1. Computer problem? Tech Support Guy is completely free -- paid for by advertisers and donations. Click here to join today! If you're new to Tech Support Guy, we highly recommend that you visit our Guide for New Members.

Solved: Blocking spam e-mail which uses part of my address

Discussion in 'Web & Email' started by Gadgetman, May 24, 2007.

Thread Status:
Not open for further replies.
Advertisement
  1. Gadgetman

    Gadgetman Thread Starter

    Joined:
    Feb 6, 2003
    Messages:
    387
    I have been unindated with spam e-mail by people who use a different username before the @ symbol, but uses my correct address after the @ symbol.

    Example: [email protected]
    [email protected]
    [email protected]

    I keep on blocking this type of spam in my Outlook options, but as the first part of the address is always different I still get the mail sent to me.

    Can anyone help me how I can stop any e-mail other than my own address from coming through?
     
  2. BanditFlyer

    BanditFlyer

    Joined:
    Oct 25, 2005
    Messages:
    12,552
    Why would you want to only receive email from yourself?

    If you want to do that, I'm guessing you could add yourself to your contacts list and only accept email from your contacts. Not sure how to do that via Outlook but it should tell you in the help files.
     
  3. Gadgetman

    Gadgetman Thread Starter

    Joined:
    Feb 6, 2003
    Messages:
    387
    Sorry I didnt make it clear. I still want to receive e-mails from other people, but I want to block all addresses which have a part of my address, ( the part after the @ symbol)
     
  4. Farmgirl22

    Farmgirl22

    Joined:
    Jun 11, 2006
    Messages:
    7,692
    I think what he means is this: "Why the heck am I getting email from people who can't even get the email address correct??!!" As in, it goes in your inbox, as long as the address is "kinda" close...

    I get a lot of those...my yahoo account doesn't even get checked anymore, because yahoo insists on sending stuff to me as long as it has farm in the address somewhere....know what I mean? *****EDIT***** say my email addy is: [email protected] things addressed to [email protected] will STILL manage to make its way in, because it has the word "farm" in it.

    Did I get it right, Gadgetman?! :confused:
     
  5. 1002richards

    1002richards Retired Trusted Advisor

    Joined:
    Jan 29, 2006
    Messages:
    5,333
  6. cpscdave

    cpscdave

    Joined:
    Feb 25, 2004
    Messages:
    444
    What is happening is that spammers use bruteforce scripts to send and discover emails.
    They'll pick a domain and just start
    [email protected]
    [email protected]
    [email protected]
    ....
    [email protected]
    ...

    and so on.

    Now of course they can get a lot smarter than that.

    They lump a bunch into emails and why it appears that it was sent to someone else and you sitll got is. The first email is in the TO field and the rest are in BCC.
     
  7. BanditFlyer

    BanditFlyer

    Joined:
    Oct 25, 2005
    Messages:
    12,552
    That's spam. Spammers also sometimes make it look like the email was SENT by yourself. Sometimes you can find out more by looking at the internet headers. Check your help files about your specific email program for how to do that.
    If it's an old email address, or if you posted it on a website somewhere(sometimes even a jobsite like Monster), you'll get lots of spam. I have one from before the year 2000 that gets over 100 spam messages / day. I still check it though. I don't give it out because at this point, most mail from people I don't know goes into the junk folder.

    Yahoo's actually really good about it, as compared to hotmail and some others. I have several yahoo accounts I created in 2003 that still get zero spam.
    SpamBayes is a good one, but I'm not sure if it looks at internet headers or just the body of the message.

    Speaking of which, you can probably filter out messages that are addressed to a different recipient via Outlook. I could swear I've seen something to that effect in the Outlook help files somewhere.
    I think the only way to check for that(shether you're the "To:" recipient or just a "bcc:" recipient) is to look at the internet headers.
     
  8. Farmgirl22

    Farmgirl22

    Joined:
    Jun 11, 2006
    Messages:
    7,692
    They should make it so that you can bounce SPAM back to the senders...Mail has that feature, (if you want to take the time to do each individual one, manually...sometimes several hours after it has been sent...) but I wish it did it on Gmail automatically as soon as the mail is received. Ya know, like if it doesn't come from a trusted source it bounces back. Why don't they do that?? Wouldn't it be smarter?
     
  9. cpscdave

    cpscdave

    Joined:
    Feb 25, 2004
    Messages:
    444
    THere are actually strategies for combating this type of spam. Well actually its a combination of 2 strategies.

    The first is Grey Listing.
    What happens is [email protected] sends you an email and the server rejects it and says "Try back in X minutes" (this actually; gets rid of most spam cause most spamming scripts dont worry about rejections), if its a legit email from a legit source you'll get it again shortly and that email is "white listed for the grey list" meaning any future emails from there within the next day wont get rejected for X min.
    *We host a spam filitering device and when the company upgraded their product and launched grey listing the ammount of spam that got put into quarntine went down over 90%!!!!*

    The second one is Real Time Block lists.
    What these are are lists with common/current spam attacks. THe program looks at the email and if it is one of them matches it.

    RBL works great with greylisting cause even if the spammer resend the email in X min. If you've had an update to your RBL profiles in that time chances it'll get blocked.
     
  10. BanditFlyer

    BanditFlyer

    Joined:
    Oct 25, 2005
    Messages:
    12,552
    I think they do, at least with certain email programs. The only problem is that if you reply, then the spammers now know that your address is valid, whereas before, they might have just been guessing.
    That's a different feature altogether.

    There are systems that will allow you to receive only email from sources that are on a certain list.

    I looked into it a while ago. I can't remember what it's called right now. The problem with it, at least for businesses, was that if you can only get mail from people on a list, how do you know if a customer who is contacting you for the first time is on that list?
     
  11. kiwiguy

    kiwiguy

    Joined:
    Aug 17, 2003
    Messages:
    17,584
    That would be and is a disater, in terms of clogging up bandwidth on the internet.

    Spammers open up a temporary address, send a few hundred thousande messages then depart. They never check the address for replies, it is usually closed by the ISP or server host as soon as they find out.

    So bouncing the email just uses bandwidth as it bounces back, only to be rejected again.

    It might make you feel good but it does nothing for all legitimate internet users.

    Bringing back the death penalty for spammers would be a good move though.
     
  12. Farmgirl22

    Farmgirl22

    Joined:
    Jun 11, 2006
    Messages:
    7,692
    I WOULD VOTE FOR THAT!!!
     
  13. BanditFlyer

    BanditFlyer

    Joined:
    Oct 25, 2005
    Messages:
    12,552
    I wouldn't expect that. Mainly because you don't really need an email address to send email out. I would think a lot of spammers simply put some random or almost random collection of letters in the "From:" field, and then send out messages without actually having a sending address. Since all you need to send an email is a shell script or batch script.

    Then when the ISP pulls their Internet service, they change servers....

    No actual (valid) sending address is required.
     
  14. kiwiguy

    kiwiguy

    Joined:
    Aug 17, 2003
    Messages:
    17,584
    To send emails you have to have both an ISP and use an SMTP server.

    They either use an ISP's SMTP server or they hijack a legitimate server and install a trojan SMTP mailer on it, or they host their own server (very very rare). Usually not webmail as they mostly have protection against such things.

    Try sending an email out when no SMTP server exists?

    In any case, bouncing is futile.

    The "from" address maybe spoofed but it still has to come from an SMTP server "somewhere" to get delivered to anyones email POP3 server to then be delivered to us, the poor suckers at the end.
     
  15. Gadgetman

    Gadgetman Thread Starter

    Joined:
    Feb 6, 2003
    Messages:
    387
    Yep, you hit the nail on the head Farmgirl22.

    It looks like its an auto mailing setup which uses my excact address after the @ symbol except for a random name at the beginning.

    As my server sees that the address is almost similar to my original it forwards it on to me.

    I have noticed that there are some sort of attachement to it, in the way of an envelope.

    I have included the message I am being sent below: My address is replaced with xxxxxxxxx

    ..........................................................................................

    Hi. This is the qmail-send program at rak-gentoo-3.nameserver.de.
    I'm afraid I wasn't able to deliver your message to the following addresses.
    This is a permanent error; I've given up. Sorry it didn't work out.

    <[email protected]>:
    Sorry, no mailbox here by that name. (#5.1.1)

    --- Below this line is a copy of the message.

    Return-Path: <[email protected]>
    Received: (qmail 22780 invoked from network); 23 May 2007 23:22:46 +0200
    Received: from unknown (HELO cpe-24-210-188-28.woh.res.rr.com) (24.210.188.28)
    by rak-gentoo-3.nameserver.de with SMTP; 23 May 2007 23:22:46 +0200
    Received: from sahara-8ajh3o70 ([160.132.38.96])
    by cpe-24-210-188-28.woh.res.rr.com (8.13.4/8.13.4) with SMTP id 2E249BF3753107;
    Wed, 23 May 2007 12:06:09 -0700
    X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9
    Date: Wed, 23 May 2007 12:05:58 -0700
    To: [email protected]
    From: "Prosanta pepa" <[email protected]>
    Subject: DuPont ExxonMobil Electric Motors
    Mime-Version: 1.0
    Content-Type: multipart/related;
    type="multipart/alternative";
    boundary="=====================_11416578==.REL"

    --=====================_11416578==.REL
    Content-Type: multipart/alternative;
    boundary="=====================_11416578==.ALT"

    --=====================_11416578==.ALT
    Content-Type: text/plain; charset="us-ascii"; format=flowed


    []

    Play, gamespot rereleased cnet newscom zdnet networks william poundstone. While place entrylevel, cubicle large. Manage install multiple complex packages dllhell?
    Plum creek soundbased costco wholesale paccar puget nonpublic.
    Traffic rank least attributed default settings. Ebay google emc fujitsu. Virus increasing pcsultra form factor tablet, creation!
    Three exist client server tool.
    Beginning, takeover rival netscape?
    Departure recently student innovation precise tracking each unit.
    Having money spent, recruiting young keeping them. Easier granneman, said holes buggy dangerous piece.
    Altria express atampt boeing citigroup, cocacola dupont, exxonmobil.
    Rights campaign, ranking how deems, concerning lgbt lesbian.
    Searching wikipedias sister texts stories components! North america hopes compensate losses incurred.
    Amazoncom nordstrom starbucks listed. Directory directx moreweb ninemsn.
    Needs appear credible alone primary. Derivative ibmpc, small player, major vendors industry expanded.
    Remedy fully, enable clients highly recommend installed. Alliance tcpa cause, concern.
    Society composers authors broadcast music.
    Emails reads composing broken, probably.
    Ran internal joke save old green, uppercase.
    Reads composing broken probably.
    Catering, scheduled combined devicesthe second gaming.
    --=====================_11416578==.ALT
    Content-Type: text/html; charset="us-ascii"

    <html>
    <body>
    <img src="cid:[email protected]" width=400 height=248 alt="[]">
    <br>
    Play, gamespot rereleased cnet newscom zdnet networks william<br>
    poundstone. While place entrylevel, cubicle large. Manage install<br>
    multiple complex packages dllhell?<br>
    Plum creek soundbased costco wholesale paccar puget nonpublic.<br>
    Traffic rank least attributed default settings. Ebay google emc<br>
    fujitsu. Virus increasing pcsultra form factor tablet, creation!<br>
    Three exist client server tool.<br>
    Beginning, takeover rival netscape?<br>
    Departure recently student innovation precise tracking each unit.<br>
    Having money spent, recruiting young keeping them. Easier granneman,<br>
    said holes buggy dangerous piece.<br>
    Altria express atampt boeing citigroup, cocacola dupont, exxonmobil.<br>
    Rights campaign, ranking how deems, concerning lgbt lesbian.<br>
    Searching wikipedias sister texts stories components! North america<br>
    hopes compensate losses incurred.<br>
    Amazoncom nordstrom starbucks listed. Directory directx moreweb ninemsn.<br>
    Needs appear credible alone primary. Derivative ibmpc, small player,<br>
    major vendors industry expanded.<br>
    Remedy fully, enable clients highly recommend installed. Alliance<br>
    tcpa cause, concern.<br>
    Society composers authors broadcast music.<br>
    Emails reads composing broken, probably.<br>
    Ran internal joke save old green, uppercase.<br>
    Reads composing broken probably.<br>
    Catering, scheduled combined devicesthe second gaming.</body>
    </html>

    --=====================_11416578==.ALT--

    --=====================_11416578==.REL
    Content-Type: image/gif; name="Doing.gif";
    x-mac-type="47494666"; x-mac-creator="4A565752"
    Content-ID: <[email protected]>
    Content-Transfer-Encoding: base64
    Content-Disposition: inline; filename="Doing.gif"

    R0lGODlhkAH4AIcHAAUDBHwFCgl/BIuODQAAd4QKfQB9drW6ycXYuZrH/D4aAlwfCHwfAKMnC8ko
    AOErBgAxAC09ADdMAFJFDYRBA5dIAMszAN0xAABeAC1sBE1lAFZaAHFkAKRYAM1tAetrAAB6AB1y
    ADOHAGiEAHuDDqR2ALKKAOmCAweZBSebAE2mAliYBIuWCZ+fAL2kDdWbCwK8ACPCAzqzC2jFAHjD
    AJ21ALHGAOXNAADhACjTBjnqAFfgBXrrB6zrCsXgAN3fAAAKThoASD4AMl4KQHUBSZIOObsATOYA
    RQAeRSgqSEApMl0SM3UuRq4kM8kVPuQoOABJSxw8QUk/TGVBP4Y7P51CQ8JBQtM8TQtlQRpZR0tX
    P19iQXZtAJdjQL1XTt5YSQmDRBR7Mz6CP2F+NYt+RK50QsB0Nut2OQCSOxKjOUCnRFeoM4qYOKue
    McyTPe2eRADIOiLIPzjITlnDOn/ISJfERLbETNW+QQ7cPS7RPD3fQl3WOYjWQJ7iPL7sP+TcOQAG
    gisJhDIKfm4CcogBgqsAeMoCfucAhAAceC0eej8WjWQZiHooeqcfdrEuiNIoewRBhiJAc0Q9eF09
    cXQxdJdMerc2g+1NiQtcfidteEVjfVVne3RfeZ1dg79Ud+ZSjQCOiip7hkt6g2yHiHp3h6CIfLyK
    jN2GiwyUcyKdd06Rf2GXfoSRfZOrd8ashuyajgC0iC3Ng0XJeFPKdnyyfJbNec2/ce22gwDlexnR
    jUHUh2Tie4nWdajXhsHShd7ifAAAuR0AzjQAzWcGwXIHvJUKzLIEvdwBzggVsSUpv0Qlx10uwIAo
    wZgWzMwjwuAjwAE4zh05yEI5s2Q1s3pOxJg2s70ystkywglitSxatkxmumNpzndXt5Zfvc1fwuBZ
    wACAwRJ9xUJ0sliGtYx/x517vMGGw+eKyQKkvySSvjirtmSrwn6fvaGcvsygzuubvQPAxSi4yTXN
    tWXLw3LMzJKzzP/57Z6TnXuDd/8AAwr/Bv78AAAN8/EA/wD//////yH5BABL+ZUALAAAAACQAfgA
    Bwj/ABEIHEiwoMGDCBMqXMiwocOHECNKnEixosWLGDNq3Mixo8ePIEOKHEmypMmTKFOqXMmypcuX
    MGPKnEmzps2bOHPq3Mmzp8+fQIMKHUq0qNGjSJMqXcq0qdOnUKNKnUq1qtWrWLNq3cq1q9evYMOK
    HUu2rNmzaNOqXcu27UYAcOEKjDt3IICCceXa1ZsXQd67BOnO1euXsOGEff8OlquYruLFdxsD9uu2
    csvJmCnXDYx4M16DmUPb1Qx48mfOqE9vNu25deHRlmOjZL1ac2rQrnNzFl23tG3VsIPf9n3bdWTd
    spN7pM07cN/UgpHzHZ359e/ihQ0T/l1aMHPvpJWL/w/JuvxB2sI9o6fO3vjg0447tyYOOz7q4+Pz
    czTN/Lx86ArhR1l17fG3238GXmegeQPq52BGBA6H3HW29ddbe9zVBuB6Fd6H24XQ0ffgiA9h9lyG
    FC6WXYJ4aWcig9a1yFhi0VU4Y3Q02mcdhyT26OOPQAYp5JBEFmnkkUgmqeSSTCL02Ikd9nbji995
    5+Je6amXIZTP5djdYdQRyKWXwYlJ5V6OecljkzDBqFp19MUJXIe8iVjffFG6SeedYfL5YZlaqicm
    gH+yiZOegGoIp4QbFphig3guWlxzIh7nG4cwyqlooJxiZyhNJ9Z4oYCasriilnDaiaVwpKLp6p4a
    jv8K4nngoQppeFEKut2an7qE6WeW1oejp7e2el95pkYmqntdDusofjUiu2uDkkKZK7G9tvmfrNWy
    6iSsCuI664K6mcdghNDeiqKf1JLWmHvlZnvTr296GGum4CZYaazFFqpunge+dy2+iW7pbbxZyruS
    ZNsVrOOAy2b3qsQh1nvqllZOx2iXq14MmYC5orsulSIrbPLJKKes8sost+zyyzDHLPPMNNds8804
    56zzzjz37PPPQAct9NBEF2300UgnrfTSTDft9NNQRy311FRXbfXVWGet9dZcd+3112CHLfbYZJdt
    9tlop13Su7qCrGy0NIaZZsOJJax2WoOGi+GchxH/rPejd59FLoWD+5suweiBHPhag1c5t7SXSqmx
    uAEvzpbf3q537r+hqjih5WVhHum3Hiquaaeg4w2cm4qnZ+LfeQOe+lh61i33rra/xnbbds/u++/A
    By/88MQXbzxJzUHs4pSty8jX5JDzevxUxBXeH6L+2Qrv9GAZOy58fGcPvoXcfzUthixy7Cn5rT9W
    vlbnSy669LWL/z5X3kOa7Jyk55b4/V6pXuXsVL8//Y9dAMxKqianPOZd7IArKpn0EkjBClrwghjM
    oAY3mBweaQ4iEaJIxHTFwaB4sH8NUZVEQigwFpYwJ9JSUY4857aQ6Y+B1wKRC184r0YBC1B0S9+O
    /8IHr9PxUCf8yd29lCgw7cVIfNGDzBF5YqqRuQ43g0JW/z7IvynWRIglAxefkscvgE3Kiztp1uua
    RUMDSvFFWXJWmSaIRvHQsY49uiMe98jHPvoRbOl7nfzQxBjnPRA0JIugk8jknI61ancNJKQeKxhI
    R5rxYEBEZBe5WLAY9a2M1sMWD/VVm8jtbV1O5Bf7iGjGw+UwlL0b5ZNKOatIKgh6equiLnPXrUsl
    8WH5m6QFSYmrYJ3yg+pjF/ZcF61NKeuMt+viFBfENmPW8lGmc07nYplLSboyfwb7Gx4LVyxjLTOb
    mGRhASlHqnSJM5h9JGc7PcawtxEQmHOs1RX3Nv9PMh6yk38MqEAHStCCGvSg43Hfxzr2xjHNTZH0
    QyQ+rTVChE5kTVrcZ4BAyZCGvdOGn7NoiRZCTPJtcXsIg+b3xCnSi46wpBKFoLtwKFMphpNysmsp
    CCmGouoVclsETKHhdiPHkOrUIRD8Sw3phcCIslJ/Gj1qRFwowVPGEaUpMulNYyfVFXq0U2dSKMMg
    qs+JLfSfJOyqWtfK1ra69a1wjatc50rXutr1rnjNq173yte++vWvgA2sYAdL2MIa9rCITaxiF8vY
    xjr2sZCNrGTz8yRcahN3QcQknRza0GWpqbPaIaQkyerZx72NrMy8kSJF20ibjjWnL8tiVAnVxP3/
    XdNem3wqMztJVfsRzjhhRCBvZWsxnB2wfSfd1BVVWEb/DbVQAsRTSlXaVHZ+iJPFTCXqarZKxwlR
    ucyyaYiqSDgcxS+70vUYNp8HJo7dc4GsU1TGuGqzdRKLS6p0Iwq3+yXAVVW9OQwpcrvJRebCVIzb
    pRl5a+onpaIywc6N8G0dVs3iivJfODXldaVDVF7+1qgu661wAyVP/fo2wAimLSwTvOAPZ6rAHM6v
    P4W5skRKF7tLfVw+MatezZm2x5lT8TZXM9/T7g6z/RVrUe250LJO9slQjrKUpww6M2Xus2DilCAh
    2uFE9q20822tjSCHSjWWeXnaBC2Nj1YpkdUu/4xWRqk5W4Q+3VoSpJrtlkbpxeCr1dC69dsXiTla
    53Bp+MHIvOaA0xvdIm40q12jm4wZ6U72zPmBR3ZteJJlXnMpurwOlZSjEXTerEka0ETMpjUbHami
    brrMQJVV5fI8Rmj2Fzs7rFo7lYjOO3kaWpAMZwgjZ1v7EfuHqyOUoJXJv1xTjdVLZaVHudrrfsEO
    nEy1kZaTnahlbxvXmn02PzV92XkWl5oT7XI/wTylN8Hxsmdm76lmKF6J4ZebVM63vvfN736T7Tvw
    nnfcgKtahQo8rMPp9Go/a8hK1la0SpYbxNVdbk+u9uA/ld8zm/spgGM1ow/G6VXlrOKPb2tkW/8O
    Kq0azO0P3xnRyQY5c9m0OZZ6OuQG3nDLe2ryEx/YldJ0p6q+e8bTaZWcUIWtkmrO0zAnfWJfqpJw
    HXywqL+KojHVmCnbJyqh+899jtMhQDFNafQqjOnLHR/pZl7rnR/YP9i9sTNdrnaRE32f3ktyzOu+
    5iD9suvI9vXajcrq9PLcv9iEbgS/6S/B2522eMcz52b9aqUnqdjhrVj22H4vt3e7M9m+aTmxOkfU
    3X17WUYw0rd8Ml6TPermdq0DWdvpP4v3x2qcdrrRF9Z76w7Np+fyw+ENSXuau+/+Tr7yl8/85jv/
    +dCPvvSnT/3qW//62M++9rfP/e57//vgD780+MdP/vKb//zoT7/618/+9rv//fCPv/znT//62//+
    +M+//vfP//77//8AGIACOIAEaH4BAQA7

    --=====================_11416578==.REL--
     
  16. Sponsor

As Seen On
As Seen On...

Welcome to Tech Support Guy!

Are you looking for the solution to your computer problem? Join our site today to ask your question. This site is completely free -- paid for by advertisers and donations.

If you're not already familiar with forums, watch our Welcome Guide to get started.

Join over 733,556 other people just like you!

Loading...
Thread Status:
Not open for further replies.

Short URL to this thread: https://techguy.org/576774

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice