| Author |
Message |
    
Alleygater
Citizen
Username: Alleygater
Post Number: 2317
Registered: 10-2004
| | Posted on Saturday, July 22, 2006 - 11:25 pm: | 
|
I've had the same 2 or 3 pieces of spam coming every night from the same sender for a couple of years now. It's frustrates the heck out of me. I mentioned it in the past and Tom Reingold said he might have some suggestions. Tom please help.
I'm using Apple's Mail and I do know how to use the filters but don't see any way to filter these messages. If at all possible I would like to do the filtering using Mail and not have to install or run another app. I do mark the messages as JUNK in Mail and with a years worth of training it sometimes recognizes the new messages as junk. Sometimes. I'm using Mail version 1.311 (I am still running 10.3.9 and if you tell me that 10.4's version of Mail would fix my problem than it might be just the right impetus for me to finally switch. Well...maybe.
The email messages very often have attachments but not always. The name of the sender ALWAYS changes, and the subject line is always different random words from the dictionary. But the two messages seem to always come at the same time and sometimes it is arrives in the middle of the night.
I am going to paste in the headers of the email messages and maybe it will help in figuring out how to eradicate these messages from littering my inbox. Any support would be TRULY and UTTERLY appreciated.
-Alley
----------------
From TAltonm@accesstoledo.com Sat Jul 22 23:03:09 2006
Received: from 210.218.232.227 ([172.18.12.133])
by vms052.mailsrvcs.net (Sun Java System Messaging Server 6.2-4.02 (built Sep
9 2005)) with ESMTP id <0j2u009pb5rtyrei@vms052.mailsrvcs.net>; Sat,
22 Jul 2006 22:02:21 -0500 (CDT)
Received: from 206.46.232.11 (210.218.232.227)
by sv21pub.verizon.net (MailPass SMTP server v1.2.0 - 112105154401JY+PrW)
with SMTP id <5-4519-146-4519-4337-1-1153623732>
Sat, 22 Jul 2006 22:02:20 -0500
Date: Sat, 22 Jul 2006 20:02:13 -0800
From: "ULakeishaw grate" <taltonm@accesstoledo.com>
Subject: ear-ring it yet Humberto
X-Originating-IP: [210.218.232.227]
Message-id: <0j2u009pc5rtyrei@vms052.mailsrvcs.net>
MIME-version: 1.0
Content-type: multipart/related; boundary=------0k226y7k5X1S5n4t
Sun-Java-System-SMTP-Warning: Lines longer than SMTP allows found and wrapped.
------------------
From XsunlightBurke@manildra.com.au Sun Apr 23 12:26:02 2006
Received: from 60.221.255.141 ([172.18.12.131])
by vms043.mailsrvcs.net (Sun Java System Messaging Server 6.2-4.02 (built Sep
9 2005)) with ESMTP id <0iy6003szo9ep110@vms043.mailsrvcs.net>; Sun,
23 Apr 2006 11:24:56 -0500 (CDT)
Received: from 206.46.232.11 (60.221.255.141)
by sv11pub.verizon.net (MailPass SMTP server v1.2.0 - 112105154401JY+PrW)
with SMTP id <5-27228-67-27228-7852-1-1145810827> for vms043pub.verizon.net;
Sun, 23 Apr 2006 11:47:16 -0500
Received: from [60.221.255.141] (HELO apqw61)
by staff.usyd.edu.au (CommuniGate Pro SMTP 4.9.6)
with SMTP id 5083466 ; Sun,
23 Apr 2006 10:20:51 -0700
Date: Sun, 23 Apr 2006 19:22:51 +0200
From: "Brain Lund" <xsunlightburke@manildra.com.au>
Subject: on grassland kowalski
X-Originating-IP: [60.221.255.141]
Message-id: <49951597104.10924133@reynet.com>
MIME-version: 1.0
---------------------------
From PPendleton8@family.net Sat Jul 22 11:08:52 2006
Received: from 125.135.70.52 ([172.18.12.133])
by vms049.mailsrvcs.net (Sun Java System Messaging Server 6.2-4.02 (built Sep
9 2005)) with ESMTP id <0j2s003swi2r18a0@vms049.mailsrvcs.net> for Sat, 22 Jul 2006 00:33:11 -0500 (CDT)
Received: from 206.46.232.11 (125.135.70.52)
by sv13pub.verizon.net (MailPass SMTP server v1.2.0 - 112105154401JY+PrW)
with SMTP id <2-20014-161-20014-1546-1-1153546367> for vms049pub.verizon.net;
Sat, 22 Jul 2006 00:33:10 -0500
Received: from Otermini.bmd.net (Lhis.steinbergo[125.135.70.52])
by FCUMG.bmd.net with SMTP id niiut for <v.es@verizon.net>; Fri,
21 Jul 2006 22:32:48 -0800
Date: Fri, 21 Jul 2006 22:32:48 -0800
From: "Shelbyuj Lutz" <ppendleton8@family.net>
Subject: Nanette Schaffer what many vice
X-Originating-IP: [125.135.70.52]
Message-id: <6237.455214777092ppendleton8@family.net>
MIME-version: 1.0
Content-type: multipart/related; boundary=--8w392x7I182I7s9Y
Sun-Java-System-SMTP-Warning: Lines longer than SMTP allows found and wrapped.
-----------------------------
From LCorrea3@family.net Wed Jul 19 07:18:53 2006
Received: from 61.11.8.225 ([172.18.12.134])
by vms043.mailsrvcs.net (Sun Java System Messaging Server 6.2-4.02 (built Sep
9 2005)) with ESMTP id <0j2n00ler2n7d410@vms043.mailsrvcs.net> Wed, 19 Jul 2006 02:11:43 -0500 (CDT)
Received: from static8-225.dsl-mum.eth.net (61.11.8.225)
by sv28pub.verizon.net (MailPass SMTP server v1.2.0 - 112105154401JY+PrW)
with SMTP id <1-6574-212-6574-1395-1-1153293885> for vms043pub.verizon.net;
Wed, 19 Jul 2006 02:24:57 -0500
Received: from ttorih.family.net (miuut.woodardj [220.75.106.184])
by Y7BR4.family.net with SMTP id 85TL11WB
Wed, 19 Jul 2006 00:07:36 -0800
Date: Wed, 19 Jul 2006 00:07:36 -0800
From: "TerraCarver" <lcorrea3@family.net>
Subject: irony may put Elijah
X-Originating-IP: [61.11.8.225]
Message-id: <648.268551913778@rerouted.family.net>
MIME-version: 1.0
Content-type: multipart/related; boundary=--308C9r0k2G3k3U6a
Sun-Java-System-SMTP-Warning: Lines longer than SMTP allows found and wrapped.
--------------------------------
From WRaymondb@mminternet.com Wed Jul 19 07:18:52 2006
Received: from 219.130.190.43 ([172.18.12.132])
by vms052.mailsrvcs.net (Sun Java System Messaging Server 6.2-4.02 (built Sep
9 2005)) with ESMTP id <0j2m009ayvp2yrte@vms052.mailsrvcs.net>; Tue,
18 Jul 2006 23:41:46 -0500 (CDT)
Received: from 206.46.232.11 (219.130.190.43)
by sv6pub.verizon.net (MailPass SMTP server v1.2.0 - 112105154401JY+PrW)
with SMTP id <1-13996-158-13996-86-1-1153284079> for vms052pub.verizon.net;
Tue, 18 Jul 2006 23:41:34 -0500
Received: from ahebwud.mminternet.com (ONNLQ.createp [219.130.190.43])
by Hzit.mminternet.com with SMTP id 4GB0O
Tue, 18 Jul 2006 21:41:21 -0800
Date: Tue, 18 Jul 2006 21:41:21 -0800
From: "JohannaLim" <wraymondb@mminternet.com>
Subject: Kurtis Koenig or took needed
X-Originating-IP: [219.130.190.43]
Message-id: <8229.63.8104576.8076.4499@nadia.mminternet.com>
MIME-version: 1.0
Content-type: multipart/related; boundary=--T2G8p8G9c9H959G7
Sun-Java-System-SMTP-Warning: Lines longer than SMTP allows found and wrapped.
|
Glock 17
Citizen
Username: Glock17
Post Number: 1535
Registered: 7-2005
| | Posted on Sunday, July 23, 2006 - 3:01 am: |
|
get office for mac and use entourage. you can choose to filter all messages from a particular domain name. |
Alleygater
Citizen
Username: Alleygater
Post Number: 2318
Registered: 10-2004
| | Posted on Sunday, July 23, 2006 - 4:59 am: |
|
I use Entourage at work and am not a big fan of it (or most M$oft products). Having said that, these emails I THINK are all claiming to come from different domain names. Also Apple Mail I believe lets you filter all messages from a particular domain too (the filter would be FROM CONTAINS domain.com message equals junkmail) |
Monster©
Supporter
Username: Monster
Post Number: 4173
Registered: 7-2002
| | Posted on Sunday, July 23, 2006 - 11:21 am: |
|
That's one of the shortcomings of Apples Mail, there really isn't an effective way to handle SPAM such as that with Apple;s Mail.
I had a couple of those pesky emails too, always showing as from a different domain, and always (or at least usually) with an attached jpeg that contained the actual text of the SPAM in it. I couldn't get Mail to recognize the email as Junk without filtering all email with jpegs as Junk, so I installed SpamSieve.
After a short training period I realized I haven't seen any of these emails in awhile, I had forgotten all about them until reading this post.
Something you may want to check in your Mail preferences is that the option to Trust Junk mail headers set by my Internet Service Provider is checked.
|
Alleygater
Citizen
Username: Alleygater
Post Number: 2322
Registered: 10-2004
| | Posted on Sunday, July 23, 2006 - 8:15 pm: |
|
I'll keep SpamSieve in mind but I am holding out hope that Tom has an idea or two first. I'm going to rely on another application to do the filtering as a last resort. |
Madden 11
Citizen
Username: Madden_11
Post Number: 990
Registered: 12-2003
| | Posted on Sunday, July 23, 2006 - 11:24 pm: |
|
Anyone know of a program like SpamSieve that'll work with Thunderbird? |
Dave
Supporter
Username: Dave
Post Number: 10199
Registered: 4-1997
| | Posted on Sunday, July 23, 2006 - 11:44 pm: |
|
Also, check with your ISP to see what spam filtering they offer. I use my ISP's webmail and its filters are much better than anything I tried to configure under Apple Mail. |
Monster©
Supporter
Username: Monster
Post Number: 4189
Registered: 7-2002
| | Posted on Monday, July 24, 2006 - 2:52 am: |
|
Apple's Mail has very basic filtering, what you need is a Bayesian filter combined with the rules you can set, and a predefined white/blacklist of sites, like SpamSieve.
I have to admit that Comcast's filters have been pretty dang good so far, but I wanted a little extra. |
Tom Reingold
Supporter
Username: Noglider
Post Number: 15119
Registered: 1-2003
| | Posted on Monday, July 24, 2006 - 7:15 am: |
|
I can't, for the life of me, remember what you said I had up my sleeve. Maybe it was the fact that I know two or three mail providers whose spam filters are really good. I like pobox.com where I get my personal mail. The filters are very tuneable. They send me a daily mail with the addresses and subject lines of the suspect mail, which they have held and not delivered. I can mark the false positives, and then they send the mail along to me.
gmail.com is also excellent.
Unfortunately, this probably means changing your address, and that's a pain. The upside is that pobox.com and gmail.com addresses are portable, i.e. not tied to your ISP.
earthlink.net has a service similar to pobox.com's, but I don't think it's as flexible.
|
TarPit Coder
Citizen
Username: Tarpitcoder
Post Number: 89
Registered: 12-2004
| | Posted on Monday, July 24, 2006 - 8:44 am: |
|
Can you switch email clients? If so Thunderbird might be worth a try, it at least lets you setup all kinds of spam filtering rules (from memory)
http://www.mozilla.com/thunderbird/
--Tarp |
Alleygater
Citizen
Username: Alleygater
Post Number: 2324
Registered: 10-2004
| | Posted on Monday, July 24, 2006 - 10:54 am: |
|
Tom, I thought you said you had experience setting up spam filters at your job -- as if it was something you did on a regular basis. I vaguely remember when spam came up as a topic and I explained my problem, you said you would take a look to see if you had any insight. Heck, maybe I'm making this up and it's just wishfull thinking. >>Sigh<<
OK, if no one is all that knowledgable about using Apple Mail, how about, is there anyone good at interpretting email headers and can point me in the right direction to figuring out which is the originating mail server? I'm not particularly knowlegable about the basic concepts of email headers and strategies for eradicating spam in general. |
Rastro
Citizen
Username: Rastro
Post Number: 3622
Registered: 5-2004
| | Posted on Monday, July 24, 2006 - 12:32 pm: |
|
Is Apple Mail POP3? If it is, you might want to try popfile, a POP mail proxy that is a bayesian filter. http://popfile.sourceforge.net/ |
Tom Reingold
Supporter
Username: Noglider
Post Number: 15122
Registered: 1-2003
| | Posted on Monday, July 24, 2006 - 1:06 pm: |
|
My decaying memory really troubles me. I might have said something like that, and I can't remember.
I am, however, very good at interpreting mail headers. Unfortunately, knowing the originating source is rarely useful nowadays. But I'll interpret a few for you, gladly. Send them to me at noglider@pobox.com
|
Dave
Supporter
Username: Dave
Post Number: 10203
Registered: 4-1997
| | Posted on Monday, July 24, 2006 - 1:33 pm: |
|
You can still use Apple Mail, but get the server side set up, too. You need server side spam detection to do what you want and you can only have that set up through your ISP. |
Alleygater
Citizen
Username: Alleygater
Post Number: 2325
Registered: 10-2004
| | Posted on Monday, July 24, 2006 - 5:26 pm: |
|
Verizon is my ISP.
Tom, isn't that what is at the top of this thread? A big list of email headers? Do you remally want me to copy and paste them into an email? I'll gladly do it if that's what you want.
So far it sounds to me like I'm going to have to use another app or another email address. I don't want to use another email address so the front runner is using another app. be it another mail reader (Entourage or Thunderbird) or in addition to Apple Mail like Spam Sieve. |
Dave
Supporter
Username: Dave
Post Number: 10208
Registered: 4-1997
| | Posted on Monday, July 24, 2006 - 5:46 pm: |
|
The originating IP addresses in those headers indicates they come from China and Korea. I'd start by blocking out these IP address blocks.
http://www.hakusan.tsg.ne.jp/tjkawa/lib/krfilter/uKRCN.txt |
Alleygater
Citizen
Username: Alleygater
Post Number: 2327
Registered: 10-2004
| | Posted on Monday, July 24, 2006 - 10:41 pm: |
|
that would be A LOT of filtering in Apple Mail. |
Monster©
Supporter
Username: Monster
Post Number: 4202
Registered: 7-2002
| | Posted on Tuesday, July 25, 2006 - 2:02 am: |
|
well I had a written a few things but I accidentally erased it all, so here are links
Procmail, brush up on your UNIX, http://www.procmail.org/
Spamfilter that uses Procmail, http://www.spambouncer.org/index.shtml
CAUTION! The SpamBouncer is a powerful program, but complex to install and configure. To use it safely, a user must be familiar with the Unix operating system and understand basic programming in at least one programming language. It is not a good spam filter for the average Internet user. (See the Spam Filters page in the SpamBouncer web site's Spam-Fighting Resources section for information about some good alternative spam filters.)
Procmail tips, http://pm-doc.sourceforge.net/pm-tips.html
http://spamassassin.apache.org/
http://www.intego.com/personalAntispam/
http://mailfilter.sourceforge.net/
http://www.frank-blome.de/mailfilterx/index.html
Sp@mX, http://www.hendricom.com/spamcontrol.htm
http://www.bainsware.com/spamsweep/
Simple guide to SPAM, http://www.lazyllama.com/spam.html
http://theory.whirlycott.com/~phil/antispam/rbl-bad/rbl-bad.html
|
Closed: New threads not accepted on this page