Google Groups no longer supports new Usenet posts or subscriptions. Historical content remains viewable.
Dismiss

Korean Spam

1 view
Skip to first unread message

colin

unread,
Dec 28, 2001, 10:54:12 AM12/28/01
to
I am getting a lot of Spam from Korea. Is there any way of blocking e
mails with Chinese / Korean characters, or even blocking everything
from Korea!
I have set up over 200! separate rules and have a blocked senders list
of over 400! and still the crap keeps coming. PS the rules do not seem
to work in Outlok Express, is that normal?

HELP

Colin

Kev Page

unread,
Dec 28, 2001, 11:38:48 AM12/28/01
to
Ihad exactly the same problem,I set up message rules telling OE to delete
from the server emails with "!,£,$,%,&," etc in the from and subject.
Hey presto,it worked!
"colin" <co...@cgp.ndo.co.uk> wrote in message
news:50184566.01122...@posting.google.com...

Art Kopp

unread,
Dec 28, 2001, 1:06:09 PM12/28/01
to

I use the DOS and WIN ASCII Extended Character Sets to filter out
several commonly occuring characters in both the From and Subject
fields. This has been effective in blocking virtually all Asian spam.

For DOS examples, hold down the Alt key while typing the decimal code
on the numeric key pad as:

253 ²
225 ß
168 ¿

For WIN examples, hold down the Alt key and type 0 first as:

0188 ¼
0228 ä
0163 £

You can find the ASCII sets here:

http://www.evergreen.edu/user/serv_res/research/bsi/people/dawn/program/ascii_ext-pc.htm

Art

Nick FitzGerald

unread,
Dec 28, 2001, 5:11:17 PM12/28/01
to
"colin" <co...@cgp.ndo.co.uk> wrote:

Aside from the rough and ready "filter an arbitrary set of characters
that is unlikely to, but possibly may, show up in ordinary Email
Subject: headers" approach, *and* if you know you will never need to
receive Emails from Korea, most of the Korean spam I've received of
late could be filtered by blocking messages with a

charset="ks_c_5601-1987"

argument in their MIME headers (if your Email program can filter on
arbitrary strings in the message's full headers).


--
Nick FitzGerald


AcmeWebmaster

unread,
Dec 29, 2001, 5:01:49 PM12/29/01
to
We got so tired of it we now filter it from our mail servers. Now none of
it gets through to us or our customers.

Dave
--
Operations Manager,
ACME Enterprises Hosting & Design
www.acme-ent.net


"colin" <co...@cgp.ndo.co.uk> wrote in message
news:50184566.01122...@posting.google.com...

Art Kopp

unread,
Dec 29, 2001, 5:38:37 PM12/29/01
to
On Sat, 29 Dec 2001 13:01:49 -0900, "AcmeWebmaster"
<webm...@acme-ent.net> wrote:

>We got so tired of it we now filter it from our mail servers. Now none of
>it gets through to us or our customers.

Good for you!!!

Art

Charles Johnston

unread,
Dec 29, 2001, 8:22:50 PM12/29/01
to
Recently installed SpamKiller v2.85 and after a few tweaks for mailing
lists etc. it has stopped _all_ the email spam I once got. It is very
effective and easy to setup. It also was the best of all the spam
stopper apps I tried and as well looks like a professional grade
application....

http://www.spamkiller.com

--


73 / DX

Charles T Johnston
Prescott, Arizona - U.S.A.
cha...@ab7sl.com

AB7SL - Ham Radio Pages
Official W9INN Antennas Page
www.ab7sl.com


Darkhorse

unread,
Dec 29, 2001, 10:56:43 PM12/29/01
to

"Charles Johnston" <ct...@cableone.net> wrote in message
news:3c2e...@news.bnb-lp.com...

Just like all the other spam removal tools it's no good on HTTP accounts.

luckily my POP3 accounts haven't been spammed yet. :o)


Cari

unread,
Dec 30, 2001, 1:30:22 AM12/30/01
to

"Charles Johnston" <ct...@cableone.net> wrote in message
news:3c2e...@news.bnb-lp.com...
> Recently installed SpamKiller v2.85 and after a few tweaks for mailing
> lists etc. it has stopped _all_ the email spam I once got. It is very
> effective and easy to setup. It also was the best of all the spam
> stopper apps I tried and as well looks like a professional grade
> application....
>
> http://www.spamkiller.com
>
Thanks Charles... I'm going to try it. I'm getting totally fed up of all
the spam I get... unfortunately my main newsgroup host won't let us use fake
or altered email addresses. 37 spams today. I seem to spend more time
forwarding them to ab...@xxx.com than I do actually reading 'real' mail!

Cari
www.coribright.com

Ron & Ree

unread,
Dec 30, 2001, 2:06:52 PM12/30/01
to
$30 seems like a lot to spend for something you can do yourself. I'm sure
it provides a nice interface but is it really necessary?
A very easy thing to do is anytime you get a spam add it to your blocked
senders list.
This can get a little tiresome so I set up a filter for mail that is not
specifically addressed to me.
In Outlook Express go to Tools, Message Rules, Mail and click the New
button.
In the conditions box select Where the to line contains people, then in the
bottom box click the contains people and set it to your address, click add
then click the Options button and select Message does not contain people
below.
In the Actions box select Move it to the specified folder and click in the
bottom box and set the folder to Deleted Items. Then name the rule
something like spam filter or name filter.

This catches about 80% of the spam for me but it also catches a few mail
lists I subscribe to. So I set up another rule where I select Where the
from line contains and list those items and select to stop processing rules.
Make sure this is before the spam rule so it gets processed first! (select
the rule and use the move up and move down buttons)


Adam Leinss

unread,
Dec 30, 2001, 7:04:49 PM12/30/01
to
On Sat, 29 Dec 2001 18:22:50 -0700, "Charles Johnston"
<ct...@cableone.net> wrote:

>Recently installed SpamKiller v2.85 and after a few tweaks for mailing
>lists etc. it has stopped _all_ the email spam I once got. It is very
>effective and easy to setup. It also was the best of all the spam
>stopper apps I tried and as well looks like a professional grade
>application....
>
>http://www.spamkiller.com

Yeah, I use mail washer which does the same thing as this program. I
setup a filter to block *@*.kr and *@*.jp and it also blocks MAPS RBL
blacklisted addresses. I find the program to be a bit buggy (Grid out
of index and it locks up when I get a message, but restarting the
program fixes that), but it's worth the spam it stops.

Adam
--
Computer help via Internet Relay Chat (IRC). irc.sandnet.net | #pchelp
One-on-one IBM/Windows 9x/NT help and techie chat.

Adam Leinss

unread,
Dec 30, 2001, 7:04:49 PM12/30/01
to
On Sat, 29 Dec 2001 18:22:50 -0700, "Charles Johnston"
<ct...@cableone.net> wrote:

>Recently installed SpamKiller v2.85 and after a few tweaks for mailing
>lists etc. it has stopped _all_ the email spam I once got. It is very
>effective and easy to setup. It also was the best of all the spam
>stopper apps I tried and as well looks like a professional grade
>application....
>
>http://www.spamkiller.com

Yeah, I use mail washer which does the same thing as this program. I


setup a filter to block *@*.kr and *@*.jp and it also blocks MAPS RBL
blacklisted addresses. I find the program to be a bit buggy (Grid out
of index and it locks up when I get a message, but restarting the
program fixes that), but it's worth the spam it stops.

Adam
--
Computer help via Internet Relay Chat (IRC). irc.sandnet.net | #pchelp
One-on-one IBM/Windows 9x/NT help and techie chat.

========= WAS CANCELLED BY =======:
Path: news.sol.net!spool1-nwblwi.newsops.execpc.com!newsfeeds.sol.net!newspump.sol.net!newsfeed.direct.ca!look.ca!newsfeed1.earthlink.net!newsfeed.earthlink.net!uunet!lax.uu.net!news.navix.net!u-n-c-a-n-c-e-l-l-e-r
From: Adam Leinss <ale...@mindless.com>
Newsgroups: opera.test,comp.lang.c,alt.comp.virus
Subject: cmsg cancel <2sav2u4906osg05gi...@4ax.com>
Control: cancel <2sav2u4906osg05gi...@4ax.com>
Date: Mon, 31 Dec 2001 05:49:06 GMT
Organization: Navix Internet Subscribers
Lines: 2
Message-ID: <cancel.2sav2u4906osg...@4ax.com>
NNTP-Posting-Host: 166.102.15.34
X-Trace: iac5.navix.net 1009786403 23285 166.102.15.34 (31 Dec 2001 08:13:23 GMT)
X-Complaints-To: ab...@navix.net
NNTP-Posting-Date: 31 Dec 2001 08:13:23 GMT
X-No-Archive: yes
Comment: Anarchy! Fuck You!
X-Commentary: I love NewsAgent 1.10, Sandblaster Build 74 (19 March 1999) and the Polaris Cancel Engine V. 6.1
X-Unacanc3l: yes

This message was cancelled from within Mozilla...not

Charles Johnston

unread,
Dec 29, 2001, 8:22:50 PM12/29/01
to
Recently installed SpamKiller v2.85 and after a few tweaks for mailing
lists etc. it has stopped _all_ the email spam I once got. It is very
effective and easy to setup. It also was the best of all the spam
stopper apps I tried and as well looks like a professional grade
application....

http://www.spamkiller.com

--


73 / DX

Charles T Johnston
Prescott, Arizona - U.S.A.
cha...@ab7sl.com

AB7SL - Ham Radio Pages
Official W9INN Antennas Page
www.ab7sl.com

========= WAS CANCELLED BY =======:
Path: news.sol.net!spool1-nwblwi.newsops.execpc.com!newsfeeds.sol.net!news-out.visi.com!hermes.visi.com!uunet!ash.uu.net!sac.uu.net!lax.uu.net!news.navix.net!u-n-c-a-n-c-e-l-l-e-r
From: "Charles Johnston" <ct...@cableone.net>
Newsgroups: opera.test,comp.lang.c,alt.comp.virus
Subject: cmsg cancel <3c2e...@news.bnb-lp.com>
Control: cancel <3c2e...@news.bnb-lp.com>
Date: Mon, 31 Dec 2001 04:57:13 GMT


Organization: Navix Internet Subscribers
Lines: 2

Message-ID: <cancel....@news.bnb-lp.com>
NNTP-Posting-Host: 166.102.15.34
X-Trace: iac5.navix.net 1009786647 23285 166.102.15.34 (31 Dec 2001 08:17:27 GMT)
X-Complaints-To: ab...@navix.net
NNTP-Posting-Date: 31 Dec 2001 08:17:27 GMT

Darkhorse

unread,
Dec 29, 2001, 10:56:43 PM12/29/01
to

"Charles Johnston" <ct...@cableone.net> wrote in message
news:3c2e...@news.bnb-lp.com...

Just like all the other spam removal tools it's no good on HTTP accounts.

luckily my POP3 accounts haven't been spammed yet. :o)

========= WAS CANCELLED BY =======:
Path: news.sol.net!spool1-nwblwi.newsops.execpc.com!newsfeeds.sol.net!news-out.visi.com!hermes.visi.com!uunet!ash.uu.net!sac.uu.net!lax.uu.net!news.navix.net!u-n-c-a-n-c-e-l-l-e-r
From: "Darkhorse" <Darkho...@hotmail.com>
Newsgroups: opera.test,comp.lang.c,alt.comp.virus
Subject: cmsg cancel <a0m3a2$kvs$1...@newsg4.svr.pol.co.uk>
Control: cancel <a0m3a2$kvs$1...@newsg4.svr.pol.co.uk>
Date: Mon, 31 Dec 2001 05:16:06 GMT


Organization: Navix Internet Subscribers
Lines: 2

Message-ID: <cancel.a0m3a2$kvs$1...@newsg4.svr.pol.co.uk>
NNTP-Posting-Host: 166.102.15.34
X-Trace: iac5.navix.net 1009786623 23285 166.102.15.34 (31 Dec 2001 08:17:03 GMT)
X-Complaints-To: ab...@navix.net
NNTP-Posting-Date: 31 Dec 2001 08:17:03 GMT

Ron & Ree

unread,
Dec 30, 2001, 2:06:52 PM12/30/01
to

========= WAS CANCELLED BY =======:
Path: news.sol.net!spool1-nwblwi.newsops.execpc.com!newsfeeds.sol.net!news-out.visi.com!hermes.visi.com!uunet!ash.uu.net!sac.uu.net!lax.uu.net!news.navix.net!u-n-c-a-n-c-e-l-l-e-r
From: "Ron & Ree" <ron...@ERASEpacbell.net>
Newsgroups: opera.test,comp.lang.c,alt.comp.virus
Subject: cmsg cancel <gBJX7.18206$GP.58...@newssvr14.news.prodigy.com>
Control: cancel <gBJX7.18206$GP.58...@newssvr14.news.prodigy.com>
Date: Mon, 31 Dec 2001 07:01:15 GMT


Organization: Navix Internet Subscribers
Lines: 2

Message-ID: <cancel.gBJX7.18206$GP.58...@newssvr14.news.prodigy.com>
NNTP-Posting-Host: 166.102.15.34
X-Trace: iac5.navix.net 1009786465 23285 166.102.15.34 (31 Dec 2001 08:14:25 GMT)
X-Complaints-To: ab...@navix.net
NNTP-Posting-Date: 31 Dec 2001 08:14:25 GMT
X-Auth-User: 514316551/27983da7b13aaa18
X-Post-Time: Mon, 31 Dec 2001 04:35:23 GMT
X-Problems-To: ab...@prodigy.com


X-No-Archive: yes
Comment: Anarchy! Fuck You!
X-Commentary: I love NewsAgent 1.10, Sandblaster Build 74 (19 March 1999) and the Polaris Cancel Engine V. 6.1
X-Unacanc3l: yes

<remainder snipped>

Cari

unread,
Dec 30, 2001, 1:30:22 AM12/30/01
to

"Charles Johnston" <ct...@cableone.net> wrote in message
news:3c2e...@news.bnb-lp.com...
> Recently installed SpamKiller v2.85 and after a few tweaks for mailing
> lists etc. it has stopped _all_ the email spam I once got. It is very
> effective and easy to setup. It also was the best of all the spam
> stopper apps I tried and as well looks like a professional grade
> application....
>
> http://www.spamkiller.com
>
Thanks Charles... I'm going to try it. I'm getting totally fed up of all
the spam I get... unfortunately my main newsgroup host won't let us use fake
or altered email addresses. 37 spams today. I seem to spend more time
forwarding them to ab...@xxx.com than I do actually reading 'real' mail!

Cari
www.coribright.com

========= WAS CANCELLED BY =======:
Path: news.sol.net!spool1-nwblwi.newsops.execpc.com!newsfeeds.sol.net!news-out.visi.com!hermes.visi.com!uunet!ash.uu.net!sac.uu.net!lax.uu.net!news.navix.net!u-n-c-a-n-c-e-l-l-e-r
From: "Cari" <Britw...@coribright.com>
Newsgroups: opera.test,comp.lang.c,alt.comp.virus
Subject: cmsg cancel <uMJowtPkBHA.2392@tkmsftngp07>
Control: cancel <uMJowtPkBHA.2392@tkmsftngp07>
Date: Mon, 31 Dec 2001 05:41:01 GMT


Organization: Navix Internet Subscribers
Lines: 2

Message-ID: <cancel.uMJowtPkBHA.2392@tkmsftngp07>
NNTP-Posting-Host: 166.102.15.34
X-Trace: iac5.navix.net 1009786597 23285 166.102.15.34 (31 Dec 2001 08:16:38 GMT)
X-Complaints-To: ab...@navix.net
NNTP-Posting-Date: 31 Dec 2001 08:16:38 GMT


X-No-Archive: yes
Comment: Anarchy! Fuck You!
X-Commentary: I love NewsAgent 1.10, Sandblaster Build 74 (19 March 1999) and the Polaris Cancel Engine V. 6.1
X-Unacanc3l: yes

This message was cancelled from within Mozilla...not

Trevor O Sullivan

unread,
Jan 1, 2002, 11:01:40 PM1/1/02
to
I keep getting spam from an email address that keeps changing its address
line. Its full of Korean characters and everytime the Korean install font
box comes up. I keep adding the addreses to blocked senders but the next day
it comes back via a different email

Any advice
Trev

--
www.geocities.com/trevordcu/index.html
"Before you abuse,criticise or accuse walk a mile in my shoes"
Elvis 1970
Be An Organ Donor Give The Gift Of Life


Ben

unread,
Jan 2, 2002, 1:32:47 AM1/2/02
to
Wow, the same thing has been happening to me for quite some time now. No
advice here -- sorry; I've been reporting all of it to any domains listed in
the extended headers, but to no avail. ::sigh::

Ben


"Trevor O Sullivan" <elvisp...@iol.ie> wrote in message
news:ECvY7.4803$_3.1...@news.iol.ie...

Boyd Williston

unread,
Jan 2, 2002, 1:52:00 AM1/2/02
to
"Trevor O Sullivan" <elvisp...@iol.ie> wrote in
news:ECvY7.4803$_3.1...@news.iol.ie:

Could you block the domain? That's what I did to eliminate junk from
Taiwan.

Trevor O Sullivan

unread,
Jan 2, 2002, 7:53:27 PM1/2/02
to
What exactly do I do to set up a message rule that blocks any email from .kr
or .jp

I mean what do i put in the description rule part

Trev

This Korean spam is doing my flaming head in :)


--
www.geocities.com/trevordcu/index.html
"Before you abuse,criticise or accuse walk a mile in my shoes"
Elvis 1970
Be An Organ Donor Give The Gift Of Life

Boyd Williston <boydwillist...@yahoo.com> wrote in message
news:Xns918A8D0ED914bo...@130.133.1.4...

Heather Figueroa

unread,
Jan 2, 2002, 11:46:54 PM1/2/02
to
I knew I had this 'tidbit' somewhere about the foreign characters box
you are getting.......this is from one of the MS news
groups......someone was getting the Japanese characters........

> If OE receives mail with charset=iso-2022-jp OE will try to download
the file(s) needed to view Japanese characters.
>
> You can turn this off by going to Tools | Options | Read |
International and checking the box for "Use default encoding for all
incoming messages".

Hope this helps. (And for the description, I should imagine you just
put in ".jp" or ".kr"........without the quotes and with the period.

Heather

"Trevor O Sullivan" <elvisp...@iol.ie> wrote in message
news:bYNY7.4922$_3.1...@news.iol.ie...

Boyd Williston

unread,
Jan 3, 2002, 2:18:21 AM1/3/02
to
"Trevor O Sullivan" <elvisp...@iol.ie> wrote in
news:bYNY7.4922$_3.1...@news.iol.ie:

Set up a rule that automatically deletes if the sender's address contains
either '.kr' or '.jp'; that may actually be two rules, one for each
string.

0 new messages