Register

If this is your first visit, please click the Sign Up now button to begin the process of creating your account so you can begin posting on our forums! The Sign Up process will only take up about a minute of two of your time.

Page 1 of 2 1 2 LastLast
Results 1 to 10 of 15
  1. #1
    Unpaid WDF Intern TheGAME1264's Avatar
    Join Date
    Dec 2002
    Location
    Not from USA
    Posts
    14,485
    Member #
    425
    Liked
    2783 times
    I've been sitting here for a few hours analyzing the spam that comes in for one of my clients. At least 10 or 15 of those lovely Viagra and porn and gambling emails come in every single day, without fail. After three hours of looking, I finally discovered something that a number of them had in common.

    To understand what they all have in common, consider the following email screenshot:
    Attached Images Attached Images
    If I've helped you out in any way, please pay it forward. My wife and I are walking for Autism Speaks. Please donate, and thanks.

    If someone helped you out, be sure to "Like" their post and/or help them in kind. The "Like" link is on the bottom right of each post, beside the "Share" link.

    My stuff (well, some of it): My bowling alley site | Canadian Postal Code Info (beta)

  2.  

  3. #2
    Unpaid WDF Intern TheGAME1264's Avatar
    Join Date
    Dec 2002
    Location
    Not from USA
    Posts
    14,485
    Member #
    425
    Liked
    2783 times
    Part 2

    On the surface, it appears that you can cue off of many of the words and phrases in the email, such as "Free cash grant", "Never Repay", and other such uncommonly-used phrases.

    Doing this will block a few of the emails (mostly the plain text ones). However, it will not block most of the HTML-formatted emails. An examination of the message source code reveals something rather interesting, which I have circled a few times in pinkish circles to make them stand out.
    Attached Images Attached Images
    If I've helped you out in any way, please pay it forward. My wife and I are walking for Autism Speaks. Please donate, and thanks.

    If someone helped you out, be sure to "Like" their post and/or help them in kind. The "Like" link is on the bottom right of each post, beside the "Share" link.

    My stuff (well, some of it): My bowling alley site | Canadian Postal Code Info (beta)

  4. #3
    Unpaid WDF Intern TheGAME1264's Avatar
    Join Date
    Dec 2002
    Location
    Not from USA
    Posts
    14,485
    Member #
    425
    Liked
    2783 times
    As you can see, the beginning of the HTML comment tag, [Minicode]<![/minicode], is used rather frequently and ubiquitously throughout the document. The purpose of this tag, in the spam context, is to "split up" a potentially blockable word or phrase into a string that reads perfectly normally on the surface, but is really a string of nonsensical gibberish underneath.

    Upon inspection of every non-spammy HTML-based email that was sent to my clients, I have found that not one of them has had this tag in it. Nor should these emails, as they would likely have been previewed and developed using a web browser (or multiples) first, and then further tested via different email clients. Based on this, I made the conclusion that it is safe to block the offending [Minicode]<![/minicode] tag. This is the purpose and motive of this tutorial.

    Disclaimer/cautionary note: if you do receive non-spammy HTML email with comment tags in it, this tutorial is not going to work in your particular situation and I assume no responsiblity if you employ this tutorial method and end up losing important email.

    Okay, back to business. The following steps have been prepared using IMail, so modify them accordingly to suit your particular email server software.

    Step 1: Log into your IMail administrator account (this is the account from which the admin assigns other email accounts and forwards) and select "Domain Processing Rules". This will allow you to select the processing rules for all email addresses within a domain (e.g. a@domain.com, b@domain.com, c@domain.com).
    Attached Images Attached Images
    If I've helped you out in any way, please pay it forward. My wife and I are walking for Autism Speaks. Please donate, and thanks.

    If someone helped you out, be sure to "Like" their post and/or help them in kind. The "Like" link is on the bottom right of each post, beside the "Share" link.

    My stuff (well, some of it): My bowling alley site | Canadian Postal Code Info (beta)

  5. #4
    Unpaid WDF Intern TheGAME1264's Avatar
    Join Date
    Dec 2002
    Location
    Not from USA
    Posts
    14,485
    Member #
    425
    Liked
    2783 times
    Go down to the bottom of your domain processing rules list and select "Add" to add your new rule.
    Attached Images Attached Images
    If I've helped you out in any way, please pay it forward. My wife and I are walking for Autism Speaks. Please donate, and thanks.

    If someone helped you out, be sure to "Like" their post and/or help them in kind. The "Like" link is on the bottom right of each post, beside the "Share" link.

    My stuff (well, some of it): My bowling alley site | Canadian Postal Code Info (beta)

  6. #5
    Unpaid WDF Intern TheGAME1264's Avatar
    Join Date
    Dec 2002
    Location
    Not from USA
    Posts
    14,485
    Member #
    425
    Liked
    2783 times
    You should now see a screen that allows you to enter in your rule to be added. Select "Body" from the "Field" listbox, "Contains" from the radio box, and type in [minicode]<![/Minicode] (- the Code part). When you're finished and your screen looks like my screen capture, click "Add Condition".
    Attached Images Attached Images
    If I've helped you out in any way, please pay it forward. My wife and I are walking for Autism Speaks. Please donate, and thanks.

    If someone helped you out, be sure to "Like" their post and/or help them in kind. The "Like" link is on the bottom right of each post, beside the "Share" link.

    My stuff (well, some of it): My bowling alley site | Canadian Postal Code Info (beta)

  7. #6
    Unpaid WDF Intern TheGAME1264's Avatar
    Join Date
    Dec 2002
    Location
    Not from USA
    Posts
    14,485
    Member #
    425
    Liked
    2783 times
    Scroll down to the bottom of the "Add Condition" screen and you will see something that looks like the attached screen capture. To complete your work, simply select "Delete" from the Destination listbox.

    Note: as an alternative, you could create a new user/email in the admin section called "possiblespam@domain.com" or something like that and have all the offending emails you receive to it. To do so, simply leave the listbox alone (by default, "Move the message to this mailbox"

    Mind you, this would only be necessary if you think you get HTML email that is non-spammy and contains comment tags, and at least 99% of the time, this is not going to be the case.


    When you're done, click "Finish" and your rule will be added. This won't get rid of all of your spam email, but it should get rid of at least 50% of it. Applying this with the common words and phrases that one can associate with spam (e.g. "Viagra", "Penis", "Free Porn", "Big Casino Payouts") should keep the spam you actually receive to a minimum.
    Attached Images Attached Images
    If I've helped you out in any way, please pay it forward. My wife and I are walking for Autism Speaks. Please donate, and thanks.

    If someone helped you out, be sure to "Like" their post and/or help them in kind. The "Like" link is on the bottom right of each post, beside the "Share" link.

    My stuff (well, some of it): My bowling alley site | Canadian Postal Code Info (beta)

  8. #7
    Senior Member DanielOliver's Avatar
    Join Date
    Jun 2003
    Location
    Cornwall, England.
    Posts
    1,202
    Member #
    1879
    Nice tutorial, very handy, when I have more time I will deffinatly look further into it despite the fact that I am not recieving to much spam on important e-mail address's, its just my daniboy125 [at] hotmail.com that gets thousands and thousand a day.

    I have to go on and delete my junk box everynight, otherwise my account size is over limit.

    I hate spam!!!!!!


    Nice work, good turorial.
    Daniel.

  9. #8
    Unpaid WDF Intern TheGAME1264's Avatar
    Join Date
    Dec 2002
    Location
    Not from USA
    Posts
    14,485
    Member #
    425
    Liked
    2783 times
    Thankya. Anything to stem the increase in cranial trauma that occurs when one bangs one's head off of one's desk after reading "Enlarge your manhood today!" for the 500th time.
    If I've helped you out in any way, please pay it forward. My wife and I are walking for Autism Speaks. Please donate, and thanks.

    If someone helped you out, be sure to "Like" their post and/or help them in kind. The "Like" link is on the bottom right of each post, beside the "Share" link.

    My stuff (well, some of it): My bowling alley site | Canadian Postal Code Info (beta)

  10. #9
    Senior Member justlivyalife's Avatar
    Join Date
    Jul 2003
    Location
    Birmingham, UK
    Posts
    2,871
    Member #
    2374
    I remember going on holiday once and returning home to find my inbox full up of emails of that sort, about 2000 in about 2 weeks if I recall.

    Great Tutorial BTW.
    justlivyalife - The future depends on what we do in the present. (Mahatma Gandhi)
    WDF Resources: WDF Rules
    Non-WDF: JavascriptSource | Dynamic Drive | phpBB | HTML-Kit | Winamp | Download Firefox | Morguefile

  11. #10
    Member sopiaz57's Avatar
    Join Date
    Sep 2003
    Posts
    41
    Member #
    3058
    Are you running imail on a win2k box?

    how do you like imail?
    "It's very important not to embellish on your order. No extraneous comments. No questions. No compliments."
    - Jerry, in "The Soup Nazi"


Page 1 of 2 1 2 LastLast

Remove Ads

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  
All times are GMT -6. The time now is 09:59 PM.
Powered by vBulletin® Version 4.2.3
Copyright © 2019 vBulletin Solutions, Inc. All rights reserved.
vBulletin Skin By: PurevB.com