New User? Need help? Click here to register for free! Registering removes the advertisements.

Computer Cops
image image image image image image image image
Donations
If you found this site helpful, please donate to help keep it online
Don't want to use PayPal? Try our physical address
image
Prime Choice
· Head Lines
· Advisories (All)
· Dnld of the Week!
· CCSP News Ltrs
· Find a Cure!

· Ian T's (AR 22)
· Marcia's (CO8)
· Bill G's (CO10)
· Paul's (AR 5)
· Robin's (AR 2)

· Ian T's Archive
· Marcia's Archive
· Bill G's Archive
· Paul's Archive
· Robin's Archive
image
Security Central
· Home
· Wireless
· Bookmarks
· CLSID
· Columbia
· Community
· Downloads
· Encyclopedia
· Feedback (send)
· Forums
· Gallery
· Giveaways
· HijackThis
· Journal
· Members List
· My Downloads
· PremChat
· Premium
· Private Messages
· Proxomitron
· Quizz
· RegChat
· Reviews
· Search (Topics)
· Sections
· Software
· Statistics
· Stories Archive
· Submit News
· Surveys
· Top
· Topics
· Web Links
· Your Account
image
CCSP Toolkit
· Email Virus Scan
· UDP Port Scanner
· TCP Port Scanner
· Trojan TCP Scan
· Reveal Your IP
· Algorithms
· Whois
· nmap port scanner
· IPs Banned [?]
image
Survey
How much can you give to keep Computer Cops online?

$10 up to $25 per year?
$25 up to $50 per year?
$10 up to $25 per month?
$25 up to $50 per month?
More than $50 per year?
More than $50 per month?
One time only?
Other (please comment)



Results
Polls

Votes: 823
Comments: 19
image
Translate
English German French
Italian Portuguese Spanish
Chinese Greek Russian
image
 Forum FAQForum FAQ   SearchSearch   UsergroupsUsergroups   ProfileProfile   Login to check your private messagesLogin to check your private messages   LoginLogin 

Spam with forged header

 
Post new topic   Reply to topic       Computer Cops Forum Index -> Mailwasher - Suggestions
View previous topic :: View next topic  
Author Message
rjriley

Cadet
Cadet



Joined: Jun 02, 2004
Posts: 1
Location: USA

PostPosted: Wed Jun 02, 2004 7:07 am    Post subject: Spam with forged header
Reply with quote

I am receiving an increasing amount of spam which uses my own email address as the sender but shows a different name. Example Joe Smith <[email protected]>. I would like to validate that the name associated with my address is correct, example Lenny Xyz <[email protected]> would be allowed to pass while Joe Smith <[email protected]> would be blocked.
Back to top
View users profile Send private message Visit posters website
stan_qaz

General
General
Premium Member
Premium Member


Joined: Mar 31, 2003
Posts: 4052
Location: USA

PostPosted: Wed Jun 02, 2004 11:29 am    Post subject:
Reply with quote

Simple to do and there are several discussions on how to do it here, see them if you need more detail.

Copy the correct address "Lenny Xyz <[email protected]>" to a filter set to mark the mail as legitimate.

Copy the "<[email protected]>" to a lower priority filter that marks it as spam.
Back to top
View users profile Send private message Visit posters website
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3445
Location: Ottawa, Ontario, Canada

PostPosted: Wed Jun 02, 2004 7:21 pm    Post subject:
Reply with quote

stan_qaz wrote:
Copy the "<[email protected]>" to a lower priority filter that marks it as spam.

I agree with the previous suggestion however this one will get lots of false positives. A lot of Legit email is sent without 'Friendly Name' preceeding the email address. Make this lower priority filter more discriminating and it will behave better -- '[\w\d\]*?<[email protected]>' should do the trick.

Remember though that this filter must be coupled with the higher priority filter that looks for your 'Friendly name' .... or just include that as a "does not contain RegExpr" rule with the regex I suggested being a "contains RegExpr" rule.

_________________
Ikester

I like SPAM .... on my sandwich!
Back to top
View users profile Send private message Send email
stan_qaz

General
General
Premium Member
Premium Member


Joined: Mar 31, 2003
Posts: 4052
Location: USA

PostPosted: Wed Jun 02, 2004 9:26 pm    Post subject:
Reply with quote

If he often sends himself mail without the friendly name as the sender that would certainly help.
Back to top
View users profile Send private message Visit posters website
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3445
Location: Ottawa, Ontario, Canada

PostPosted: Thu Jun 03, 2004 12:22 am    Post subject:
Reply with quote

?? It has nothing to do with mail sent to one's self. I often get mail from acquaintances where my email address isn't preceeded by the "friendly name".
_________________
Ikester

I like SPAM .... on my sandwich!
Back to top
View users profile Send private message Send email
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3445
Location: Ottawa, Ontario, Canada

PostPosted: Thu Jun 03, 2004 12:23 am    Post subject:
Reply with quote

?? It has nothing to do with mail sent to one's self. I often get mail from acquaintances where my email address isn't preceeded by the "friendly name".
_________________
Ikester

I like SPAM .... on my sandwich!
Back to top
View users profile Send private message Send email
Ikeb

General
General
Premium Member
Premium Member


Joined: Apr 20, 2003
Posts: 3445
Location: Ottawa, Ontario, Canada

PostPosted: Thu Jun 03, 2004 12:23 am    Post subject:
Reply with quote

Duplicate
_________________
Ikester

I like SPAM .... on my sandwich!


Last edited by Ikeb on Thu Jun 03, 2004 12:24 am, edited 1 time in total
Back to top
View users profile Send private message Send email
Display posts from previous:   
Post new topic   Reply to topic       Computer Cops Forum Index -> Mailwasher - Suggestions All times are GMT - 5 Hours
Page 1 of 1

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum


Powered by phpBB 2.0.8a © 2001 phpBB Group

Version 2.0.6 of PHP-Nuke Port by Tom Nitzschner © 2002 www.toms-home.com
Version 2.2 by Paul Laudanski © 2003-2004 Computer Cops