WebProWorld Part of WebProNews.com
Page One Link To Us Edit Profile Private Messages Archives FAQ RSS Feeds  
 

Go Back   WebProWorld > Webmaster, IT and Security Discussion > IT Discussion Forum
Subscribe to the Newsletter FREE!


Register FAQ Members List Calendar Arcade Chatbox Mark Forums Read

IT Discussion Forum Having IT issues? Got IT questions? Who doesn't? If you can't get your Apache to work with your MySQL or your php is choking on your ODBC... Let's see if we can help you come up with some ideas.

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 10-31-2005, 06:27 PM
WebProWorld Member
 

Join Date: Sep 2005
Posts: 25
gamefowlworld RepRank 0
Default Email Spammer Is Sending Me Mail Under My Own Name. What to

For about 2 weeks now I get 3 or 4 spam emails a day from this person (machine) or whatever.

I cant mark them as spam because they are somehow sending it using my own email address and if I did that I wouldnt get the emails I do want.

Meaning its comeing from myScreenName@dang.com and is being deliverd to mysScreenName@dang.com

Any Idea what I can do to get rid of whoever this is?

How are they sending them to me using my very own email adress?

Thanks
Reply With Quote
  #2 (permalink)  
Old 10-31-2005, 09:18 PM
jmoran77's Avatar
WebProWorld Member
 

Join Date: May 2004
Location: Southern California
Posts: 67
jmoran77 RepRank 0
Default

Do you have a php sendmail active on your forum or website? Spammers can use this sometimes
Reply With Quote
  #3 (permalink)  
Old 10-31-2005, 09:54 PM
WebProWorld Member
 

Join Date: Sep 2005
Posts: 25
gamefowlworld RepRank 0
Default

Yes but its I think its all in the back end set up! Its only used to send out activaton links when persons register.

Any Idea On how to track who this is doing ths so I can stop it?
Reply With Quote
  #4 (permalink)  
Old 11-02-2005, 04:21 AM
MuNKyonline's Avatar
WebProWorld Veteran
 

Join Date: Jun 2004
Location: Suffolk, England
Posts: 790
MuNKyonline RepRank 2
Default

I'm getting this on my own website too. I've written my own php mail script for the contact form so I presume they are using that.

The e-mails are random though. And are more like hjfdhjkh@munkyonline.co.uk and the subject will be jkldjfklsfjkl too!

It seems to have died down a bit now but I was getting at least four e-mails a day!

I think someone said that people use this to somehow gain access through frontpage extensions on the server. I dont have this as my website is hosted on a Linux server so thats probably why they're starting to give up?!
Reply With Quote
  #5 (permalink)  
Old 11-03-2005, 01:34 AM
jmoran77's Avatar
WebProWorld Member
 

Join Date: May 2004
Location: Southern California
Posts: 67
jmoran77 RepRank 0
Default

Maybe you can find the IP address in your log file and block the IP
Reply With Quote
  #6 (permalink)  
Old 03-13-2006, 03:28 AM
WebProWorld New Member
 

Join Date: Nov 2003
Location: US
Posts: 12
shibili RepRank 0
Default This is by using a mass mail software

Anyone can do this by using a mass mailing software. But since spammers usually send things in bulk, I think they will have some script only for this. I have an article posted on my blog about spamming. Do check it out!
__________________
Shibili
Visit my blog
Reply With Quote
  #7 (permalink)  
Old 03-15-2006, 06:29 PM
WebProWorld Pro
 

Join Date: Oct 2003
Location: Alberta, Canada
Posts: 223
weegillis RepRank 1
Default

You might not be able to stop it coming into your inbox, but you can filter it once it's there. Just send any mail 'From %a' AND 'To %a' to the Junk Mail Folder or delete it straight away.

You might be able to trace it back to the originating IP in the Received From entries in the header. It should be the one closest to the Subject line. A quick scan of your server logs might yield a match. If so, review the page(s) served to that IP and eee if any of them give up a clue as to how your address was harvested.

If you haven't already, you may also wish to script all the private information on your site so it can only be opened in a browser, or at least make it that much harder to harvest. Well, from your site, anyway.

We wouldn't have spam if people would quit opening it. How badly must one need mail to be lured into the stuff floating around these days? How many people have their Send Receipt turned on, and worse, the reading pane?

These things invariably make one form of server call or another, usually by multiple avenues--Receipt, Dispostition, images. The best we can do is make sure we have the correct settings to disable these items. Sadly, on the grand scale few people do.

Your firewall can help you here. If stuff is getting through or being blocked, you can track down the IP traffic to and from your mail client. Anything you didn't click on, happened by itself. Now you know what to block, or restrict in some way.

With the proper safeguards in place, you can then set about creating a Trusted list that you can elevate to higher permission levels. Again, your firewall will be the key here, since that's where the real trust is established.

Then there is the last, and the best--the worst, actually--slyware on your machine. A good firewall, (like Outpost Firewall Pro, for instance) will put a complete stop to this, but if you have weak defenses private information may be leaving your machine without your knowledge.

Routine scanning for both malicious and innocuous software and tracking are a must in today's world. I can think of no better place to establish a first and last line of defense than the firewall. Track down those undesirable IPs and let the FW filter them, with no other program running in the background but an antivirus. The firewall's database is always going to be your best authority because it is right up to the second, and it is immediately user configurable.

Other measures may be the online filtering that comes with your mail account. You may be able to filter your mail before it arrives at your mail client. And as mentioned above, your mail provider may have an alternate SMTP port.
__________________
Volunteer for something in your community today!
Reply With Quote
  #8 (permalink)  
Old 03-16-2006, 05:11 AM
Easywebdev's Avatar
WebProWorld Veteran
 

Join Date: Apr 2004
Location: Donegal, Ireland.
Posts: 322
Easywebdev RepRank 1
Default

You need to look at the full header of the email.
Are they just spoofing the from email field or are they actually sending via your forum.

If it is just that the from field is your email and the reply to is a different email then filter out the reply to email.

If its coming from your server then you have an open mail relay and a lot of problems to fix.
Reply With Quote
  #9 (permalink)  
Old 03-22-2006, 08:14 AM
WebProWorld New Member
 

Join Date: Mar 2006
Location: World - Europe - France - Alsace - Strasbourg
Posts: 2
IcaruS RepRank 0
Default avoiding spam using Postfix smtpd - first steps

Hi,

In case you can access and configure your smtpd, i advice you using postfix, wich integrates native checks fighting well spam, especially strict rfc-compliant check.
A sample spam configuration can be found at http://www.revolsys.fr/postfix_nospam_sample.txt

cya :)
__________________
##################################
I think we shoud upgrade from
Solaris 10 to SunOS 3.5

IcaruS
##################################
Reply With Quote
Reply

  WebProWorld > Webmaster, IT and Security Discussion > IT Discussion Forum
Tags: , , , , , ,



Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Search Engine Optimization by vBSEO 3.2.0