I have a search folder setup that displays emails from a gov email with another word in it, that works fine but I now need a SQL filter or some kind of search folder to display when emails are received from a certain IP address.

My current query is:
("urn:schemas:httpmail:fromemail" LIKE '%word%'
AND "urn:schemas:httpmail:fromemail" LIKE '%gov%')
It needs to be based around X-Originating-IP which seems to be the common tag in the message header. In most cases this will give me the IP address of the client where the message has come from and if connected at home via outlook web services it will give me the external one.

Any ideas because I am stuck.