Forums  Register  Login  My Profile  Inbox  Address Book  My Subscription  My Forums 

Member List  Search  FAQ  Ticket List  Log Out

 

RE: SPAM with images (and some junk text)

 
Logged in as: Guest
Users viewing this topic: none
  Printable Version
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> RE: SPAM with images (and some junk text) Page: <<   < prev  2 3 [4] 5 6   next >   >>
Login
Message << Older Topic   Newer Topic >>
RE: SPAM with images (and some junk text) - 30.Aug.2006 3:36:43 PM   
blukkes

 

Posts: 8
Joined: 30.Aug.2006
Status: offline
Ignore the advice if you want but I am just an admin trying to help.  I wont post here anymore.  Thanks for your response.

(in reply to bhamren)
Post #: 46
RE: SPAM with images (and some junk text) - 30.Aug.2006 3:48:50 PM   
justinr

 

Posts: 129
Joined: 6.Mar.2006
From: New York, NY
Status: offline
it's none of my business, but i'm not having anything to do with 'super sketchy server' that has ~13 ports open to the net, including port 135.

if that box isn't rooted already, it likely will be soon.

if you're the admin of that box, i'd look into 'nmap'.

(in reply to blukkes)
Post #: 47
RE: i get it with the junk bonds and penny stocks - 31.Aug.2006 10:03:26 AM   
bhamren

 

Posts: 36
Joined: 28.Jul.2005
From: Sidney, OH
Status: offline
quote:

  i'm betting that the keyword check (and probably bayesian..) all behave this way, and strip out the HTML.


If I could ask a GFI person then, is there some way so that when I am scanning for keywords, I can specify to include the html tags? If I could scan for the following:

<DIV><FONT face=Arial size=2><IMG alt hspace=0 src="cid:

I would eliminate all of this type of spam and we have no ham with these tags in our archives.

How about it GFI??

Thanks

(in reply to justinr)
Post #: 48
RE: i get it with the junk bonds and penny stocks - 6.Sep.2006 9:49:03 AM   
bjriffel

 

Posts: 4
Joined: 7.Aug.2006
Status: offline
I can only assume that since we haven't seen any recent responses from Mark, that there still isn't a solution to this problem.  I will continue to forward these spam messages to forums@gfi.com AND support@gfi.com until it is addressed.  I suggest that other people also forward ALL spam messages such as these.  If they are filling up our inboxes, then it is only fair that we fill up theirs.

My next question is, have any of you tested any other products that can successfully combat these messages?  I don't want to switch, but GFI is leaving me with few other options.

thanks

(in reply to bhamren)
Post #: 49
RE: i get it with the junk bonds and penny stocks - 6.Sep.2006 11:06:21 AM   
blukkes

 

Posts: 8
Joined: 30.Aug.2006
Status: offline
As I stated in my earlier post, I have all but eliminated my Spam email by blocking the one domain.  After a long weekend, we had 15 messages for our entire company that needed to be looked at.

(in reply to bjriffel)
Post #: 50
RE: i get it with the junk bonds and penny stocks - 6.Sep.2006 11:14:40 AM   
bhamren

 

Posts: 36
Joined: 28.Jul.2005
From: Sidney, OH
Status: offline
Really, I am not trying to pester you but you have never answered my questions that I am really interested in getting answers to. Can you please answer them blukkes?

  1. Did you really use the DNS Blacklist? It seems if you are getting lots of spam from a domain the proper place would be the Custom Blacklist.
  2. If you are using DNS blacklist, how did you think to add bright-ways.com here since it is not a DNS blacklist site?

Thanks


(in reply to blukkes)
Post #: 51
RE: i get it with the junk bonds and penny stocks - 6.Sep.2006 11:25:59 AM   
blukkes

 

Posts: 8
Joined: 30.Aug.2006
Status: offline
As I have answered before, I am using the DNS Blacklist.  I am new to GFI and may have put it in the wrong place.  I have also answered that I was trying to cut down the amount of spam mail I had to review on a daily basis.  Looking at the spam mail coming in I noticed a lot of them coming from bright-ways.com.  I wanted all email from the gone and I added it to the DNS Blacklist.  By doing so it appears to trace back all of the emails eminating from that domain even ones that don't say bright-ways.com is the originator.  I have saved on average 2-3 hours per day by implementing this into my spam filter.

You were concerned about harvesting email addresses by implementing my solution.  We don't send the non-delivery mail message so we don't have the concern they are going to get email addresses back from us.

(in reply to bhamren)
Post #: 52
RE: i get it with the junk bonds and penny stocks - 6.Sep.2006 1:38:49 PM   
gpinson

 

Posts: 214
Joined: 2.Sep.2003
From: Denver, CO
Status: offline
blukkes, quick clarification question.
Are you sure it is the DNS Blacklist?
As it sounds more like the Custom Blacklist you are referring to.

(in reply to blukkes)
Post #: 53
RE: i get it with the junk bonds and penny stocks - 6.Sep.2006 2:21:43 PM   
blukkes

 

Posts: 8
Joined: 30.Aug.2006
Status: offline
DNS BLACKLIST!

(in reply to gpinson)
Post #: 54
RE: i get it with the junk bonds and penny stocks - 7.Sep.2006 5:45:49 AM   
mordzy

 

Posts: 28
Joined: 7.Mar.2006
Status: offline
From my research bright-ways is listed in some german dns black lists its not a DNS blacklist service so im not sure how thats working blukkes?!

bright-ways.com (bl=2006-08-29, ns=ns4.domainsite.com, whois=whois.domainsite.com, created=2006-08-24)
 
http://www.joewein.net/bl-log/bl-log.htm

see link

as stated its a domain thats been added to a black list service, not a service its self

< Message edited by mordzy -- 7.Sep.2006 6:40:12 AM >

(in reply to blukkes)
Post #: 55
RE: i get it with the junk bonds and penny stocks - 20.Sep.2006 11:09:20 PM   
iburrowes

 

Posts: 33
Joined: 15.May2005
From: Melbourne, Australia
Status: offline
The GFI Mail Essentials desperately needs a way to detect the html tags that insert images please.  I have resorted to using the image checking feature with a huge character size limit so that almost any email will get trapped by it.  This is unsatisfactory.

How is this feature request going?  I have seen many many threads about this over the past 6 months and created a couple myself.

being able to detect something like <DIV AND <IMG alt="" AND src="cid: would be WONDERFUL!!!!

I can't wait any more for something like this that seems pretty simple to me...

please please please please please please please please please please!!!!!

(in reply to mordzy)
Post #: 56
RE: i get it with the junk bonds and penny stocks - 21.Sep.2006 8:12:29 AM   
bhamren

 

Posts: 36
Joined: 28.Jul.2005
From: Sidney, OH
Status: offline
Don't hold your breath iburrowes. I think the GFI team only looks at new threads. I have posted this so many times with no reply I have just lost confidence in them. They used to be better. Now, if they don't have an answer they just ignore the post.

(in reply to iburrowes)
Post #: 57
RE: i get it with the junk bonds and penny stocks - 21.Sep.2006 11:12:33 AM   
Nicks

 

Posts: 2772
Joined: 17.Mar.2003
Status: offline
Hi,

Just to let you know that we are actively monitoring this post (as we do with the rest of the forums). All the requested features have been noted and forwarded to the product manager.

Thank you.

_____________________________

Nicholas Sciberras
GFI Software
Blog-Twitter-YouTube-Facebook

(in reply to bhamren)
Post #: 58
RE: i get it with the junk bonds and penny stocks - 22.Sep.2006 11:46:24 AM   
PetersLtd

 

Posts: 16
Joined: 18.Aug.2006
Status: offline
quote:

ORIGINAL: iburrowes

being able to detect something like <DIV AND <IMG alt="" AND src="cid: would be WONDERFUL!!!!



I could not agree more.

(in reply to iburrowes)
Post #: 59
RE: i get it with the junk bonds and penny stocks - 26.Sep.2006 9:58:30 AM   
heebie

 

Posts: 1
Joined: 26.Sep.2006
Status: offline
I agree as well.  We are having the same problem as others in this thread.  A module for HTML tag checking would be a big help although it would probably be only temporary as the spammers make their html tags more generic to try to dodge the filters... 

Looking forward to a solution!

(in reply to PetersLtd)
Post #: 60
Page:   <<   < prev  2 3 [4] 5 6   next >   >>
All Forums >> [Web & Mail Security] >> GFI MailEssentials >> RE: SPAM with images (and some junk text) Page: <<   < prev  2 3 [4] 5 6   next >   >>
Jump to:





New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts