[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Notice: in file [ROOT]/includes/session.php on line 2208: Array to string conversion
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4688: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4690: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4691: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
[phpBB Debug] PHP Warning: in file [ROOT]/includes/functions.php on line 4692: Cannot modify header information - headers already sent by (output started at [ROOT]/includes/functions.php:3823)
Poco Forums • View topic - IP address filtering

IP address filtering

Scripting questions and ideas

Moderators: Eric, Tomas, robin, Michael

Postby FieldDir121 » Mon Aug 13, 2007 9:30 am

The latest is that my ISP seems to relay a very few messages internally such that my ISP's ip address is the most recent in the e-mail header. This has caused a few non-spam messages to be trapped by the ip address filter when they were not actually spam.

Since my position is that false positives should not be tolerated, not even one, and it has happened at least twice, I am disabling the ip address filter. Ip address filtering might still work for you but my ISP has recently changed something that makes it unreliable for me.

I recently implemented a new filter for specific subject text. I did this to trap the high number of e-mails with pdf attachments, usually stock tips. The file extension filter didn't seem to be able to stop them. Filtering using a text file containing text from subject lines has work well, at least for now (until they read this).

In the last four days the subject filter has trapped 46 e-mails out of 422 (all spam) while the spam address filter only caught 17. The SpamEntire filter caught 157 so losing the ip address filter will not result in too many additional messages getting through. A little more diligence with the other filters will probably make up the difference.

Scott
FieldDir121
Resident Poster
 
Posts: 149
Joined: Mon Aug 02, 2004 5:18 pm

Postby FieldDir121 » Thu Aug 16, 2007 12:07 pm

After some thought it occurred to me that the false positives were occurring because I used ip addresses from one ISP to filter incoming messages from another ISP.

Since 90% of the spam comes in from one ISP I stopped adding ip addresses of incoming e-mail from other ISPs. The filter seems to be reliable again.

I had to do something since my new subject filter hit rate dropped to only one in three days. Whoever they are they got smarter.

Scott
FieldDir121
Resident Poster
 
Posts: 149
Joined: Mon Aug 02, 2004 5:18 pm

Postby tribble » Thu Aug 16, 2007 12:35 pm

I still use your IP filter and it still works. I have about 3500 addresses from spammers and have no performance issues.

I'm glad to see you're also staying on top of it :-)
tribble
Poco Enthusiast
 
Posts: 430
Joined: Wed Jul 28, 2004 8:55 am

Postby FieldDir121 » Thu Aug 16, 2007 1:27 pm

I am glad that someone is using it and that it is working well for you.

Did you add buttons to add and remove addresses from the list?
I have:
1) AdrAdr
4) RemoveAdr
5) LocateAdr
9) OpenStats

I have 38407 adddresses and frequently get address matches above 10,000. There are currently two in the list above 30,000.

The SpamEntire filter still catches the most but it also requires the most manual attention. It is amazing how many ways they can spell viagra and other spam words.

Scott
FieldDir121
Resident Poster
 
Posts: 149
Joined: Mon Aug 02, 2004 5:18 pm

Postby FieldDir121 » Tue Jun 17, 2008 7:39 am

I used the filters I wrote for a couple of years. Lots of spam still got through, 50 to 100 per day.

Eventually I had my work e-mail forwarded to a gmail account I created just for that purpose. My personal accounts get very little spam since their e-mail addresses aren't posted on any web sites.

I read my e-mail from the gmail account. They eliminate 99 out of 100 spam e-mails and I don't have to do anything. I don't run any filters.

Scott
FieldDir121
Resident Poster
 
Posts: 149
Joined: Mon Aug 02, 2004 5:18 pm

Postby tribble » Sat Sep 20, 2008 12:40 pm

Still using it after all these years...

Now-a-days though, it becomes the "final" filter. When all other filters are run with no action taken, this filter is fired, adds the I.P. address to the text file and moves the email. This forces me to take care of every good email and by default, anything that's left is bad. If I find it in the Spam I.P. address folder, I decide what action to take (it's spam and leave it or it's good so add a filter). I previously had over 3500 addresses, now I have about 350.

Using K-9, Barca Bayesian filters, filters for each good email (in my address book, specific emails that are routed to specific folders etc) my Junk Mail Filter statistics in Barca are at 96.99%. It only took me four years to get there!! :-)
tribble
Poco Enthusiast
 
Posts: 430
Joined: Wed Jul 28, 2004 8:55 am

Postby FieldDir121 » Sat Sep 20, 2008 12:44 pm

Glad they are still working for you.

I wasn't willing to spend any more time improving my other filters. The gmail solution works for both my personal and work accounts,

Scott
FieldDir121
Resident Poster
 
Posts: 149
Joined: Mon Aug 02, 2004 5:18 pm

Previous

Return to PocoScript Help and How-To

Who is online

Users browsing this forum: No registered users and 3 guests

cron