I have not had any luck using the "header" filter in the email filtering. I've set up several filters using regex, but it's really difficult because Cox email does not read the HTML in the emails, only the VISIBLE sections. Meaning it does not read the links OR TO and CC email addresses contained within < > brackets.
Also, anything set up with an "ends with" filter does not work.
I tried to set up a filter that sends anything that is a BCC to me to go directly to SPAM. You'd think this would be easy - if TO or CC does NOT contain myemailaddress@cox.net, send to spam. However, If somebody has me in their address book as FirstName and the "TO" is FirstName <myemailaddress@cox.net>, Cox does NOT SEE the email address within the <> brackets and sent it to SPAM because it only sees the email came to First Name!
Also, I've had zero success in trying to use the header filters. It asks for a header name. I've tried various header name combinations and nothing worked. Reply-to:, From:, Return-Path:, etc - with and without the colons. It just sends EVERYTHING to spam!
Also DISCARD does not work - it just sends it to the SPAM folder. With most other services, DISCARD means it is just deleted without further action.
Here are some regex expressions I've used that HAVE cut the spam down to minimal levels - each one needs its OWN RULE:
BCC RULE:
Any Recipient -> not regex -> myemail@cox.net|FirstName
CONTENT RULE:
From -> regex -> cbd|cannabis|keto|loan|meds|pharm|rx|tumeric|viagra|warranty
Subject -> regex -> cbd|cannabis|keto|loan|meds|pharm|rx|tumeric|viagra|warranty
Body -> regex -> cbd|cannabis|keto|loan|meds|pharm|rx|tumeric|viagra|warranty
LESSER USED DOMAINS FILTER:
From -> not regex -> \.[ca|com|edu|gov|mil|net|org|uk]>$
Hope that helps anybody out there!