...... TECH TOOLS - AUGUST 2004

......

BLOCKING SPAM
Spam email is designed to get you to click something. If they can get you to browse to their product’s site, the spammer makes money. To get you to do this some masquerade as legitimate emails from a company you would normally trust, others leave vague misleading information and links that don’t appear to be links. Only after you have clicked one of these links do you find that you have been tricked. Your machine now has more browsers open than you can possibly close and dozens of tracking cookies have probably been installed. Worst of all - the spammers now know that they sent an email to a “live” email address making it more valuable as it can be sold as a verified email address.

Identifying who’s sending spam and preventing it can be nearly impossible. Just about anyone can send email and claim that they are “bob1234@aol.com”. Spammers are well aware of current legislation and know just how far they can push things and how to cover their tracks.

Verifying Emails
Wouldn’t it be great if, every time an email came in, the sender’s intent could be verified? Some anti-spam programs can do that. When an email comes in from an unknown sender… say bob1234@aol.com, the email is held up in a queue while a another email is sent back to bob1234@aol.com asking for verification. If bob1234@aol.com is a made up name, no one ever receives a request to verify so their email is never released to you. When valid senders get the email verification request, they click on the link, fill out a few fields, and automatically their email(s) are released to you. Additionally, they are added to your safe senders list so from now on so their subsequent emails come through to you.

Can your ISP Help?
ISP providers would like to shut down spam. It causes bandwidth constraints, angry users, server outages and security issues. To make it even harder for email administrators, they have to make sure that no matter what spam emails they drop, that personal and solicited emails make it through the system unadulterated. A single inaccurately dropped email can cost an ISP provider many man hours in tracking down and retrieving. That is assuming their system affords them this ability, which many don’t.

At the very least you should be aware of what your ISP is doing to help prevent SPAM. Ask they what their policy, find out if they use Reverse DNS lookups. Check if they subscribe to an Internet based “Black List”. Also make sure they have a “White List” option. Your ISP maybe able to help with spam but it is unlikely they will be your only solution.

Spamming Tricks
Many spam emails contain hidden catch phrases or links. To find these, read through the spam for the word “unsubscribe” or something similar. All you have to do to make the spam active is to click that link - which could trigger a barrage of spam that can run into the hundreds. Most unsubscribe links are bogus - either the page doesn’t work or it doesn't exist. In either case, by clicking on the link, you've just verified that your email is live. Even if spammers do remove you from their list, nothing prevents them from selling your now VERIFIED email address to hundreds of other spammers before doing so.

One technique that spammers use with linked pictures is called “Beaconing”. A beacon is a link to a picture or file that is created in such a way it identifies the person looking at their picture. If you read the email you are triggering those beacons.

Another thing you might see on the page is a lot of misspelled words. These misspelled words are attempts at circumventing “content filters”. Something else you might see throughout the spam is random numbers and letters. These help fool math based content filters.

One of the things spammers feed on is information, the newer, more dynamic it is, the more they like it. Have you ever posted a question on a message board? Ever asked for assistance where your question was posted on a web page? If you have there is a good chance your email is sitting out there waiting on the internet to be read by a spam bot. A spam bot is a program that programmatically looks at WebPages for email addresses, its logs them and keeps on going looking for more. Only post your private email address publicly if it is the only option.

Even Your Friends Can Hurt You
If your friends are sending out emails with a long list of copies (cc:) to everyone, they are a spammers best friend. Chain letters are a common method for spammers to inherit hundreds of email addresses. If you receive a chain letter, the damage is already done, it means no matter what you do with the message, if a copy of it falls in to the malicious hands of a spammer, it will be hard to keep your mailbox spam free. So when a friend sends you a chain letter, make sure they know, by just replying privately to them, that they are giving out too much of your personal information.


Spam blocker Check List
If you want to use a spam filter, at a minimum you should be looking for "Beacon Blocking" (also known as tracking bugs) A Beacon is a portion of an email that, once viewed, reports back home that the email arrived and that you are a live email address.

Also check for “updateable spam definitions” that informs your anti-spam program of new spam messages and techniques.

The anti-spam programs that do best are the ones that are compatible with more email clients. (like Outlook, Outlook Express, Eudora, etc.) If a company backs an anti-spam non-profit organization, its usually top notch.

The most effective spam filters are ones that “learn” from your email. Where content filters fail, these “Bayesian” filters will succeed. Spammers have to find ways to get past email filters. They jumble up word order, they scramble words, and they add garbage text, hidden fonts, and even make letters out of pictures as well as all other kinds of nonsense to thoroughly confuse the filters. This technique does not work well against Bayesian filters because once it has learned what your proper emails look like, those scramble up ones are so completely different that they get dropped.

What Makes A Great Spam Blocker?
A perfect Spam Blocker doesn't exist, but here is a list of the attributes found in the best Spam filtering software.

  • Ease of Use - Is the product easy to install? Is it easy to setup the email filtering rules that you choose? Is it easy to use?
  • Effective filtering - Does the spam filtering software filter spam and yet allow valid emails to come into your inbox? How easy is it to customize sensitivity of spam filtering?
  • Email Processing Steps - Does the spam software allow you to easily retrieve your email? A good spam filter should not require you to perform an additional step to filter your email.
  • Allow/Blocking of Email - You should be able to specify what email you want to appear in your inbox. Does it allow you to block or allow email based on the senders email address, IP addresses, server or domain addresses, or country of origin.
  • Content Categories - Spam filters should include the capabilities to specify the allowing or blocking of spam with content categories. General categories might include financial, services, health, insurance, adult, games, gambling, etc. Categories allow you to easily identify and specify what should be allowed or blocked, especially if you don't know who the sender is.
  • Rule Creation - Does the spam filter allow you to easily define and customize certain rules? These rules might be in conjunction with allow/block lists or allow/block categories. Does the product allow you to easily incorporate a new rule once an allowed email is identified as spam?
  • Quarantine Area - A good spam filter should provide a quarantine area where all blocked email is stored. This allows you the opportunity to retrieve email that may have been inadvertently blocked. The quarantine area should not have to burden you with any additional email processing functions and should automatically clean itself with old unwanted emails.
  • Worst of the Spam - Sporn - How well does the email filter support the blocking of sporn or spammed pornography? Does it allow you to block all pornography and/or adult themes? Does it allow you to view quarantined email without viewing any of the pornography?
  • < <  BACK TO TOOLS INDEX

    ©2000 - 2006 Skylinewebs - All rights reserved - Comments to Webmistress
    The material on this site is protected by US Copyright Laws and cannot be used, nor links created to, any page on this site with out the express written consent of Skylinewebs.