vb.org Archive
Page 4 of 4 « First 23 4
Show 40 post(s) from this thread on one page

vb.org Archive (https://vborg.vbsupport.ru/index.php)
-   vBulletin 3.5 Add-ons (https://vborg.vbsupport.ru/forumdisplay.php?f=113)
-   -   Contacts Spam Filter (https://vborg.vbsupport.ru/showthread.php?t=119663)

y2ksw 01-03-2007 06:51 PM
I've updated the spam filter. If this is still not working, I will need the complete email attached as a zip file, since pasting into a code/quote window may be changed by vbulletin. :knockedout:

Mecho 04-18-2007 05:57 PM
awesome . thanks for make this . spammers made me crazyyyyyyyyyyyyyyyyyy .

anyway i have new Smart spammer that i think he know about ur hack , lol . here is the email with full header details :

Quote:
X-Apparently-To: mechondak@yahoo.com via 216.252.110.64; Wed, 18 Apr 2007 07:17:33 -0700
X-Originating-IP: [64.233.162.235]
Return-Path: <mechodownload+caf_=mechondak=yahoo.com@gmail.co m>
Authentication-Results: mta361.mail.re4.yahoo.com from=mail.ru; domainkeys=neutral (no sig)
Received: from 64.233.162.235 (EHLO nz-out-0506.google.com) (64.233.162.235) by mta361.mail.re4.yahoo.com with SMTP; Wed, 18 Apr 2007 07:17:32 -0700
Received: by nz-out-0506.google.com with SMTP id m7so145975nzf for <mechondak@yahoo.com>; Wed, 18 Apr 2007 07:17:32 -0700 (PDT)
Received: by 10.114.14.1 with SMTP id 1mr234459wan.1176905852209; Wed, 18 Apr 2007 07:17:32 -0700 (PDT)
X-Forwarded-To: mechondak@yahoo.com
X-Forwarded-For: mechodownload@gmail.com mechondak@yahoo.com
Delivered-To: mechodownload@gmail.com
Received: by 10.114.124.9 with SMTP id w9cs469410wac; Wed, 18 Apr 2007 07:17:31 -0700 (PDT)
Received: by 10.90.28.12 with SMTP id b12mr366994agb.1176905851105; Wed, 18 Apr 2007 07:17:31 -0700 (PDT)
Return-Path: <nobody@host2.mechoddl.com>
Received: from host2.mechoddl.com ([69.72.208.192]) by mx.google.com with ESMTP id 3si868799aga.2007.04.18.07.17.30; Wed, 18 Apr 2007 07:17:31 -0700 (PDT)
Received-SPF: neutral (google.com: 69.72.208.192 is neither permitted nor denied by best guess record for domain of nobody@host2.mechoddl.com)
Received: from nobody by host2.mechoddl.com with local (Exim 4.63) (envelope-from <nobody@host2.mechoddl.com>) id 1HeAz6-0003U4-MK for mechodownload@gmail.com; Wed, 18 Apr 2007 10:18:12 -0400
To: mechodownload@gmail.com
Subject: Mecho Download Contact Us Form - Site Feedback
From: "drugstore @ Mecho Download" <shimushin_eduard@mail.ru> Add to Address BookAdd to Address Book Add Mobile Alert
Message-ID: <200704181409.0f998b891621@www.mechodownload.com >
MIME-Version: 1.0
Content-Type: text/plain; charset="windows-1256"
Content-Transfer-Encoding: 8bit
X-Priority: 3
X-Mailer: vBulletin Mail via PHP
Date: Wed, 18 Apr 2007 10:18:12 -0400
X-AntiAbuse: This header was added to track abuse, please include it with any abuse report
X-AntiAbuse: Primary Hostname - host2.mechoddl.com
X-AntiAbuse: Original Domain - gmail.com
X-AntiAbuse: Originator/Caller UID/GID - [99 99] / [47 12]
X-AntiAbuse: Sender Address Domain - host2.mechoddl.com
X-Source:
X-Source-Args:
X-Source-Dir:
Content-Length: 544


The following message was sent to you via the Mecho Download Contact Us
form by drugstore.

--------------------------------

Ordered Amaryl from this site and it was sooo much cheaper than buying
it at CVS.. terrific!
They have great products, great prices and fast customer service, what
more can you ask for? Will shop with them always. They're my pick!
David, USA
TheDrugMarket
can u kill this one too !!!!! :p

y2ksw 04-19-2007 12:07 AM
Well I think there is not much I can do - but in any case, spam with only one link is not interesting to spammers, so they stop on their own :)

Mecho 04-19-2007 10:47 AM
ok , Thanks anyway for make this great hack :)

adwade 04-24-2007 01:19 PM
I tripped across this old message in some archives and thought it was a unique addition to the choices on the Contact Us page that may offer some more defense:

Undertoad Jul 3rd 2006, 4:20pm
Here's how I deal with it, via "Contact Us Options":


Even with image verification off, this simple method worked perfectly.

No spammer ever figured out that they should change the default setting. Every legitimate contact us user changed the setting.

Gmail's spam filtering picked up only the spam messages. Problem solved.

above taken from http://www.vbulletin.com/forum/archi.../t-188024.html

y2ksw 04-24-2007 02:15 PM
This is the most intelligent solution I've ever seen :)

Compliments!!!


All times are GMT. The time now is 08:34 AM.
Page 4 of 4 « First 23 4
Show 40 post(s) from this thread on one page

Powered by vBulletin® Version 3.8.12 by vBS
Copyright ©2000 - 2025, vBulletin Solutions Inc.

X vBulletin 3.8.12 by vBS Debug Information
  • Page Generation 0.01059 seconds
  • Memory Usage 1,735KB
  • Queries Executed 10 (?)
More Information
Template Usage:
  • (1)ad_footer_end
  • (1)ad_footer_start
  • (1)ad_header_end
  • (1)ad_header_logo
  • (1)ad_navbar_below
  • (1)bbcode_quote_printable
  • (1)footer
  • (1)gobutton
  • (1)header
  • (1)headinclude
  • (6)option
  • (1)pagenav
  • (1)pagenav_curpage
  • (2)pagenav_pagelink
  • (1)post_thanks_navbar_search
  • (1)printthread
  • (6)printthreadbit
  • (1)spacer_close
  • (1)spacer_open 
Phrase Groups Available:
  • global
  • postbit
  • showthread
Included Files:
  • ./printthread.php
  • ./global.php
  • ./includes/init.php
  • ./includes/class_core.php
  • ./includes/config.php
  • ./includes/functions.php
  • ./includes/class_hook.php
  • ./includes/modsystem_functions.php
  • ./includes/class_bbcode_alt.php
  • ./includes/class_bbcode.php
  • ./includes/functions_bigthree.php 
Hooks Called:
  • init_startup
  • init_startup_session_setup_start
  • init_startup_session_setup_complete
  • cache_permissions
  • fetch_threadinfo_query
  • fetch_threadinfo
  • fetch_foruminfo
  • style_fetch
  • cache_templates
  • global_start
  • parse_templates
  • global_setup_complete
  • printthread_start
  • pagenav_page
  • pagenav_complete
  • bbcode_fetch_tags
  • bbcode_create
  • bbcode_parse_start
  • bbcode_parse_complete_precache
  • bbcode_parse_complete
  • printthread_post
  • printthread_complete