CastleCops, Internet Crime Fighters
Need help? Click here to register for free! Absolutely zero advertisements on this site!

$9736.22 of $21422.68
left sidedonated so farneed $11686.46 donated to reach our goalright side, our goal
Help CastleCops serve the community on new servers, Donate Here to reach our goal.

Donation/Premium
spacer
block bottom
Security Central
spacer
· Home
· PIRT/Fried Phish
· MIRT
· SIRT
· Deutsch
· Wiki
· Newsletter
· O16/ActiveX
· CLSID List
· Contest2007
· Downloads
· Feedback (send)
· Forums
· HijackThis
· Hijacktrend
· LSPs
· My Downloads
· O18
· O20
· O21
· O22
· O23
· O9
· Premium
· Private Messages
· Proxomitron
· Reviews
· Search
· StartupList
· Stories Archive
· Submit News
· WsIRT
· Your Account
· Acceptable Use Policy
block bottom
Survey
spacer
Was 2007 a good year?

Yes it was a wonderful year
Yes, but there is always room for improvement
Status quo
It was a challenge
Other (leave comment)



Results
Polls

Votes: 949
Comments: 28
block bottom
spacer spacer

Blocking by website references?

 
Post new topic   Reply to topic       All -> FavForums -> Product Suggestions [del.icio.us!] [digg it!] [reddit!]
View previous topic :: View next topic  
Author Message
csalsa

Trooper
Trooper


Joined: May 27, 2003
Posts: 28
Location: Australia

PostPosted: Wed May 28, 2003 1:50 am    Post subject: Blocking by website references?
Reply with quote

A lot of spam emails that I have received contain images. Perhaps this is because images cannot be scanned for words and thus filtered by programs like MW?

I have read in the forums how email headers contain misleading information making filtering hard for MW. What about filtering of HTML email that load images based on the web site from where the image is loaded?

This is the same idea as advertisement blocking add-ons for browsers where images are not loaded based on the website address.

So a solution would be to have a second blacklist, a website blacklist. Emails loading images, or with web addresses, that match an entry on the website blacklist would be considered to be spam.

Would this work?

Back to top
View users profile Send private message
Al

Captain
Captain


Joined: May 08, 2002
Posts: 331
Location: Australia

PostPosted: Wed May 28, 2003 2:12 am    Post subject:
Reply with quote

Couldn't you just create a filter that looks for the web-site in the "body"?


_________________
Al
Back to top
View users profile Send private message Send email Visit posters website MSN Messenger
csalsa

Trooper
Trooper


Joined: May 27, 2003
Posts: 28
Location: Australia

PostPosted: Wed May 28, 2003 2:32 am    Post subject:
Reply with quote

Absolutely. I had thought of using this approach. However, the list of websites will grow, simular to the email address blacklist. I would think the number of sites you would want to check against would be greater than the filter could handle?

Being inbuilt, I could have drag-and-drop web addresses (simular to email addresses) and it would be easier to maintain (add, delete, etc).

Back to top
View users profile Send private message
Al

Captain
Captain


Joined: May 08, 2002
Posts: 331
Location: Australia

PostPosted: Wed May 28, 2003 2:56 am    Post subject:
Reply with quote

I've given up on "Blacklisting". These days all I have is my [Friends] list and [Filters] (all set to [Delete]).

Haven't had any SPAM get through, but I do have to be careful to vett the items marked for [Delete], to make sure they don't contain *real* mail from people not yet added to my [Friends] list.

As you say everything else just grows and grows (and slows down MWP)


_________________
Al
Back to top
View users profile Send private message Send email Visit posters website MSN Messenger
csalsa

Trooper
Trooper


Joined: May 27, 2003
Posts: 28
Location: Australia

PostPosted: Wed May 28, 2003 3:20 am    Post subject:
Reply with quote

True. True.

I had just observed that my list of websites for advertisement blocking is much smaller than the MWP email blacklist. I thought it could be another approach for certain types of emails such as HTML emails.

These types of spam emails need a vaild website to load the images and for you to 'click-to' to buy a product/service or to register/unregister etc. And the 'return-path' and 'from' email address is a 'don't care'. Thus they can resend the email infinitum with different email addresses. The web site is the constant?

If the spammers remove the web addresses from the email, then they would have to have text to promote their product/service. As the text is part of the email, it can be filtered.

So hopefully it becomes 'damned if you do, damned if you don't'. However, I do not know if my premise is correct.

Back to top
View users profile Send private message
Display posts from previous:   
Post new topic   Reply to topic       All -> FavForums -> Product Suggestions All times are GMT
Page 1 of 1

 
Quick Reply:
Username: 

Quote the last message
Attach signature (signatures can be changed in profile)
 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Powered by phpBB © 2001 phpBB Group
spacer spacer