Email spam solver

RedDevil_UK

Retired Mod
Joined
Sep 24, 2004
Messages
1,761
Reaction score
34
Points
48
Age
54
My Satellite Setup
Dreambox 7000S, VU+ Solo2, 1.1m Dish, Moteck SG-2100A DISEQC Motor
My Location
Rochdale
ive sussed it...

after doing alot of whois traces, i have realised that most of the spam we receive comes from a minority of firms

the thing with using the spam filter or using certain words to block with the rules wizzard, Viagra for example... is that they still slip through.
heres how to stop that firm from sending any more :)

use their IP address :)
if you look in the Email header, it will look somthing like this..

Return-path: <parenthesis@ayurveda-in.com>
Received: from rhea.easily.co.uk ([212.53.64.82])
by oppenheimer.zen.co.uk with esmtp (Exim 4.43)
id 1EtacD-0001VU-VQ
for me@zen.co.uk; Tue, 03 Jan 2006 01:05:31 +0000
Received: from [82.160.240.131] (helo=82.160.240.131)
by rhea.easily.co.uk with smtp (NetBenefit 2.0)
id 1EtacE-0004fj-CQ
for me@mydomain.net; Tue, 03 Jan 2006 01:05:30 +0000

as you can see i have made bold the IP in question here, now if you create a rule to stop more mail from this firm, remember to only use the first 3 IP No's like this 82.160.240.

Because after using this method with all the numbers i found that i still received spam because the last number had changed!!! (anyone with a knowledge of networking will understand this)

admittedly, you will have to do this with each spam that slips through. each day you will notice less and less spam.... untill you get none at all :)

its worked here woohoo!!!
 

rolfw

Believe it when I see it Admin.
Staff member
Joined
May 1, 1999
Messages
38,295
Reaction score
1,620
Points
113
My Satellite Setup
Technomate 5402 HD M2 Ci, DM7000s, Transparent 80cm Dish, Moteck SG2100 DiseqC motor, lots of legacy gear. Meters: Satlook Digital NIT, Promax HD Ranger+ spectrum analyser.
My Location
Berkshire
Yes, it will work, but by doing that, you may knock out some legitimate mail. In the case you mention, you have knocked out 1000 IPs from Poland, but then I guess that if you are unlikely to receive legitimate E-mail from Poland it isn't a problem. :)
 

RedDevil_UK

Retired Mod
Joined
Sep 24, 2004
Messages
1,761
Reaction score
34
Points
48
Age
54
My Satellite Setup
Dreambox 7000S, VU+ Solo2, 1.1m Dish, Moteck SG-2100A DISEQC Motor
My Location
Rochdale
yea thats what i though when i did it..
other IPs originate from Asia... quite alot from Asia actually. And unless your an Asian living in the UK, i think your unlikely to receive legit mail from there either...

what i did notice when reading through the header info, is that spam is bounced from a UK IP in alot of cases.

but i choose to block the IP were it originates. its just one way of dealing with a problem...
if you really get cheesed off, you could use the rule that blocks ALL mail exept from people in your address book :) bit extreme that though..
 

rolfw

Believe it when I see it Admin.
Staff member
Joined
May 1, 1999
Messages
38,295
Reaction score
1,620
Points
113
My Satellite Setup
Technomate 5402 HD M2 Ci, DM7000s, Transparent 80cm Dish, Moteck SG2100 DiseqC motor, lots of legacy gear. Meters: Satlook Digital NIT, Promax HD Ranger+ spectrum analyser.
My Location
Berkshire
I use, or at least used to use, Mailwasher Pro and this is a superb tool, but since I stopped using a couple of very old Email addresses, my spam has decreased to low double figures per day.
 
Top