How Do You Fool Spam Bots? 87
ThisIsAnExampleAccou asks: "I am currently researching Spam Bots, and the various methods by which they collect addresses. While doing my research, I have started to notice the various ways that people post their email addresses to fool spam filters (i.e. bob@hottroutmail.com - go fishing to mail me) What clever ways have you seen/done to fool spambots while still letting people know how to get in contact with you?"
Add both From: and Sender: headers (Score:3, Informative)
From: you@yourdomain
Sender: blockme@yourdomain
You'll gets tons of spam to both addresses (not neccessarily the same spam, unfortunately - that would make filtering real easy). You run SpamAssassin (or similar) to filter mail to your real address, and you run "spamassassin -r" or "razor-report" to handle mails sent to your spamtrap address (making the Razor service, and in turn, SpamAssassin, more efficient at identifying these spams).
Better yet, if your MTA is Exim, use SA-Exim [merlins.org] to add teergrubing [iks-jena.de] functionality to SpamAssassin. Oh, the satisfaction!
My solution... (Score:4, Informative)
The file is forbidden by the robots.txt file. I don't think that it surprises anybody that it still has gotten spambotted.
Shoulders of Giants... (Score:3, Informative)
Re:My solution... (Score:1, Informative)
Re:Block spammers via DNS (Score:2, Informative)
www.realplayer.com@mydomain.com
www.gatorbuddy
www.reallydoesn'tfollowitspriva
It INSTANTLY identifies where the email was scarfed from.
This also works for snail mail also. I usually use the store/companies name as my firstname. For example, I wanted a Black Diamond catalog. The companies initials are bdel. For my name I gave:
Bdel Coles
It was humorous watching the junk mail arrive sent to bdel. Easily tell whether or not your address was sold/rented.