Client Support Community Server Status Contact Us Client Login
Email Hosting Website Hosting Reseller Hosting VPS Hosting Dedicated Servers

    Join our Community      Check your private messages       Profile       Search       FAQ       Memberlist       Log in


Getting Rid of Spam?

 
Post new topic   Reply to topic    NetHosted Community Index -> E-mail Support
holdaway Reply with quote
 NetHosted Customer

 

 Joined: 06 Jul 2006
 Posts: 28
 

PostPosted: Thu Oct 12, 2006 11:25 pm    Post subject: Getting Rid of Spam?
 
I've recently started getting some very objectionable spam, and I'm not sure how to go about stopping it. Is it possible to have the server scan the mail before I get it? I undertand that I can arrange this in Outlook, but I check my email on my phone, and via webmail, so that's not really an ideal solution.

The headers of the two mails I got today are as follows:

Quote:
Return-path: <blake.hunsleynlll@msvu.ca>
Envelope-to: me@mydomain.co.uk
Delivery-date: Thu, 12 Oct 2006 22:07:53 +0100
Received: from holdawa by neptune.solardns.com with local-bsmtp (Exim 4.52)
id 1GY7mN-0004bz-SU
for me@mydomain.co.uk; Thu, 12 Oct 2006 22:07:52 +0100
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on
neptune.solardns.com
X-Spam-Level: **
X-Spam-Status: No, score=2.0 required=5.0 tests=BAYES_50,RCVD_IN_SORBS_DUL
autolearn=no version=3.1.5
Received: from [64.32.94.219] (helo=219stb24.codetel.net.do)
by neptune.solardns.com with smtp (Exim 4.52)
id 1GY7mM-0004bg-As
for me@mydomain.co.uk; Thu, 12 Oct 2006 22:07:47 +0100
Received: from SERF.msvu.ca (SERF.msvu.ca [140.230.5.76])
by 219stb24.codetel.net.do (Postfix) with ESMTP id 000000186936
for <me@mydomain.co.uk>; Thu, 12 Oct 2006 16:09:05 -0500
Received: from unknown (158.111.128.42)
by SERF.msvu.ca (qmail-ldap-1.03) with SMTP
for <me@mydomain.co.uk>; Thu, 12 Oct 2006 16:09:05 -0500
From: "Dina Amos" <blake.hunsleynlll@msvu.ca>
Reply-To: "Dina Amos" <blake.hunsleynlll@msvu.ca>
Message-ID: <3716869330.4733634676@msvu.ca>
Date: Thu, 12 Oct 2006 16:09:05 -0500
To: <me@mydomain.co.uk>
Subject: Objectionable carp.
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit


Quote:
Return-path: <strangerfjuh@zipper.net>
Envelope-to: me@mydomain.co.uk
Delivery-date: Thu, 12 Oct 2006 22:56:01 +0100
Received: from holdawa by neptune.solardns.com with local-bsmtp (Exim 4.52)
id 1GY8X0-0007pJ-9d
for me@mydomain.co.uk; Thu, 12 Oct 2006 22:56:01 +0100
X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) on
neptune.solardns.com
X-Spam-Level: ***
X-Spam-Status: No, score=4.0 required=5.0 tests=BAYES_50,RCVD_IN_NJABL_DUL,
RCVD_IN_SORBS_DUL,UNPARSEABLE_RELAY autolearn=no version=3.1.5
Received: from [84.174.69.44] (helo=p54AE452C.dip0.t-ipconnect.de)
by neptune.solardns.com with smtp (Exim 4.52)
id 1GY8Wz-0007p8-K4
for me@mydomain.co.uk; Thu, 12 Oct 2006 22:55:58 +0100
Received: from mail.zipper.net
by p54AE452C.dip0.t-ipconnect.de (8.9.3/8.9.3) with ESMTP id 000000186936
for <me@mydomain.co.uk>; Thu, 12 Oct 2006 16:55:15 -0500
Received: from (root@localhost)
by mail.zipper.net (8.12.3 da nor stuldap/8.12.3) with SMTP id xZdmLsPZFWon
for <me@mydomain.co.uk>; Thu, 12 Oct 2006 16:55:15 -0500
From: "Jay Salazar" <strangerfjuh@zipper.net>
Reply-To: "Jay Salazar" <strangerfjuh@zipper.net>
Message-ID: <7440293599.9778581635@zipper.net>
Date: Thu, 12 Oct 2006 16:55:15 -0500
To: <me@mydomain.co.uk>
Subject: More objectionable carp.
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 7bit


Can you suggest a way I could stop these emails? They seem to be coming from different locations, but then I don't know what I need to look for...

Regards,

Stuart.
Back to top
View user's profile Send private message
NetHosted - Andrew Reply with quote
 NetHosted Staff

 

 Joined: 22 Mar 2004
 Posts: 5684
 

PostPosted: Fri Oct 13, 2006 12:10 am    Post subject:
 
Stuart,

The best you can do is run SpamAssassin + BoxTrapper. For these particular mails a simple Subject Mail Filter would work as that is a common feature between them.

I'm afraid spam is the problem it is by the very nature that it's so hard to block effectively.

Andrew

_________________
| Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think  of NetHosted!
Back to top
View user's profile Send private message
holdaway Reply with quote
 NetHosted Customer

 

 Joined: 06 Jul 2006
 Posts: 28
 

PostPosted: Fri Oct 13, 2006 1:00 pm    Post subject:
 
Thankyou for the extremely prompt reply, Andrew (Don't you ever sleep?! ). I've activated SpamAssassin and BoxTrapper, how do I go about making them 'work'? I assume I need to do something in Outlook?
Back to top
View user's profile Send private message
NetHosted - Andrew Reply with quote
 NetHosted Staff

 

 Joined: 22 Mar 2004
 Posts: 5684
 

PostPosted: Fri Oct 13, 2006 1:10 pm    Post subject:
 
SpamAssassin and BoxTrapper both work server side as you required. The default SpamAssassin score is 5.0 which is aggressive. You could set that lower but you would risk getting too many false positives.

SpamAssassin rewrites subject headers, so you would need to setup Outlook to filter out the subjects that SpamAssassin labels as spam. But having enabled BoxTrapper this might not be needed as you are asking each person who emails you to verify who they are.

Thanks,

Andrew

_________________
| Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think  of NetHosted!
Back to top
View user's profile Send private message
holdaway Reply with quote
 NetHosted Customer

 

 Joined: 06 Jul 2006
 Posts: 28
 

PostPosted: Fri Oct 13, 2006 1:25 pm    Post subject:
 
Strange - I've enabled BoxTrapper, but haven't changed anything else, and the spam is still getting through... If I changed the SpamAssassin to a lower score (4.0, say), what would happen to those emails flagged as spam? Would they still get through, but into a spam folder?
Back to top
View user's profile Send private message
NetHosted - Andrew Reply with quote
 NetHosted Staff

 

 Joined: 22 Mar 2004
 Posts: 5684
 

PostPosted: Fri Oct 13, 2006 1:29 pm    Post subject:
 
I've just taken a look at your account, you have not enabled BoxTrapper for any of your email addresses...

Andrew

_________________
| Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think  of NetHosted!
Back to top
View user's profile Send private message
boughtonp Reply with quote
 NetHosted Customer

 

 Joined: 18 Jul 2005
 Posts: 130
 Location: South Croydon

PostPosted: Fri Oct 13, 2006 1:32 pm    Post subject:
 
edit: Ooops, misread the bit I was quoting/replying to. Anyhow, if you want to see why a spam message is not getting flagged, then what I've written should help...

Open up the message in Outlook and select View>Options.
You should see an "Internet headers" box, which contains the headers for the e-mail.
If you scroll down, you should see various X-Spam-* headers, which are added by SpamAssassin.
Somewhere there should be a score (or hits or level) header that tells you the score.
If the score is under 5 and the message is definitely spam, you'll need to add some additional tests to SpamAssassin so that it increases the score. (or raise the points given to existing tests)

_________________
Peter Boughton
Back to top
View user's profile Send private message Visit poster's website
holdaway Reply with quote
 NetHosted Customer

 

 Joined: 06 Jul 2006
 Posts: 28
 

PostPosted: Fri Oct 13, 2006 1:45 pm    Post subject:
 
NetHosted - Andrew wrote:
I've just taken a look at your account, you have not enabled BoxTrapper for any of your email addresses...

Andrew

Ah, fair enough. What exactly does BoxTrapper do, though?

If it's easier for me to RTFM (excuse my french) please feel free to say so!

As for the extra tests mentioned by Boughtonp (many thanks!), can you suggest anything, or is it a google jobbie?

Thanks again, both of you!
Back to top
View user's profile Send private message
NetHosted - Andrew Reply with quote
 NetHosted Staff

 

 Joined: 22 Mar 2004
 Posts: 5684
 

PostPosted: Fri Oct 13, 2006 2:07 pm    Post subject:
 
When someone not on your whitelist (trusted list) sends an email BoxTrapper sends back a verification email that the person must respond too. This causes them to be verified. Fine for personal users but might not work so well for companies e.g. if Tesco send you a newsletter they wont respond I imagine.

Andrew

_________________
| Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think  of NetHosted!
Back to top
View user's profile Send private message
NetHosted - Andrew Reply with quote
 NetHosted Staff

 

 Joined: 22 Mar 2004
 Posts: 5684
 

PostPosted: Fri Oct 13, 2006 2:23 pm    Post subject:
 
boughtonp wrote:
edit: Ooops, misread the bit I was quoting/replying to. Anyhow, if you want to see why a spam message is not getting flagged, then what I've written should help...


Thanks for your helpful reply

Andrew

_________________
| Andrew Bassett
| Managing Director, NetHosted Ltd.
| Resellers, take a look at overselling !
| Members, tell us what you think  of NetHosted!
Back to top
View user's profile Send private message
holdaway Reply with quote
 NetHosted Customer

 

 Joined: 06 Jul 2006
 Posts: 28
 

PostPosted: Tue Oct 17, 2006 10:37 am    Post subject:
 
Thanks for the help, by the way - been a busy few days, but I'll try your ideas.

Thanks again!


Stuart.
Back to top
View user's profile Send private message
gpk Reply with quote
 NetHosted Customer

 

 Joined: 06 Oct 2006
 Posts: 169
 

PostPosted: Sun Oct 22, 2006 4:55 pm    Post subject:
 
You might want to check my suggestion at the bottom of this thread as well http://community.nethosted.co.uk/topic1645_training_the_spam_filter.html  . I've set this up for a friend so that suspected spam and largely clean emails go to separate mailboxes. Then when he is out and about he only checks the "largely clean" box; back at base both mailboxes are downloaded and the suspected spam sent to a sep. folder for occasional checking for false positives (as I said in the other thread, I've not seen any of those yet ...)
_________________
http://www.alexoria.co.uk  • Find New Business for Your Business
Back to top
View user's profile Send private message Visit poster's website
Post new topic   Reply to topic    NetHosted Community Index -> E-mail Support
Page 1 of 1

User Permissions
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You cannot attach files in this forum
You can download files in this forum

 
Jump to: