Spam Filtering Guideor How To Make Your Own Spam Filter
I hate spam, also known as junk email or unsolicited commercial email (UCE). In the past years, unsolicited email has reached epic proportions. The State of Washington has passed a strong anti-spam law; the federal government is still trying to choose a course. Until someone steps in to make spam illegal, there's not much you can do to avoid it. If you post to a usenet newsgroup or have your email address anywhere on the web, someone will find and use it. Some internet service providers (ISP) offer to filter spam, but no system is perfect. Some email servers do a great job of eliminating spam, while others let everything through. Some of the better email programs (including Claris Emailer and Eudora 3.0) can filter your email before you read it, whether your ISP filters for spam or not. I won't go into the specifics of how each program handles filtering, just provide some general guidelines. First, no filter is perfect. Some spam will slip through. Worse, some genuine email may get filtered. For this reason, I suggest you send filtered out messages to a separate folder instead of having it deleted immediately. So before you make the filter, create a destination for the spam. Second, the most common pattern I've seen for junk email domains ends with #.com or #.net, where # represents a digit 0-9. Next most common, those ending with 4u.com and 4u.net. So you create a filter where the first 22 entries filter out addresses ending with 0.com, 1.com, 2.com - all the way to 9.net, 4u.com, 4u.net. (Use "ends with" instead of "contains." This should speed up the search process since your emailer won't need to read the entire address.) I've only seen one spammer use #.org, but you might want to add that to play it safe. Save your filter. (Claris Emailer will ask if the last command should or should not be applied to messages failing the last test. Select "don't apply actions.") This could eliminate half the junk email you receive. From here on, add domains to your filter as you receive junk mail. And be sure to add any otherwise filtered domains that you want to receive email from (e.g., 14850.com) by using the "don't apply actions" option. Another useful trick is to filter by looking for key words and phrases in the body of the message, such as "email marketing works." More Suggestions - from NetBITS1 Just got NetBITS #004/16-Oct-97. It shares another suggestion: filtering any email where your name doesn't appear in the To: or cc: line. I just set one up in Claris Emailer that filters any email where the recipient address doesn't contain "dknigh" - since most of my email accounts begin that way. The only danger of this is that messages bcc'd (blind carbon copied) to you may also end up in the spam box. If you receive these, it might be wisest not to set up this part of the spam filter. This can be particularly true if you are on email lists. 2 Jason Whong notes that one program that many spammers use has a bug that you can exploit in a filter - the forged headers use the time stamp of "-0600 (EST)". Eastern Standard Time is usually marked "-0500 (EST)" and Eastern Daylight Time is "-0400 (EDT)". Thus, filtering messages with the bad time stamp will catch either spam from this particular program or mail from incorrectly configured mail servers. NetBITS did a search on an archive of stored email and found that this filter worked well - it turned up only spam. Fighting Bull's Eye MarketingThe worst offender for the past months has been WorldTouch Network, which sends out the "email marketing works" messages. I've had single days with over a dozen copies reaching me via my 5 email accounts. Because these always come in with fraudulent return addresses and typically (these days) with misleading subjects, you must filter based on the body of the message. In this case, any email containing the text "EMAIL MARKETING WORKS" goes into the spam folder. While this zaps every message from, it also puts email about the spam (e.g., from the spamspam email list) into the spam folder. But I can live with that. WarningA lot of these messages say you can be removed from their lists. Don't you believe it. As often as not, your request will bounce. If they do get it, whose to say they won't keep you on the list now that they know this is a valid email address? Finally, odds are pretty good they bought the list from someone else, so having your address removed from their copy won't be a big help. A better option is to fight upstream by notifying every email carrier between your server and the sender that they are transporting unwanted bulk email. If you use Claris Emailer, the "No more spam" AppleScript (available on the Fog City site) can quickly generate this email and move the original into your deleted mail folder. Fighting at the Mail Server LevelThe best ways to stop spam are to:
Don't take spam passively. Fight back so we can put an end to this insanity. Other Anti-Spam Resources
About LEM Support Usage Privacy Contact |
Power Macs iMac Channel iBook/PowerBook MacInSchool Computer Profiles iMac Power Mac PowerBook/iBook Performas Mac Clones Older Macs Lisa • NeXT Editorial Archive Mac Daniel's Advice Email Lists LEMchat (uses AIM) Online Tech Journal Consumer advice, reviews guides, deals Software Apple History Best of the Web Best of the Mac Web surveys Miscellaneous Links Used Mac Dealers Video Cards Mac OS X Mac Linux Macspeak RAM Upgrades About Low End Mac Site Contacts
Support LEMAffiliates
|
