Welcome to WebmasterWorld Guest from 220.127.116.11
Forum Moderators: incrediBILL
What is the best way?
1. Just unlink all email addresses, so those who are REALLY interested in emailing you have to copy or paste into their email program rather than just clicking. This seems to be a sensible wolution at first thought, very easy to implement.
2. USe js, (not sure exactly how to do that) disadvantages.. some non-js enabled set ups wont work with it, and make such users frustrated and think your page is broke!
3. Direct all hyperlinked email addresses to our mail form, or even a new form (system) where the email address appears in the "send to" field when they get there?
Which of these do you suggest, or are there any other quick and dirty solutions?
- I get about 30 spam emails per day. I HATE SPAM. If they can no longer harvest my email address from the site how long do you suppose it will it take for my address to leave those lists?
- Anyone figured out a way to kill the Whois email harvesters? Sure I could use a different address but I still have to check mail to that address.
As long as that email address is valid, you'll receive the spam. If you are using an alias that captures all unknown email to @yourdomain.com, then you will receive it until you remove the alias. I've always enjoyed using that feature of our email program. Problem is, the spam continues because the emails are not rejected.
kapow, I still get spam addressed to an email that I've had since 1995. I changed the name@ in 1998 (old forwarding to new). To this date, I receive email at that old address and its all spam.
I have the MAILTO @ me@mywebsite in my HTML code. But on the same page I have some text that gives visitors a special "code word" to place in the subject line of the message they want to send to me. Then I set up a filter in my mail system to delete all messages that do not contain the code word. So far, no junk e-mail has gotten through (and I don't care how much goes to the trash), and I still seem to get as much mail as I ever did from visitors to my site.
Someone suggested using a list of rubbish email addresses to 'spoil' the spam list. I don't think this will work because those spam bots detect and delete 'bounce backs' (non-working email addresses). They obviously handle millions of addresses so a few thousand rubbish addresses will be quickly dropped from their spam list.
IF you have access to the server itself (at least your ISP has to allow the use of .htaccess on your virtual server) you can try to ban email harvesters altogether from reaching your site.
Have a look at this thread: [webmasterworld.com...]
The early postings are a bit trial and error, but towards the last third it gets very in depth.
The basic idea is to catch those bots (email harvesters and site downloaders) by the "User Agent" and then automatically redirect them either to an error message or to a "honeypot" which poises their database with thousands of fake addresses.
A warning however: this is not a drop-in-and-forget method! Virtually every day a new email harvester comes out, and already some of them have ways of disguising their user-agent-line. So keeping your .htaccess up to date is a constant task.
On the good side - plugging in this .htaccess-banning gets rid of maybe 80% of all spambots at once - the amount of spam to come goes down significantly.
If you're lucky enough to run your own mailserver under your own control, you can add a second line of defense: the use of realtime blacklists (somtimes also called realtime blocklist or RBL's) in your mailserver allows you to block potential spam when the spammer tries to deliver it to you. On EACH incoming email, the mail-server checks at least one of these RBL's. If the senders IP-address tests positive on this list, email delivery is instantly cancelled even BEFORE the mail-data is transferred to your server. There's a multitude of RBL's out there. Our server checks EACH incoming message against 5 different RBL's. Some of our users - including myself - post-check their messages again against other RBL's. I - for example - have all messages coming from Russia/China/Korea/Malaysia etc. tagged with the prefix "**SPAM**". This second (and third) line of defense makes life a lot esier!
Someone else suggested instead of using bogus or generated email adresses to use actual spammer's addresses! This person - I guess it was the author of "SugarPlum" - suggested to collect all the adresses from EACH Spam you get and use those on a spambot-page on your site.
If you're lucky enough to run your own mailserver under your own control...
I do run my own mailserver, and have even implemented a system where I and my customers can specify different sets of blacklists per domain and/or mail account. Believe it or not, but some people actually need to receive mail from Russia. ;)
My escalation plan (which I haven't tried yet, so I'm not even sure it would work) is to hide the mailto: behind a POST request. That should be pretty hard for spambots to penetrate. Anyone tried that? Do you think it's a good idea?
Once an email have been harvested once, it usually ends up in a huge database, it's too late. Encrypted emails is to prevent most spam bots to get new ones. It wont stop spammers who bought your address, along with millions of others, on a 19.95 $ CD...
OK, maybe 99 % was exagerated, but 90 % seems realistic. I make most efforts at getting visitors. Once they are in, (easy go) why would I force them into mistery meat gymnastics to write us?
We just want to filter spam out here. Customer enquiries shall not suffer from it.
sure - some users do need to receive mail from Russia and China. That's the reason why our second line of defense only blacklists mail from known spammer domains and open relays. However, my personal third line of defense is to block mail from Russia and China. Maybe our guys in international sales need to receive mail from Russia and China. But I'm pretty sure nobody there has any reason to write ME. And if so, I still have the mails which are catched in the third line of defense only tagged - not rejected.
The system as we have it implemented: first line of defense - block known SpamBots from harvesting our adresses, second line of defense - reject email from known spammer domains, and the (optional) third line of defense - sieving even harsher through the mail has brought down overall spam coverage tremendously, and has brought down my personal amount of spam from 30-40 daily to 2-3 daily.
Not bad, eh?
It would be a simple experiment; I've just never tried it. Anyone else? As far as I know there is no regular way of hiding a fragment of a page from an honest search engine, but that would be a great feature:
. Perhaps Google would care to implement this?
<noindex>No Index Content Here</noindex>
I knew I remembered seeing something about that somewhere.
You know, if I could eliminate all the incoming spam, I may be left with nothing to read! ;)
<noindex>Mary Jones</noindex>. Perhaps Google would care to implement this?
We had a similar thread about this.
One solution was the soft hyphen: Ma­ry Jo­nes
Unfortunately the soft hyphen shows on NetScape.
Another solution was to use very small punctuation: Ma<font size="1">.</font>ry Jo<font size="1">.</font>nes
I do get a good number of 404 errors across four different sites. Can't associate the 404s with browsers but do know that on machines I've used the encoded address works on IE 4 thru 6 and NS 4 thru 6. But the number of 404s is many more than can be associated with visitors using something like Opera. Might be spiders, might be 'transient' browser errors or some 'undocumented feature.' Think spiders most likely.
And, duh! On one site that I use Frontpage for I copied the encoded address, slapped it into the footer, saved it, published the 1,500 pages and thought all was okay. Guess what? Just viewed source and there's mailto:blahblahblah sitting there plain as day.
Re-encoded and repasted it into the footer and this time I noticed that FP does its?helpful? bit by converting all of it right back to plaintext. If you use FP be sure to use "Insert...Advanced...HTML."
poeple can use the web-forms and if they neither handle the web-form nor the typing in of an email-address they can call me!