Author Topic: (No Sender) spam  (Read 749 times)

Offline jchuzi

  • TS Addict
  • *****
  • Posts: 3094
    • View Profile
(No Sender) spam
« on: September 05, 2023, 12:19:30 PM »
I am getting inundated with spam that says (No Sender) in the From column. I tried setting a rule to delete them (listing (No Sender) but that hasn't worked. It's only a minor annoyance because it takes a fraction of a second to press Delete, but I want to vaporize these emails. They purport to show links to Harbor Freight, energy conservation, free gifts, you name it.

Suggestions?
Jon

macOS 11.7.10, iMac Retina 5K 27-inch, late 2014, 3.5 GHz Intel Core i5, 1 TB fusion drive, 16 GB RAM, Epson SureColor P700, Photoshop CC, Lightroom CC, MS Office 365

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Re: (No Sender) spam
« Reply #1 on: September 05, 2023, 02:31:57 PM »
I am assuming you are not using SpamSieve? :wallbash:

You might try this:
  • Select one of those messages
  • Use the Mail->View->Message->Raw Source
  • Copy the Return-Path text
  • Place that in your Rule

For example, one of my recent "Harbor Frieght" messages has "richard25@info.marketingpro.cx" in that path.
The actual "From:" that shows in Mail is:
Code: [Select]
From: Harbor Freight Department <Richard258@info.marketingpro.cx >Notice that there is a non-printing character after the "cx " and that the email address has a capitol letter "R". This may confuse Mail or other email SPAM catching apps. Email addresses are not allowed to have capitol letters and I doubt non-printing characters (return/tab/newline/etc.).

If you are allowing third-party images (Prefs->Viewing->Load remote content) you will see a link with this bit of code:
Code: [Select]
<a href="http://linoleumspins.com/4CFaKX709WQYl73xsgddroztk ... 44/376738X9">
      <img src="https:// ... ></a>
That is where your data will be sent (even if nothing more than your email is alive), should you click the presented link.

At any rate, I highly recommend SpamSieve exactly because it looks at lots of stuff in the header, the text and for <a href...></a> links. But if you want to make Rules, you can try looking for these kinds of things. Unfortunately, these bits of text may be completely unique to each SPAM. The more rules you have, the longer it will take to be checked.  :doh:
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes:

Offline Larry

  • Super Poster
  • ***
  • Posts: 412
    • View Profile
    • http://www.catchfriday.com
Re: (No Sender) spam
« Reply #2 on: September 06, 2023, 02:40:47 AM »
I use hushmail for my post, this allows me to label as spam and block it.
Hushmail for Personal Use - hushmail.com
I've used hushmail since 2014

Offline jchuzi

  • TS Addict
  • *****
  • Posts: 3094
    • View Profile
Re: (No Sender) spam
« Reply #3 on: September 06, 2023, 12:34:31 PM »
Thanks for the suggestion, Jim, but it didn't work. Fortunately, it takes virtually no time to simply hit Delete.
Jon

macOS 11.7.10, iMac Retina 5K 27-inch, late 2014, 3.5 GHz Intel Core i5, 1 TB fusion drive, 16 GB RAM, Epson SureColor P700, Photoshop CC, Lightroom CC, MS Office 365

Offline Xairbusdriver

  • Administrator
  • TS Addict
  • *****
  • Posts: 26388
  • 27" iMac (mid-17), Big Sur, Mac mini, Catalina
    • View Profile
    • Mid-South Weather
Re: (No Sender) spam
« Reply #4 on: September 07, 2023, 10:38:47 AM »
Yes, but a good SPAM app will see and learn what you tell it by hitting "Train as Spam" or some such command. :Look: And the more you train it the better it gets (SpamSieve, anyway). :thumbup:
THERE ARE TWO TYPES OF COUNTRIES
Those that use metric = #1 Measurement system
And the United States = The Banana system
CAUTION! Childhood vaccinations cause adults! :yes: