Thanks, Vanguard, for your suggestions.

I added your "report-type=delivery-status" rule. It behaves the same way as
my rule that checks for "Mail delivery failed" in the subject line. The
emails that are bounce messages are ending up in my Junk folder rather than
the spoofed folder that the rule calls for. This means that the rule is not
being applied when the message is received.

Manually applying the rule to the messages in the Junk folder behaves
properly: the messages are detected and moved to my spoofed folder.

So my problem remains: Even though I have "No automatic filtering" selected
(under Junk Mail Options), and even though these emails are from "System
Administrator" (which is not part of or allowed to be part of my "Blocked
Senders List") Outlook is moving these mails to the Junk folder.

Any other thoughts?

"VanguardLH" wrote in message
...
"Tom" wrote in message
...
The only rule I have is:

Apply this rule after the message arrives
with 'undelivered' or
'Mail delivery failed' or
'Mail delivery failure' or
"FAILURE NOTICE' or
'Returned mail' or
'Undelivered:' or
'(Failure)' or
'Returned to Sender' or
'Undeliverable:' or
'undeliverable' or
'warning:' or
'Your message did not reach some or all of the intended recipients' or
'Undeliverable'
move it to the Spoofed folder


Wrong rule. Use the following which detects if it is a *valid* NDR
(non-delivery report) by checking for the header.

Apply this rule after the message arrives
with "report-type=delivery-status" in the message header
and move it to the Junk folder (or wherever you want)
and stop processing more rules

You neglected to include the stop-clause. You are also attempting to
trigger on the various comments that a mail server *might* insert in the
body to denote the cause of the NDR. Trigger on the header.