Page 1 of 1

Still getting spam emails despite enabling anti-spam auth...

Posted: Thu Jul 12, 2007 8:47 am
by humpda
Script URL: www.alexhillshs.eq.edu.au/helpdesk
Version of script: .94
Hosting company:
URL of phpinfo.php: www.alexhillshs.eq.edu.au/helpdesk/phpinfo.php
URL of session_test.php:
What terms did you try when SEARCHING for a solution:

Write your message below:

Hi
This is not a script issue problem however I would like some advice. I have been using various version of Hesk for about 2 years and in that time I have never had spam messages. About 1 week ago I was suddenly inundated with them...they all seem to originate from the one IP address in the UK and all the messages contain a jumble of text. I turned on the ANTI-SPAM authentication however I am still getting them. I have tried posting myself without entering in the anti-spam number and it does not work so how can these messages still be coming through to my "new support ticket submitted" link....??? Thanks

:D

Posted: Thu Jul 12, 2007 11:48 am
by Klemen
Try banning the IP address in question
http://www.google.com/search?hl=en&q=ho ... IP+address

Can you post a sample message you get?

Posted: Fri Jul 13, 2007 9:03 am
by humpda
Thanks...will try what you suggested. I have posted a sample of the spam message below. It follows the same pattern each time...with random letters for the username...ip seems to be the same each time at this time but may change when I block it. Message is a whole lot of url links....how come it can get past the anti-spam check???? Thanks again.

Date: 2007-07-13 17:09:01
Teacher Code: Doftyfcx
E-mail: zadiwolu@fmaks.info
IP: 91.186.12.54

Message:


(REMOVED)

Posted: Fri Jul 13, 2007 10:00 am
by humpda
Hi
I created a .htaccess and placed it in the root helpdesk directory...the text of the .htaccess file is as follows...

< Limit GET POST >
order allow,deny
allow from all
deny from 91.186.12.54
deny from 220.233.73.226
deny from domain.com
< /Limit >

I added the second IP address in order to see how blocking works but I can still access the site with no problems. What could I be doing wrong? (Sorry for noob question)