| holdaway |
|
NetHosted Customer
Joined: 06 Jul 2006 Posts: 28
|
Posted: Thu Oct 12, 2006 11:25 pm Post subject: Getting Rid of Spam? |
| |
I've recently started getting some very objectionable spam, and I'm not sure how to go about stopping it. Is it possible to have the server scan the mail before I get it? I undertand that I can arrange this in Outlook, but I check my email on my phone, and via webmail, so that's not really an ideal solution.
The headers of the two mails I got today are as follows:
| Quote: | Return-path: <blake.hunsleynlll@msvu.ca>
Envelope-to: me@mydomain.co.uk
Delivery-date: Thu, 12 Oct 2006 22:07:53 +0100
Received: from holdawa by neptune.solardns.com with local-bsmtp (Exim 4.52)
id 1GY7mN-0004bz-SU
for me@mydomain.co.uk; Thu, 12 Oct 2006 22:07:52 +0100
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on
neptune.solardns.com
X-Spam-Level: **
X-Spam-Status: No, score=2.0 required=5.0 tests=BAYES_50,RCVD_IN_SORBS_DUL
autolearn=no version=3.1.5
Received: from [64.32.94.219] (helo=219stb24.codetel.net.do)
by neptune.solardns.com with smtp (Exim 4.52)
id 1GY7mM-0004bg-As
for me@mydomain.co.uk; Thu, 12 Oct 2006 22:07:47 +0100
Received: from SERF.msvu.ca (SERF.msvu.ca [140.230.5.76])
by 219stb24.codetel.net.do (Postfix) with ESMTP id 000000186936
for <me@mydomain.co.uk>; Thu, 12 Oct 2006 16:09:05 -0500
Received: from unknown (158.111.128.42)
by SERF.msvu.ca (qmail-ldap-1.03) with SMTP
for <me@mydomain.co.uk>; Thu, 12 Oct 2006 16:09:05 -0500
From: "Dina Amos" <blake.hunsleynlll@msvu.ca>
Reply-To: "Dina Amos" <blake.hunsleynlll@msvu.ca>
Message-ID: <3716869330.4733634676@msvu.ca>
Date: Thu, 12 Oct 2006 16:09:05 -0500
To: <me@mydomain.co.uk>
Subject: Objectionable carp.
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
|
| Quote: | Return-path: <strangerfjuh@zipper.net>
Envelope-to: me@mydomain.co.uk
Delivery-date: Thu, 12 Oct 2006 22:56:01 +0100
Received: from holdawa by neptune.solardns.com with local-bsmtp (Exim 4.52)
id 1GY8X0-0007pJ-9d
for me@mydomain.co.uk; Thu, 12 Oct 2006 22:56:01 +0100
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on
neptune.solardns.com
X-Spam-Level: ***
X-Spam-Status: No, score=4.0 required=5.0 tests=BAYES_50,RCVD_IN_NJABL_DUL,
RCVD_IN_SORBS_DUL,UNPARSEABLE_RELAY autolearn=no version=3.1.5
Received: from [84.174.69.44] (helo=p54AE452C.dip0.t-ipconnect.de)
by neptune.solardns.com with smtp (Exim 4.52)
id 1GY8Wz-0007p8-K4
for me@mydomain.co.uk; Thu, 12 Oct 2006 22:55:58 +0100
Received: from mail.zipper.net
by p54AE452C.dip0.t-ipconnect.de (8.9.3/8.9.3) with ESMTP id 000000186936
for <me@mydomain.co.uk>; Thu, 12 Oct 2006 16:55:15 -0500
Received: from (root@localhost)
by mail.zipper.net (8.12.3 da nor stuldap/8.12.3) with SMTP id xZdmLsPZFWon
for <me@mydomain.co.uk>; Thu, 12 Oct 2006 16:55:15 -0500
From: "Jay Salazar" <strangerfjuh@zipper.net>
Reply-To: "Jay Salazar" <strangerfjuh@zipper.net>
Message-ID: <7440293599.9778581635@zipper.net>
Date: Thu, 12 Oct 2006 16:55:15 -0500
To: <me@mydomain.co.uk>
Subject: More objectionable carp.
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit |
Can you suggest a way I could stop these emails? They seem to be coming from different locations, but then I don't know what I need to look for...
Regards,
Stuart. |
|
| Back to top |
|
| NetHosted - Andrew |
|
NetHosted Staff

Joined: 22 Mar 2004 Posts: 5684
|
Posted: Fri Oct 13, 2006 12:10 am Post subject: |
| |
Stuart,
The best you can do is run SpamAssassin + BoxTrapper. For these particular mails a simple Subject Mail Filter would work as that is a common feature between them.
I'm afraid spam is the problem it is by the very nature that it's so hard to block effectively.
Andrew _________________ | Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think of NetHosted! |
|
| Back to top |
|
| holdaway |
|
NetHosted Customer
Joined: 06 Jul 2006 Posts: 28
|
Posted: Fri Oct 13, 2006 1:00 pm Post subject: |
| |
Thankyou for the extremely prompt reply, Andrew (Don't you ever sleep?! ). I've activated SpamAssassin and BoxTrapper, how do I go about making them 'work'? I assume I need to do something in Outlook? |
|
| Back to top |
|
| NetHosted - Andrew |
|
NetHosted Staff

Joined: 22 Mar 2004 Posts: 5684
|
Posted: Fri Oct 13, 2006 1:10 pm Post subject: |
| |
SpamAssassin and BoxTrapper both work server side as you required. The default SpamAssassin score is 5.0 which is aggressive. You could set that lower but you would risk getting too many false positives.
SpamAssassin rewrites subject headers, so you would need to setup Outlook to filter out the subjects that SpamAssassin labels as spam. But having enabled BoxTrapper this might not be needed as you are asking each person who emails you to verify who they are.
Thanks,
Andrew _________________ | Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think of NetHosted! |
|
| Back to top |
|
| holdaway |
|
NetHosted Customer
Joined: 06 Jul 2006 Posts: 28
|
Posted: Fri Oct 13, 2006 1:25 pm Post subject: |
| |
| Strange - I've enabled BoxTrapper, but haven't changed anything else, and the spam is still getting through... If I changed the SpamAssassin to a lower score (4.0, say), what would happen to those emails flagged as spam? Would they still get through, but into a spam folder? |
|
| Back to top |
|
| NetHosted - Andrew |
|
NetHosted Staff

Joined: 22 Mar 2004 Posts: 5684
|
Posted: Fri Oct 13, 2006 1:29 pm Post subject: |
| |
I've just taken a look at your account, you have not enabled BoxTrapper for any of your email addresses...
Andrew _________________ | Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think of NetHosted! |
|
| Back to top |
|
| boughtonp |
|
NetHosted Customer
Joined: 18 Jul 2005 Posts: 130 Location: South Croydon
|
Posted: Fri Oct 13, 2006 1:32 pm Post subject: |
| |
edit: Ooops, misread the bit I was quoting/replying to. Anyhow, if you want to see why a spam message is not getting flagged, then what I've written should help...
Open up the message in Outlook and select View>Options.
You should see an "Internet headers" box, which contains the headers for the e-mail.
If you scroll down, you should see various X-Spam-* headers, which are added by SpamAssassin.
Somewhere there should be a score (or hits or level) header that tells you the score.
If the score is under 5 and the message is definitely spam, you'll need to add some additional tests to SpamAssassin so that it increases the score. (or raise the points given to existing tests) _________________ Peter Boughton |
|
| Back to top |
|
| holdaway |
|
NetHosted Customer
Joined: 06 Jul 2006 Posts: 28
|
Posted: Fri Oct 13, 2006 1:45 pm Post subject: |
| |
| NetHosted - Andrew wrote: | I've just taken a look at your account, you have not enabled BoxTrapper for any of your email addresses...
Andrew |
Ah, fair enough. What exactly does BoxTrapper do, though?
If it's easier for me to RTFM (excuse my french) please feel free to say so!
As for the extra tests mentioned by Boughtonp (many thanks!), can you suggest anything, or is it a google jobbie?
Thanks again, both of you! |
|
| Back to top |
|
| NetHosted - Andrew |
|
NetHosted Staff

Joined: 22 Mar 2004 Posts: 5684
|
Posted: Fri Oct 13, 2006 2:07 pm Post subject: |
| |
When someone not on your whitelist (trusted list) sends an email BoxTrapper sends back a verification email that the person must respond too. This causes them to be verified. Fine for personal users but might not work so well for companies e.g. if Tesco send you a newsletter they wont respond I imagine.
Andrew _________________ | Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think of NetHosted! |
|
| Back to top |
|
| NetHosted - Andrew |
|
NetHosted Staff

Joined: 22 Mar 2004 Posts: 5684
|
Posted: Fri Oct 13, 2006 2:23 pm Post subject: |
| |
| boughtonp wrote: | | edit: Ooops, misread the bit I was quoting/replying to. Anyhow, if you want to see why a spam message is not getting flagged, then what I've written should help... |
Thanks for your helpful reply
Andrew _________________ | Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think of NetHosted! |
|
| Back to top |
|
| holdaway |
|
NetHosted Customer
Joined: 06 Jul 2006 Posts: 28
|
Posted: Tue Oct 17, 2006 10:37 am Post subject: |
| |
Thanks for the help, by the way - been a busy few days, but I'll try your ideas.
Thanks again!
Stuart. |
|
| Back to top |
|
| gpk |
|
NetHosted Customer
Joined: 06 Oct 2006 Posts: 169
|
Posted: Sun Oct 22, 2006 4:55 pm Post subject: |
| |
You might want to check my suggestion at the bottom of this thread as well http://community.nethosted.co.uk/topic1645_training_the_spam_filter.html . I've set this up for a friend so that suspected spam and largely clean emails go to separate mailboxes. Then when he is out and about he only checks the "largely clean" box; back at base both mailboxes are downloaded and the suspected spam sent to a sep. folder for occasional checking for false positives (as I said in the other thread, I've not seen any of those yet ...) _________________ http://www.alexoria.co.uk • Find New Business for Your Business |
|
| Back to top |
|
User Permissions |
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum You cannot attach files in this forum You can download files in this forum
|
| |