"
width="35" height="238" alt="" border="0"></td>
</tr>
</table>
</td>
</tr>
</table>
<table border="0" cellpadding="0" cellspacing="0">
<tr>
<td><img src="http://FAKEemail/images/estate_bottom_generic.gif"
width="450" height="25" alt="" border="0"></td>
</tr>
</table>
</body>
</html>


Your help is MUCH appreciated. Thanks- bye- Larry

----------------------------------------------------------------------

A working unsecure OS is infinitely better than non-working secure OS.
Just spent 1 week cleaning up the mess WUpdate made preventing
hypothetical security problems. http://microscum.com/comsense/
 
L

Larry(LJL269)

TY- I needed 2 update my 'all groups' Last post I did OE group had
another name I think.

Thanks- bye- Larry
 
Top