EFM Custom Banned filter not working

[ljvideo]

I've created a Custom Banned filter on the Received header. It contains a list of partial domains, one of which is skynet.be

See image below.

These pukes are responsible for a lot of stock pump-and-dump crap.

Today, three spams make it through, all contain the header:

Received: from picard.skynet.be (195.238.3.131)

Why..?
http://members.cox.net/ljvideo/images/cust_banned.gif

[DB]

One of the design goals for v1.10 was to be able to search all the Received and Delivered-To lines, but I haven't been able to catch anything on a received line, either. Other headers such as From and X-Mailer seem to work... it appears the problem is limited to headers which appear multiple times. Going to have to turn this one over to Sheila, the header parsing is done in her department.

[Strice]

Just wanted to throw my 'hear hear' in.

I am trying to block anything from those idiots at hispeedmailer.com, but they must own a million domains and use a different one each time for mailing. What really annoys me is every time they send a mailing out, my email reader has to stop and tell me there's a javascript error with the mail, so I can't just send it to the trash, I actually have to stop and confirm that I don't want more scripts run.

Of course 'hispeedmailer' only shows up in the received line - everything else is different each time.

Thanks for all your hard work! This filter has caught about 400 spams since April 1 for me - hooray!