Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | ... | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20
3560 posts

Uber Geek


  #2026744 1-Jun-2018 09:45
Send private message

tdgeek:

 

Oblivian:

 

OK So last night, knowing we get a few in the early AM, I tested my own theory and put a custom filter for moving to the spam folder for the usual suspect domains being spoofed.

 

What happens on syncing this morning... Oh look. Moved 'Contact Gifts' without intervention at 827am.

 

Simple filter on user end, can't get it right server end for everyone. Go figure

 

 

Understand that, but if the user filter manages .tk, that means at the server end they are taking the view that every email from .tk is spam. Or am I missing something?

 

 

Except, my rules are based on the header 'Received' as slai.win and cloudreddit.info text being present. Not the TLD extension....

 

 

 

Not spam is a thumbs up icon on menu when message selected, or same location as 'mark as spam' but 'mark not spam' if I recall


450 posts

Ultimate Geek


  #2026764 1-Jun-2018 10:21
Send private message

tdgeek:

 

I have just noticed that as from about 15 May, my Spam folder is being used, so I can now see what SMX has filtered out as spam. Trouble is, it includes MightyApe, Netflix, Dominos and the High School that I get emails from

 

earlier I had spam back to January all put there by me. I now see it is trimmed back to 15 May so good to see someone is doing something. Earlier posts show the management was transferred from SMS to XTRA so would be interested to know who is doing what?

 

 

 
 
 
 


1138 posts

Uber Geek

Lifetime subscriber

  #2026774 1-Jun-2018 10:42
Send private message

tdgeek:

 

I have just noticed that as from about 15 May, my Spam folder is being used, so I can now see what SMX has filtered out as spam. Trouble is, it includes MightyApe, Netflix, Dominos and the High School that I get emails from

 

Yes same problem here with real Netflix being filtered on my registered email address AND my non registered email address so it is a blanket filtering.





iMac 27" (late 2013), Airport Time Capsule + Airport Express, iPhone7, iPad6, iPad Mini2

 

Panasonic Blu-ray PVR DMR-BWT835 + Panasonic Viera TH-L50E6Z, Chromecast Ultra, Yamaha AVR RX-V1085


450 posts

Ultimate Geek


  #2026873 1-Jun-2018 12:40
Send private message

GEOMAX:

 

tdgeek:

 

I have just noticed that as from about 15 May, my Spam folder is being used, so I can now see what SMX has filtered out as spam. Trouble is, it includes MightyApe, Netflix, Dominos and the High School that I get emails from

 

earlier I had spam back to January all put there by me. I now see it is trimmed back to 15 May so good to see someone is doing something. Earlier posts show the management was transferred from SMS to XTRA so would be interested to know who is doing what?

 

 

correction. I now have email from registered bulk senders in my spam folder.Looks like work in progress ?

 

 

450 posts

Ultimate Geek


  #2026989 1-Jun-2018 15:59
Send private message

GEOMAX:

 

tdgeek:

 

I have just noticed that as from about 15 May, my Spam folder is being used, so I can now see what SMX has filtered out as spam. Trouble is, it includes MightyApe, Netflix, Dominos and the High School that I get emails from

 

earlier I had spam back to January all put there by me. I now see it is trimmed back to 15 May so good to see someone is doing something. Earlier posts show the management was transferred from SMS to XTRA so would be interested to know who is doing what?

 

 

correction. I now have email from registered bulk senders in my spam folder.Looks like work in progress ?

 

 

450 posts

Ultimate Geek


  #2027004 1-Jun-2018 16:14
Send private message

just had an interesting conversation with an ex vodafone email customer telling me his experience in the months before announcing closure and the reason for closure. look at this link. https://www.vodafone.co.nz/email/  

 

note inability to manage spam among reasons.

 

 

3560 posts

Uber Geek


  #2027044 1-Jun-2018 16:40
Send private message

Spoke too soon about working filter.

Need to check source data when on a PC but burst of 4 at lunchtime

That vf thing was a given. One of the press releases basically said when google can do a better job for free and less resources why bother throwing money at staff and CPU

 
 
 
 


60 posts

Master Geek


  #2027082 1-Jun-2018 17:42
Send private message

I'm not sure if this has already been mentioned, but noticed a new one (for me) in the received headers, two arriving from "profitlimited[dot]me"


450 posts

Ultimate Geek


  #2027488 2-Jun-2018 13:20
Send private message

lisati:

 

I'm not sure if this has already been mentioned, but noticed a new one (for me) in the received headers, two arriving from "profitlimited[dot]me"

 

yes I also see they have moved also  to a different ip address range shown as in Romania .I have looked up the domain names used  in the NZ register example contactnz.co.nz is not valid! I thought that would not be possible.

 

 

19070 posts

Uber Geek

Trusted

  #2027498 2-Jun-2018 13:39
Send private message

GEOMAX:

 

lisati:

 

I'm not sure if this has already been mentioned, but noticed a new one (for me) in the received headers, two arriving from "profitlimited[dot]me"

 

yes I also see they have moved also  to a different ip address range shown as in Romania .I have looked up the domain names used  in the NZ register example contactnz.co.nz is not valid! I thought that would not be possible.

 

 

 

Yeah, I will be contacting my local high school who sent a monthly report for our girl. I'll ask if they use any Romania services!! :-)  But the good thing is, I can now see whats filtered, as since SMX game on stream, we never saw that, so no ability to manage false positives. I still cannot locate the Not Spam button


450 posts

Ultimate Geek


  #2027501 2-Jun-2018 13:56
One person supports this post
Send private message

tdgeek:

 

GEOMAX:

 

lisati:

 

I'm not sure if this has already been mentioned, but noticed a new one (for me) in the received headers, two arriving from "profitlimited[dot]me"

 

yes I also see they have moved also  to a different ip address range shown as in Romania .I have looked up the domain names used  in the NZ register example contactnz.co.nz is not valid! I thought that would not be possible.

 

 

 

Yeah, I will be contacting my local high school who sent a monthly report for our girl. I'll ask if they use any Romania services!! :-)  But the good thing is, I can now see whats filtered, as since SMX game on stream, we never saw that, so no ability to manage false positives. I still cannot locate the Not Spam button

 

if you are on webmail open an email in spam. You will see a sign like thumbs up. It says not spam and moves it to your in box.

 

 

733 posts

Ultimate Geek

Trusted

  #2027551 2-Jun-2018 17:41
One person supports this post
Send private message

Oblivian:

tdgeek:

 

Ive been on Xtra (Yahoo) since Aug 2007. I know as I was involved. Spam issues. Mark them, sorted. Not saying that SMX could have done better, but spam is normal. Mark them. 

 

 

Incase it was missed earlier - I don't need to be educated how to deal with them or belittled to suggest otherwise, nor am I the one claiming financial losses in doing so. 

 

What I am continuing to do is make others aware of incase it helps them in the crudshow of a seemingly simplistic fix yet hard to do journey - hell, every other forum thread is a moan about CGA or phone spam or non cheap broadband plans. So no compelling reason not to do the same here.

 

I've been doing what they ask and flagging in webmail since the 'outbreak to some users' they claim began.

 

But there is a difference with flagging and soon learning filtering without user intervention, and delivering unmarked ones 4-10 a day and relying on users to continue to do so when there are slap in the face similarities weeks after they start.

 

You can't say spam is normal and marking is working well if users can create their own effective rules after delivery. And are rejected in sending them straight back through the same system doing the delivery. Sure, there are less. But 3 weeks on the same flags are being presented. I'd classify it normal if I saw at least _1_ example in the other 9 free service accounts, but there isn't any.

 

Sure, I4free  (yes its still alive) is the only one that does, but that's because it doesn't spend CPU time doing filtering for users and is basically a big abandoned hackathon box

 

And I'm not sure why people keep bringing longevity into it. There are people who have been with them a year getting these examples. Not a lot to do with length or how exposed your account is. When did they dish out Free start packs to install and jump on and sign up with their modem dialler software and later turn into jetstart 128K and supply CDs and suggest M1122s? Pre 2001?

 

Cause whenever it was, I signed up beforehand too.

 

 

 

 

Just because you can write a filter rule for your own mailbox and trust that it's not going to create a false-positive situation, doesn't mean that SMX (or anyone else) can as well. The systems they have in the back, including commercial vendors, have to be very careful not to craft a rule that's going to create a lot of false positives. So just keep reporting them. More submissions = more accuracy.

 

 

Changing anti-spam vendor, changing techniques, none are perfect so you're going to see different results. Just remember you can't imagine the noise you'd see without any filtering at all.




No signature to see here, move along...

733 posts

Ultimate Geek

Trusted

  #2027552 2-Jun-2018 17:42
Send private message

Oblivian:

And not sure if the timestamps are being spoofed too or its simply massive delivery delays. But like the one I just got now, have had a few backdated from current - this one from the 10th April! 0.o

 

But show in the box as current delivery time so *shrug*

 


Return-Path: <return@carreduz.club>
Received: from 10.23.40.104 ([10.23.30.4])
by 10.23.40.246 with LMTP id 0E2aFddsDlt2aQAAOkX3FQ
; Wed, 30 May 2018 09:20:23 +0000
Received: from 10.23.30.43 ([10.23.30.4])
by 10.23.40.104 with LMTP id eEoZFddsDlsYBAAAhZ2uYw
; Wed, 30 May 2018 09:20:23 +0000
Received: from xtra.co.nz ([10.23.30.4])
by 10.23.30.43 with LMTP id sKCgE9dsDluufgAAu83VPg
; Wed, 30 May 2018 09:20:23 +0000
Received: from carreduz.club ([195.201.147.195]) by mx.xtra.co.nz with ESMTP
id 5B0E6CCE-16EC0155@mta2308; Wed, 30 May 2018 09:20:14 +0000
MIME-version:1.0
Message-ID: <F3.9B.16484.ECC6E0B5@xtra.co.nz>
Content-type:text/html
To:m_jacks..<yesthatoldchessnut>@xtra.co.nz
from:WIN promotions <UIj2aLKaYkf7LMQRPe@Xing.com>
Subject:Amazing offer - enter and win a $500 Harvey Norman gift card!
Date:Mon, 9 Apr 2018 15:13:01 -0400

 

 

The 'Date' header is a header, meaning it is created by the MUA (software) that created the email in the first place. It can't be trusted as in any way reliable. Most common scenario is that the computer generating the spam has its local clock set wrong.

 

Second most common would be that the emails are created by a program or script that inserts a bollocks date: header and does't create a real one at all.

 

 

When receivers sort their mail by the date header, sometimes doing odd things actually helps gain viewers (and thus clicks).

 





No signature to see here, move along...

450 posts

Ultimate Geek


  #2027560 2-Jun-2018 17:58
Send private message

critisism is easy. offering a solution is harder. bring yourself up to date and offer something useful.

 

 

60 posts

Master Geek


  #2027564 2-Jun-2018 18:12
Send private message

BlakJak:

 

The 'Date' header is a header, meaning it is created by the MUA (software) that created the email in the first place. It can't be trusted as in any way reliable. Most common scenario is that the computer generating the spam has its local clock set wrong. Second most common would be that the emails are created by a program or script that inserts a bollocks date: header and does't create a real one at all. When receivers sort their mail by the date header, sometimes doing odd things actually helps gain viewers (and thus clicks).

 

Agreed, the Date header can be messed with, as is the case with most of the other information we can see in other headers. I've seen email with apparent time stamps that occur after the time I'm actually reading it.

 

About the only headers I can trust completely are the ones added by the software I'm using.


1 | ... | 3 | 4 | 5 | 6 | 7 | 8 | 9 | 10 | 11 | 12 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | 20
View this topic in a long page with up to 500 replies per page Create new topic



Twitter and LinkedIn »



Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

Withings launches three new devices to help monitor heart health from home
Posted 13-Feb-2020 20:05


Auckland start-up Yourcar matches new car buyers with dealerships
Posted 13-Feb-2020 18:05


School gardens go high tech to teach kids the importance of technology
Posted 13-Feb-2020 11:10


Malwarebytes finds Mac threats outpace Windows for the first time
Posted 13-Feb-2020 08:01


Amazon launches Echo Show 8 in Australia and New Zealand
Posted 8-Feb-2020 20:36


Vodafone New Zealand starts two year partnership with LetsPlay.Live
Posted 28-Jan-2020 11:24


Ring launches indoor-only security camera
Posted 23-Jan-2020 17:26


New report findings will help schools implement the digital technologies curriculum content
Posted 23-Jan-2020 17:25


N4L to upgrade & support wireless internet inside schools
Posted 23-Jan-2020 17:22


Netflix releases 21 Studio Ghibli works
Posted 22-Jan-2020 11:42


Vodafone integrates eSIM into device and wearable roadmap
Posted 17-Jan-2020 09:45


Do you need this camera app? Group investigates privacy implications
Posted 16-Jan-2020 03:30


JBL launches headphones range designed for gaming
Posted 13-Jan-2020 09:59


Withings introduces ScanWatch wearable combining ECG and sleep apnea detection
Posted 9-Jan-2020 18:34


NZ Police releases public app
Posted 8-Jan-2020 11:43



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Support Geekzone »

Our community of supporters help make Geekzone possible. Click the button below to join them.

Support Geezone on PressPatron



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.