CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 952
Comments: 28
block bottom
spacer spacer

Suggestion: new column showing senders' IP

 
Post new topic   Reply to topic       All -> FavForums -> Product Suggestions [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
mcullet

Corporal
Corporal


Joined: Oct 29, 2003
Posts: 73
Location: Australia

PostPosted: Tue May 06, 2008 6:57 pm    Post subject: Suggestion: new column showing senders' IP
Reply with quote

Hi,

I have been getting some interesting (read nekked woman) emails from a scammer. Nothing new. It occured to me that I'd like to see the sender's IP address in a column in case I might want to report them to their ISP. I got this person's account closed within an hour! Woo hoo!

I also receive a few odd unfriendly emails and some could involve litigation (long story ... occupational hazards etc). IP addresses are quite helpful for security checks and to zone in on a specific person who, for example, claims to be from Melbourne when they are really from Russia.

I'm not exactly up to date on such things but from the little I know, the longer you wait to check an IP address then it's value rapidly declines especially if people are allocated dynamic IP's (as I am).

Still, by matching a record with the host ISP the chances of getting scammers shut down increases ... I hope.

Just a thought.

BTW - is there any way to use MWP with other user accounts on the same PC (XP PRO)? I have a couple of accounts (all my own) on my PC. Each deals with specific purposes - work, play etc. Each can have different email addresses but for the most part, I'd like to see messages from all addresses no matter which OS account I use. MWP won't let me ... as in, I need to buy a new licence for each account on the PC. Odd. Am I doing something really wrong? (Not concerned with paying for extra licences ... happy too. Just not excited in keeping track of them on the same system over time.)

I so love this product. Great work, guys.

Mike
Australia

Back to top
View users profile Send private message Yahoo Messenger
stan_qaz

Premium Member


Joined: Mar 31, 2003
Posts: 10629

Premium

PostPosted: Tue May 06, 2008 9:56 pm    Post subject:
Reply with quote

You just need to paste the registration key into MW running on each of the other user accounts, it stores its info in a user key, not the system key in the registry. One payment covers all users on a PC or one user on more than one computer but only one at a time. The details are somewhere on the firetrust website.

Doing a column for the correct IP and dodging all the spammer's spoofing is a tough job. I just report stuff to spamcop.net using the built in MW option and let them sort out the real source.

You can toggle to Source View and pick the IP out fairly quickly if that is all you need and are good at reading headers.


_________________
Questions? Try the wiki
http://wiki.castlecops.com/MailWasher_Pro
Back to top
View users profile Send private message
mcullet

Corporal
Corporal


Joined: Oct 29, 2003
Posts: 73
Location: Australia

PostPosted: Tue May 06, 2008 10:43 pm    Post subject:
Reply with quote

stan_qaz wrote:
'... paste the registration key into MW running on each of the other user accounts... toggle to Source View and pick the IP out .....


Thanks on both matters. I'm tinkering with an upgrade of EmailTracker Pro at the moment. If my image came through you may be able to see that it identifies the IP of each message, and to me that's handy.

As for the product itself ... still trying to make up my mind. It feels 'wrong' and sorta clunky. They make an attempt to do what MWP does (elegantly). The white / black lists aren't lists of email addresses / domains per se, but filters which can easily become difficult to manage.

It used to be able to identify the name of the PC where an email was sent - now it doesn't. This sort of tool is quite handy for forensic purposes however, I suspect I may need to keep looking. The program is compiled JAVA and it has many UI issues that need touching up - fonts too small, inconsistent use of glyphs,too 'busy', not intuitive etc. Though, to be fair I am still finding my way and will try to produce a more balanced assessment of it later. Might be of interest to others too.

Thanks again,

Mike - OZ




Edit EMP 'whitelist' rule.png
 Description:
'Clunky' interface to edit white list rule. Limited compared to MWP.
 Filesize:  10.98 KB
 Viewed:  293 Time(s)

Edit EMP 'whitelist' rule.png



EMT screen.png
 Description:
EMTP attempt to emulate MWP - (server side) inbox tab. Note Sender IP visible (barely). So far every email I've received (even from myself) has been misdirected.
 Filesize:  17.42 KB
 Viewed:  28 Time(s)

EMT screen.png


Back to top
View users profile Send private message Yahoo Messenger
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Product Suggestions All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer