SpamBots Prevail...

[20pictures]

Like many of us, I have been plagued with spam that has bypassed both my BT & Mcaffee filters.

I installed Tectite Formail & set up the AT_MANGLE function but this did not stop them. I have upgraded to using an INI file for email addresses & still they get through. Intriguingly, they all originate from gmail.com.

http://castingimage.com/forms/form_contact.htm

I am reluctant to introduce CAPTCHA to the form, as it is not an autoresponder & I personally find it a difficult process to deal with. I am concerned with losing clients.

I have read there are other alternatives: reverse captcha & something to do with permanent+blank fields. Can anyone advise how I may improve security without image verification?

Thanks,

John

[20pictures]

...the reason I made this posting was because I could not find the relevant information at the time. Now I think I have:

http://www.tectite.com/fmdoc/attack_...se_captcha.php

[russellr]

Hi,

AT_MANGLE and INI files are about protecting your email address from spambots.

INI files are perfect at this.

However, once a spammer has your email address, they can use it until you delete it.

FormMail cannot affect email spam sent directly to your email address because it's not involved in that process. It also can't remove your email address from spammers once they have it.

There are 2 vectors for spam (ways spammers send you spam):

1. Directly to your email address. FormMail cannot help with this.
2. Via your form processor. FormMail can do a whole lot to stop this.

As mentioned, FormMail has features to protect your email address, but that doesn't mean the spammers haven't already got it or they've got it some other way unrelated to your form.

So, the first thing you need to do is to figure out which vector the spam is coming from.

If it looks like a form submission then, it's probably vector #2. Otherwise, it's probably vector #1.

Your only option with #1 is to delete your email address and start with a new one that you protect very carefully in the future (or use a spam filter, which you've already found doesn't work, and has the problem of blocking some valid emails).

With #2, FormMail has a lot of automated features that can detect and block spam. Some of these are enabled by default and protecting you to some extent now.

You should try to analyze the type of spam (what it looks like) and use the appropriate FormMail features to block it.

Check out these features, which need to be configured to work:

• http://www.tectite.com/fmdoc/attack_detection_junk.php
• http://www.tectite.com/fmdoc/attack_..._many_urls.php
• http://www.tectite.com/fmdoc/attack_...url_fields.php
• http://www.tectite.com/fmdoc/attack_...se_captcha.php

[20pictures]

Thank you. This is exactly what I needed to know.

As most of the spam contains two URLs I have tried the softer ATTACK_DETECTION_MANY_URLS configuration. This seems to have worked ...for now!

[Freelancer151]

Greetings:

I realize this thread is old and I only hope you may be able to help?

As a website designer I too face the problems associated with SPAMMERS! Although Akismet screens out 90% of spam through the Wordpress platform, I have yet to find a reliable resource for webmail applications.

Just looking for a reliable and yet affordable solution...

~Scott

[20pictures]

Since my last posting, I have kept up to date with the latest Tectite releases & upgraded other spam filters. I have a McAfee filter & one provided by my ISP. Both of these are set above the default settings.

Unfortunately, the level of spam continues to increase. I now even permit my ISP filter to delete them on the server but I still get about 200 on some days!

Changing email addresses it not an option if you have spent years building up a client & prospect list who contact you via that address.

I have yet to install a CAPTCHA element to my forms (as I have always felt this deters genuine responses) but as these become a more common feature of the internet ...I think my clients are ready for the upgrade!

If any spammers are reading this: I am not interested in your Viagra, dodgy watches or p**** enlargement offers...