Discuss: Win the SPAM Arms Race
by Dan Benjamin
- Editorial Comments
73 Disposable Addresses
Check out spamgourmet.com
It works the same as sneakEmail.com
posted at 04:17 pm on February 19, 2003 by Tim the Logokleptomaniac
74 Stopping Spambots
http://www.neilgunton.com/spambot_trap/
Just search for “Balu” to find my php-solution, that generates a uniq mailto: for each visitor – which looks like
web-32bitIP.timestamp@example.com
This way I can easily reject addresses that were found by bots and are used for SPAMming. I even know where the bot came from and when. I can even find them in the webserver-logfiles and analyze their activity.
There are many other ideas and hints on that page too…
Baluposted at 03:51 pm on March 3, 2003 by Balu
75 Contact Form
Just use a contact form that then mails you the content of the form. The user doesn’t need to know your e-mail address at all.
I use one at my site and users find it easy to use.
Cheers
posted at 09:38 am on July 26, 2003 by Alex
76 destroy the harvester's database
By far the most elegant approach AFAIK;
Catch the email harvester in a tar pit and destroy it’s database.
(including the email address just snatched from your HTML)
All mail links can remain unmodified.
http://www.monkeys.com/wpoison/
posted at 09:50 am on September 12, 2003 by Marek Moehling
77 Easy Method
The easiest and as far as I know most fool-proof method is one that Xavier almost alluded to. It involves a simple Javascript function that assembles an email address when the user clicks a hyperlink.
function mail(user) {
locationstring = “mailto:” + user + “@” + “domain.com”;
[removed] = locationstring;
}
You can of course add more variables so that you may use multiple domains, ie:
function mail(user,dom,tld) {
locationstring = “mailto:” + user + “@” + dom + “.” + tld;
[removed] = locationstring;
}
In the hyperlink, just call the function:
[removed] mail(‘johndoe’,‘domain’,‘com’);
This method has proved exceptionally reliable. To test it, I put a page with a normal email link to spam@mydomain.com and one to my real address assembled through this Javascript function. Spam comes to the spam address, but not to my real address.
Hopefully this helps someone!
posted at 10:02 am on October 5, 2003 by lithis
78 Use their own techniques against them
In pure HTML you can extra tags that will not get in the way.
You can also use the character entities.
JavaScript would be needed to dynamically add this to the HREF of the mailto link.
You can even distribute the parts of you email address in invisible tags around the page, even put some bits in attributes, and use JavaScript to reconstruct it in.
Problem with non-javascript browsers though.
Maybe have <? include my_email.txt ?> in the mailto href and on the page for a server side solution. But don’t bots get to the page after sever-side processing?
posted at 10:23 am on October 18, 2003 by LJ
Discussion Closed
New comments are not being accepted, but you are welcome to explore what people said before we closed the door.
Got something to say?
Discuss this article. We reserve the right to delete flames, trolls, and wood nymphs.
Create a new account or sign in below if you’d like to leave a comment.
Subscribe to this article's comments: RSS (what’s this?)






71 Getting Even And Killing Spam with CGI
If you use cgi to provide web based email through forms, you do not have to display your email address. I do that in my shop and it works.
If you generate bogus random addresses like bs@bs.com you will tip them off to the sys admin when they begin a mailing getting thousands of “address unknowns”, or wasting their bandwidth if they are a service.
If you must display an email address, make an image that uses the method Xavier Defrang mentions above to link it, with the function as an external .js script.
The link is not my site, just a place i found where you can get these simple scripts if you are too lazy to write them.
Avitar
posted at 12:00 am on January 22, 2003 by Avitar