Spam | OSBlues

March 2023
M	T	W	T	F	S	S
	1	2	3	4	5
6	7	8	9	10	11	12
13	14	15	16	17	18	19
20	21	22	23	24	25	26
27	28	29	30	31

Contact from AVG

June 14, 2008 — osblues

I’ve had a response from Pat Bitton (Head of Global Communications) at AVG, who I emailed earlier following their comment on The Register.

…we’ve been working since then to
figure out exactly was going on and how we might fix it with the best
results for everyone. Your offer to assist is much appreciated, and I’m
copying this reply to Roger Thompson* so he and his team can contact you
directly…

So, it looks like we’re getting somewhere and hopefully this’ll mean a change to the way LinkScanner operates to keep webmasters and site owners happy.

* Chief of Research at AVG and designer of LinkScanner while serving as CTO of Exploit Prevention Labs

:: :: :: :: :: :: :: :: :: :: :: :: :: :: :: ::

Posted in Avg, Spam, Technology. Tags: Avg. 1 Comment »

My name in lights

June 14, 2008 — osblues

… well, not quite.

A week has passed since I email The Register about the AVG logfile spam problems, but, after lots of emails between myself and their Internet Editor, they’re now running the story.

I’m a little annoyed that they don’t acknowledge that I brought this to their attention, but ah well. All I really wanted to do was let the community know that this happening and see if together we can sort this.

I’m really pleased to see that an employee from AVG has stepped up within the comments of the article on El Reg and wants to work with us (webmasters/site owners) to see if we can improve the situation. I’ve already emailed them and await a response.

I’ll keep you posted.

:: :: :: :: :: :: :: :: :: :: :: :: :: :: :: ::

Posted in Avg, Spam, Technology. Tags: apache, Avg, iis, logs, Spam. 2 Comments »

SPF compliant .net system.net.mail .mailmessage

June 11, 2008 — osblues

As a follow up to my post SPF compliant CDO message, here is the equivalent (well, not quite, but similar) vb.net version that I use –

Public Sub Send(ByVal strTo As String, ByVal strFrom As String, _
   ByVal strSender As String, ByVal strCC As String, _
   ByVal strBCC As String, ByVal strSubject As String, _
   ByVal strBody As String)

Dim MailObj As New System.Net.Mail.MailMessage(strFrom, _
   strTo, strSubject, strBody)

'SPF Stuff
If Not String.IsNullOrEmpty(strSender) And strSender <> strFrom Then
   MailObj.Headers.Add("return-path", strSender)
   MailObj.Headers.Add("reply-to", strFrom)
   MailObj.Sender = New Net.Mail.MailAddress(strSender)
End If

If Not strCC = String.Empty Then
   For Each cc As String In strCC.Split(";")
      MailObj.CC.Add(cc)
   Next
End If

If Not strBCC = String.Empty Then
   For Each bcc As String In strBCC.Split(";")
      MailObj.Bcc.Add(bcc)
   Next
End If

Dim MailClient As New System.Net.Mail.SmtpClient
MailClient.Host = "mailserver"
MailClient.Send(MailObj)

End Sub

Again, as before, this is generally useful for web generated emails (like send a friend forms etc.), simply specify the users address as strFrom and a generic local address (noreply@mydomain.com) as strSender.

I hope it proves useful.

:: :: :: :: :: :: :: :: :: :: :: :: :: :: :: ::

Posted in .Net, Spam, Technology. Tags: dotnet, email, Spam, spf, vb. Leave a Comment »

Using LogParser With Awstats To Filter AVG Spam

June 5, 2008 — osblues

Following on from my post LogParser to the rescue, I’ve now worked out how to integrate logparser into the Awstats update process with very minimal effort.

Note: Awstats is a cross platform web analysis tool, but unfortunately logparser isn’t, this therefore is windows only.

To make life easier, I dropped the logparser files (exe and dll, although I’m not sure you need the dll) directly in to the cgi-bin where Awstats lives on the server. I understand doing this may have security implications, so do this at your own risk.

Open up the config file for your Awstats report (awstats.<config>.conf) and find the LogFile directive

LogFile=”E:/logs/W3SVC2074709632/ex%YY-1%MM-1%DD-1.log”

It’ll be something like the above, assuming you use daily logs on IIS. We need to change it to

LogFile=”logparser -i:iisw3c -o:w3c -rtp:-1 -stats:off file:rem-avg-spam.sql?logfile=E:/logs/W3SVC2074709632/ex%YY-1%MM-1%DD-1.log |”

This tells Awstats to execute logparser setting any necessary options and passing in the path to the log as before, it then grabs the output from the pipe and processes it.

That’s it!

The contents of my rem-avg-spam.sql file is just

select *
from %logfile%
where not (cs(User-Agent)=’Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;1813)’
or cs(User-Agent)=’Mozilla/4.0+(compatible;+MSIE+6.0;+Windows+NT+5.1;+SV1)’
and cs(Cookie) is null
and cs(Referer) is null)

I’m now using this for some fairly large logs (100mb+) and it works fine.

I hope this helps.

:: :: :: :: :: :: :: :: :: :: :: :: :: :: :: ::

Posted in Avg, Spam, Technology. Tags: Avg, awstats, iis, logs, Spam. Leave a Comment »

More AVG & LinkScanner Information

June 4, 2008 — osblues

I’m still testing my LogParser fix for AVG log spam and it appears to do a pretty good job. It’s scarey how many visits are being removed from our stats once this crap is cleared out though. I’ve seen one clients stats for a recent day, drop from 14K to 8K so it really is a serious problem, especially if you aren’t even aware it’s happening.

For more information on the user agents used and some background on other similar AV tools, see this LinkScanner, AVG, TrendMicro, 1813 and SV1 post at WebmasterWorld.

:: :: :: :: :: :: :: :: :: :: :: :: :: :: :: ::

Posted in Avg, Spam, Technology. Tags: apache, Avg, iis, logs, Spam. Leave a Comment »

« Older posts

Newer posts »

OSBlues

Categories

Search

Contact from AVG

My name in lights

SPF compliant .net system.net.mail .mailmessage

Using LogParser With Awstats To Filter AVG Spam

More AVG & LinkScanner Information

Recent Tweets