Form mail security
 

I'm having trouble with spammers getting through my mail script. I've
heard of FormMail for php but I need a solution for ASP. Any
suggestions? I don't know how to stop these guys from using my forms
to spam.

Thanks!
John

Re: Form mail security
 

To add to this...

Would this help stop spammers using this?

If Request.ServerVariables("HTTP_REFERER") <>
"http://my_web_form.com/form.asp Then
Respose.Redirect "/SorryCharlie.asp"
Else
'do the form mail thing
End if





the other john wrote:
> I'm having trouble with spammers getting through my mail script. I've
> heard of FormMail for php but I need a solution for ASP. Any
> suggestions? I don't know how to stop these guys from using my forms
> to spam.
>
> Thanks!
> John

Re: Form mail security
 

No. Spammers can easily defeat this as well.

the other john wrote:
> To add to this...
>
> Would this help stop spammers using this?
>
> If Request.ServerVariables("HTTP_REFERER") <>
> "http://my_web_form.com/form.asp Then
> Respose.Redirect "/SorryCharlie.asp"
> Else
> 'do the form mail thing
> End if
>
>
>
>
>
> the other john wrote:
>> I'm having trouble with spammers getting through my mail script.
>> I've heard of FormMail for php but I need a solution for ASP. Any
>> suggestions? I don't know how to stop these guys from using my forms
>> to spam.
>>
>> Thanks!
>> John

--
Microsoft MVP -- ASP/ASP.NET
Please reply to the newsgroup. The email account listed in my From
header is my spam trap, so I don't check it very often. You will get a
quicker response by posting to the newsgroup.

Re: Form mail security
 

Ugh! Ok...any suggestions?

Thanks!


Bob Barrows [MVP] wrote:
> No. Spammers can easily defeat this as well.
>
> the other john wrote:
> > To add to this...
> >
> > Would this help stop spammers using this?
> >
> > If Request.ServerVariables("HTTP_REFERER") <>
> > "http://my_web_form.com/form.asp Then
> > Respose.Redirect "/SorryCharlie.asp"
> > Else
> > 'do the form mail thing
> > End if
> >
> >
> >
> >
> >
> > the other john wrote:
> >> I'm having trouble with spammers getting through my mail script.
> >> I've heard of FormMail for php but I need a solution for ASP. Any
> >> suggestions? I don't know how to stop these guys from using my forms
> >> to spam.
> >>
> >> Thanks!
> >> John
>
> --
> Microsoft MVP -- ASP/ASP.NET
> Please reply to the newsgroup. The email account listed in my From
> header is my spam trap, so I don't check it very often. You will get a
> quicker response by posting to the newsgroup.

Re: Form mail security
 

Maybe CAPTCHA?

the other john wrote:
> Ugh! Ok...any suggestions?
>
> Thanks!
>
>
> Bob Barrows [MVP] wrote:
>> No. Spammers can easily defeat this as well.
>>
>> the other john wrote:
>>> To add to this...
>>>
>>> Would this help stop spammers using this?
>>>
>>> If Request.ServerVariables("HTTP_REFERER") <>
>>> "http://my_web_form.com/form.asp Then
>>> Respose.Redirect "/SorryCharlie.asp"
>>> Else
>>> 'do the form mail thing
>>> End if
>>>
>>>
>>>
>>>
>>>
>>> the other john wrote:
>>>> I'm having trouble with spammers getting through my mail script.
>>>> I've heard of FormMail for php but I need a solution for ASP. Any
>>>> suggestions? I don't know how to stop these guys from using my
>>>> forms to spam.
>>>>
>>>> Thanks!
>>>> John
>>
>> --
>> Microsoft MVP -- ASP/ASP.NET
>> Please reply to the newsgroup. The email account listed in my From
>> header is my spam trap, so I don't check it very often. You will get
>> a quicker response by posting to the newsgroup.

--
Microsoft MVP -- ASP/ASP.NET
Please reply to the newsgroup. The email account listed in my From
header is my spam trap, so I don't check it very often. You will get a
quicker response by posting to the newsgroup.

Re: Form mail security
 

Oh COOL! Checkin' it out now....

I'll be a good poster and show what I'm doing. Can't vouch for it yet,
just looking but for those searching for the same solution....

http://www.u229.no/stuff/Captcha/





Bob Barrows [MVP] wrote:
> Maybe CAPTCHA?
>
> the other john wrote:
> > Ugh! Ok...any suggestions?
> >
> > Thanks!
> >
> >
> > Bob Barrows [MVP] wrote:
> >> No. Spammers can easily defeat this as well.
> >>
> >> the other john wrote:
> >>> To add to this...
> >>>
> >>> Would this help stop spammers using this?
> >>>
> >>> If Request.ServerVariables("HTTP_REFERER") <>
> >>> "http://my_web_form.com/form.asp Then
> >>> Respose.Redirect "/SorryCharlie.asp"
> >>> Else
> >>> 'do the form mail thing
> >>> End if
> >>>
> >>>
> >>>
> >>>
> >>>
> >>> the other john wrote:
> >>>> I'm having trouble with spammers getting through my mail script.
> >>>> I've heard of FormMail for php but I need a solution for ASP. Any
> >>>> suggestions? I don't know how to stop these guys from using my
> >>>> forms to spam.
> >>>>
> >>>> Thanks!
> >>>> John
> >>
> >> --
> >> Microsoft MVP -- ASP/ASP.NET
> >> Please reply to the newsgroup. The email account listed in my From
> >> header is my spam trap, so I don't check it very often. You will get
> >> a quicker response by posting to the newsgroup.
>
> --
> Microsoft MVP -- ASP/ASP.NET
> Please reply to the newsgroup. The email account listed in my From
> header is my spam trap, so I don't check it very often. You will get a
> quicker response by posting to the newsgroup.

Re: Form mail security
 

Incidentally this is what happened. What is it they are doing here?
Would limiting the number of characters in the suject field help? as
you can see they blocked their IP address. thanks!

From: don929@XXXXXXX.net don929@XXXXXXX.net
Date: Sun, 25 Jun 2006 00:01:11 -0400
To: xxxx@xxxxxxxxxxcom
Subject: don929@XXXXXXX.net


MESSAGE SENT FROM XXXXXXX.NET
MESSAGE FROM: don929@XXXXXXX.net
SENDERS EMAIL: don929@XXXXXXX.net
SENDERS IP ADDRESS: a
bcc: KenEvn@aol.com
Content-Type: multipart/alternative;
boundary=ddc847aa92d6c6e1cdc07252e628e393
Subject: to th frantic cheers iv th multichood

--ddc847aa92d6c6e1cdc07252e628e393
Content-Transfer-Encoding: base64
Content-Type: text/plain

YWxsIHRoZSBlbnF1aXJpZXMsIGFuZCBnaXZlbiBhbGwgdGhlIG FkdmljZSBzaGUgdGhvdWdodCBw
cm9wZXIsIGNhbGxlZCBvdXQgdG8gdGhlIHBhcnR5LCB3aG8gd2 VyZSBzdGlsbCBhbXVzaW5nIHRo
ZW1zZWx2ZXMgd2l0aCB0aGUgY29tbXVuaWNhdGl2ZSByaXNobW FuLCBhc3RhLCBiYXN0YSwgY29z
aSBjb21lLCB3ZSBoYXZlIGxvc3QgdGltZSBlbm91Z2ggaG9tcH NvbiwgZ2V0IG9uIHIuIGV4dGVy
LCBwdXQgdXAgdGhlIGhlYWQgb2YgdGhlIGJhcm91Y2hlIGF0

--ddc847aa92d6c6e1cdc07252e628e393--
..

SENDERS COMPUTER INFORMATION: don929@XXXXXXX.net
TIME SENT: 6/25/2006 12:01:11 AM

------MESSAGE IS AS FOLLOWS------

don929@XXXXXXX.net

------END MESSAGE------





the other john wrote:
> Oh COOL! Checkin' it out now....
>
> I'll be a good poster and show what I'm doing. Can't vouch for it yet,
> just looking but for those searching for the same solution....
>
> http://www.u229.no/stuff/Captcha/
>
>
>
>
>
> Bob Barrows [MVP] wrote:
> > Maybe CAPTCHA?
> >
> > the other john wrote:
> > > Ugh! Ok...any suggestions?
> > >
> > > Thanks!
> > >
> > >
> > > Bob Barrows [MVP] wrote:
> > >> No. Spammers can easily defeat this as well.
> > >>
> > >> the other john wrote:
> > >>> To add to this...
> > >>>
> > >>> Would this help stop spammers using this?
> > >>>
> > >>> If Request.ServerVariables("HTTP_REFERER") <>
> > >>> "http://my_web_form.com/form.asp Then
> > >>> Respose.Redirect "/SorryCharlie.asp"
> > >>> Else
> > >>> 'do the form mail thing
> > >>> End if
> > >>>
> > >>>
> > >>>
> > >>>
> > >>>
> > >>> the other john wrote:
> > >>>> I'm having trouble with spammers getting through my mail script.
> > >>>> I've heard of FormMail for php but I need a solution for ASP. Any
> > >>>> suggestions? I don't know how to stop these guys from using my
> > >>>> forms to spam.
> > >>>>
> > >>>> Thanks!
> > >>>> John
> > >>
> > >> --
> > >> Microsoft MVP -- ASP/ASP.NET
> > >> Please reply to the newsgroup. The email account listed in my From
> > >> header is my spam trap, so I don't check it very often. You will get
> > >> a quicker response by posting to the newsgroup.
> >
> > --
> > Microsoft MVP -- ASP/ASP.NET
> > Please reply to the newsgroup. The email account listed in my From
> > header is my spam trap, so I don't check it very often. You will get a
> > quicker response by posting to the newsgroup.

Re: Form mail security
 

the other john wrote on 26 jun 2006 in
microsoft.public.inetserver.asp.general:
> Would this help stop spammers using this?
>
> If Request.ServerVariables("HTTP_REFERER") <>
> "http://my_web_form.com/form.asp Then
> Respose.Redirect "/SorryCharlie.asp"
> Else
> 'do the form mail thing
> End if


Sure, your code will not do any mailing after "Respose".


--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)

Re: Form mail security
 

uh..yea....it was a typo.


can you tell what this guy was trying to do here by the way? I'd
appreciate it, thanks.


Evertjan. wrote:
> the other john wrote on 26 jun 2006 in
> microsoft.public.inetserver.asp.general:
> > Would this help stop spammers using this?
> >
> > If Request.ServerVariables("HTTP_REFERER") <>
> > "http://my_web_form.com/form.asp Then
> > Respose.Redirect "/SorryCharlie.asp"
> > Else
> > 'do the form mail thing
> > End if
>
>
> Sure, your code will not do any mailing after "Respose".
>
>
> --
> Evertjan.
> The Netherlands.
> (Please change the x'es to dots in my emailaddress)

Re: Form mail security
 

the other john wrote on 26 jun 2006 in
microsoft.public.inetserver.asp.general:
> Evertjan. wrote:
>> the other john wrote on 26 jun 2006 in
>> microsoft.public.inetserver.asp.general:
>> > Would this help stop spammers using this?
>> >
>> > If Request.ServerVariables("HTTP_REFERER") <>
>> > "http://my_web_form.com/form.asp Then
>> > Respose.Redirect "/SorryCharlie.asp"
>> > Else
>> > 'do the form mail thing
>> > End if
>>
>>
>> Sure, your code will not do any mailing after "Respose".

[please do not toppost on usenet]

> uh..yea....it was a typo.
>
> can you tell what this guy was trying to do here by the way? I'd
> appreciate it, thanks.

What Guy?
I would not know.
I am no a mind reader.

But more interesting is what you want, methinks.

--
Evertjan.
The Netherlands.
(Please change the x'es to dots in my emailaddress)