Addressee Filter does not consider BCC

Antwort erstellen

Bestätigungscode
Gib den Code genau so ein, wie du ihn siehst; Groß- und Kleinschreibung wird nicht unterschieden.
Smilies
:D :) :( :o :shock: :? 8) :lol: :x :P :oops: :cry: :evil: :twisted: :roll: :wink: :!: :?: :idea: :arrow: :| :mrgreen:
BBCode ist eingeschaltet
[img] ist eingeschaltet
[flash] ist ausgeschaltet
[url] ist eingeschaltet
Smilies sind eingeschaltet
Die letzten Beiträge des Themas
   

Ansicht erweitern Die letzten Beiträge des Themas: Addressee Filter does not consider BCC

Beitrag von Chactory » 11. Jul 2006, 22:37

Thank you for mentioning this, Carolyn. :D
Chactory

Beitrag von carolyns » 11. Jul 2006, 19:49

Yes - Sorry but I needed to store the zip at that public upload site. Previously I kept it at my website but our ISP got sold and the new owners decided that websites were no provided for regular ISP clients.

I still have not transferred my web pages to Comcast, so I needed to use a public file host.

Carolyn

Beitrag von Chactory » 11. Jul 2006, 13:52

I just tried it out, it works, the downloaded file has the correct name and volume and contains no malware. I admit, it's a rather dirty and intransparent web site. :evil:

Beitrag von Gast » 11. Jul 2006, 02:24

I am trying to download the addressee filter from spamhilator, but the download link opens up a site where no download of the file can be found. Where can I download it?

Beitrag von carolyns » 13. Dez 2004, 22:50

Since the current changes seem to help Addressee Filter spot valid Bcc's, I am posting Addressee Filter 1.0.5 to the Spamihilator Plugins.

I have changed the help a bit since 1.0.4:

1. Simplified appearance
2. Installed help file to en and de folders so the help will appear for both languages (even though right now the help is only in English)
3. Added this note:

NOTE: In some Bcc mail there is no addressee in any of the headers. This can occur when you receive a Bcc from someone whose email address is on the same hosted domain as yours with a mailer that strips the destination address and delivers such mail locally. If you find that this applies to you, you should add a pattern match of your own hosted domain to your Spamihilator friends list (* for name and *@mydomain.com for email), so that these Bcc's will not be marked as spam by Addressee Filter.

Carolyn

Beitrag von Dieter » 11. Dez 2004, 10:42

Hi Carolyn,

I just got a BCC-Mail with my address in the "Envelope-To" field and it passed through your filter which signalized: not spam! :D

Regards
Dieter

Beitrag von Chactory » 11. Dez 2004, 03:14

Hello Carolyn,

who in fact does grok Windows? ;-) But it seems you really groked Frankfurt, marvelously. ;-)

It's a pity that this very interesting and basical filter won't work with BCC mails.

Perhaps your filter might develop more certainty in a combination with other conditions. E.g. "adressee missing in the TO AND CC field" AND "no sender declaration in the FROM AND REPLY TO fields", or something like this. Then it should filter only a small amount of spam, but zero false positives, which would be very important, imho.

The discussion has been conducted already before, see AN (Empfänger) filtern and Neues Plugin Mandatory-String-Filter BETAPHASE. Sorry, in german. :(

With friendly regards,
Chactory

Beitrag von Dieter » 11. Dez 2004, 00:59

carolyns hat geschrieben:Please test the new Addressee Filter and give me some feedback on it.

Thank you Carolyn, I just loaded the new version and I'm going to test it. :D

Regards
Dieter

Beitrag von carolyns » 10. Dez 2004, 21:49

DARN - I just got a Bcc with no received line "for" AND no Envelope-To.

However, after additional testing I believe this is because my hosted email .com is not a real pingable .com but just a hosted email .com, and the sender was on the same hosted email .com. He explained to me that the way our ISP does this is it tries to locate the destination normally and if it is undeliverable that way, it strips off the destination and tries to send it as local mail on the same hosted .com.

So this is not a problem for me since I have that hosted domain as a pattern match in my friends list.

In general, I think the new version works better and should help it Dieter and others get their Bcc's.

Please test the new Addressee Filter and give me some feedback on it. I have not posted it to this site yet but you can access it here:

http://www.chesco.com/~carolyn/filters/addresseefilter_1_0_4.exe

Let me know if it helps you Dieter.

Carolyn

Beitrag von carolyns » 10. Dez 2004, 19:40

I am trying a new version of Addressee Filter now.

In this one I only mark a message as spam if none of the following header lines contain any of your correct email addresses...

To
Cc
Envelope-To
Received

How does that sound (given the stated scope of Addressee Filter)?

I don't really know how to add/access/save a checkbox in a Windows program :shock: so no additional options yet. I am a former C64 and Amiga programmer and now an embedded programmer. I don't really grok Windows.

Carolyn

Beitrag von Dieter » 10. Dez 2004, 11:16

Hi Carolyn,

carolyns hat geschrieben:In the example mail you posted, would your correct email address have been in the regular Cc: (rather than a Bcc) ?

No, my address appeared only with "Envelope-To".

carolyns hat geschrieben:When you get a mail via Bcc do any of the Received lines include the word "for" followed by one of your correct email addresses?

Sometimes, it is obviously provider dependend.

carolyns hat geschrieben:I might make the Received check an option because people who receive few valid Bcc's and many spam ones to their correct email addresses may wish to have all non-friend Bcc's marked as spam (or high chance of spam) and add their friendly Bcc senders to their friends list.

That would be o.k.

carolyns hat geschrieben:I considered the possibility of an option checkbox to pass From-same-as-To-or-Cc messages, ...
If From always appeared above To, this would work and I could cache the From name and add it to my checks against To and CC. However, I looked at the source of several messages and found To before From in many of them.

I checked a lot of messages in my mail box (of course not all :wink: ), and I did not find any with a "To" before "From".

Regards
Dieter

Beitrag von carolyns » 10. Dez 2004, 01:55

Dieter -

In the example mail you posted, would your correct email address have been in the regular Cc: (rather than a Bcc) ?

When you get a mail via Bcc do any of the Received lines include the word "for" followed by one of your correct email addresses?

All of the blind CC's so far that I have examined in my mailbox, somewhere in one of the Received lines, includes the word "for" followed by one of my email addresses.

Keeping in mind that the purpose of Addressee filter is to screen out mail sent to incorrect addresses (such as when your correct email address is a hosted alias and you get spam to the underlying @isp.com address)..

Here is what I would like to do, if all (or most) Bcc'd messages, somewhere in a Received line, contain "for email-address":

If one of your correct email addresses does not appear in any To, Cc, Received line, mark the message as spam.

I might make the Received check an option because people who receive few valid Bcc's and many spam ones to their correct email addresses may wish to have all non-friend Bcc's marked as spam (or high chance of spam) and add their friendly Bcc senders to their friends list.

I considered the possibility of an option checkbox to pass From-same-as-To-or-Cc messages, BUT it would really screw up the program logic which scans the header in order, using the linked list of header fields. If From always appeared above To, this would work and I could cache the From name and add it to my checks against To and CC. However, I looked at the source of several messages and found To before From in many of them. This would mean all mail headers would have to be scanned twice if I implemented such an option.

Carolyn

Re: Addressee Filter does not filter Bcc

Beitrag von Dieter » 10. Dez 2004, 01:28

Bob Loeffler hat geschrieben:... and found that one of them does use the "for user@address" in the "Received" header field, but the other one doesn't. Maybe it's a setting on the mail server, so we can't assume that it will always be there.

"Envelope-To" is also set by the mail server. All mails I get via T-Online contain this entry. Another mail which I got via a different provider had my address in the "Received" field. I believe if these both entries are checked a good percentage of mails are affected.

Regards
Dieter

Beitrag von Dieter » 9. Dez 2004, 21:04

Hi Bob,

Bob Loeffler hat geschrieben:I see this all the time in Spam e-mails. :-(
I didn't deny this fact, but if the lot of false-positives cannot be lessened in some way I have to eliminate the addressee filter again or perhaps to move it behind the learning filter, I'm sorry, I'll not have another choice! :cry:

Regards
Dieter

Beitrag von Bob Loeffler » 9. Dez 2004, 20:25

Hi Dieter,

Of course, spammers could do the same thing and fill the "To"-address with the "From"-entry


I see this all the time in Spam e-mails. :-(

Regards,

Bob

Nach oben

cron

 industrious-southeast