my spring email address is being spammed.

[Regret]

random word/number

I said common. As in name_surname@email.com etc. Many common address names that people use which I can't be bothered to think of.

[monkerl]

who cares?

use a spam filter and you'll be fine

[Pink]

Can an admin confirm that even normal users have to be logged in to see email addresses of other users and that there is no public way to see email addresses on this board?

I see stuff like name_surname@dom.com hitting my email server in the logs and other such pattern and random/sequential name generation against various other services I run. As I said in an earlier post I've taken zombies out before now. The most likely scenario is a scrape of some kind of this site. Then the question becomes, how did it scrape my email from this site?

The coincidence of me using that particular address that has references to this site in it and me to then be spammed on that address only a month after I signed up here is fairly astronomical. More likely it would get hit within the first few months after registration and renewal (as spammers use the domain renewal/registration lists as a source of valid domains to perform random spamming against or as from addresses that may well pass an SPF check).

I've already killed off the address I was using here and generated another. So we'll see if it happens again.

I'd hate to think that a user or admin account here was compromised, but then that comes back to an earlier post too and is a possibility.

My partner's email address was being overwhelmed with spam until recently, she registered her domain about the same time as mine, I turned off her catch all account and set her up an explicit set of addresses and she hasn't had a single spam since. Again she's careful with her profile settings and where she leaves addresses.

Despite the fact I'm 99% sure I turned even users being able to email me off within minutes of confirming my account (it's just something I always do), I can't for the life of me remember how quickly the account confirmation email came through.

That's why it's crucial for systems such as this to not have public defaults for stuff.

[Pink]

who cares?

use a spam filter and you'll be fine

Because using specific addresses and not a catch all account with a spam filter means I don't get spam unless someone passes the address on or someone is careless. These three spam emails are the first ones I've had ever on this domain. I'm fairly sure that even with your spam filter you can't say only three have ever gotten through.

Spam filters (good ones at least) need to be trained to some extent, and when spammers come up with new ways of defeating them, you have to update and retrain. It also means running your own mail server, wasting bandwidth and confirms the address/domain is valid, as it has to accept the mail before it can identify it (I've used and configured and trained a fair number of them over the years).

My way is easier. It just relies on a little vigilance and gives recipient unknown back down the line before the content is even passed over to my server. If any address does get spammed (such as the one I used to use here), you just kill it off.

If you can point me to a fool proof spam filter that requires little to no training (ever), does not require me to learn much about it to use it effectively and will never give a false positive and let through less than three spam mails in two years I'd love to know about it.

To be better than what I do currently that is the requirement.

My partner's email was swamped, as I mentioned, that's after going through SpamAssasin at her mail provider and after Thunderbird has had a go at it. Switched to my way, instantly no more spam.

[monkerl]

I'm using the google mail system and i just deleted 1700 spam mails in my spam folder...
In the last 2 months at least, I had not a single spam mail getting into my Inbox...

well at least for me that's enough

[aegis]

I know none of the current admins would sell your email, and I'm almost completely certain they haven't been compromised in one way or another.

a quick check reveals no known phpbb exploits to discover emails or gain admin privileges...

the only exploit I could find would hit the database directly, but there's no reason for someone to single out your account for spam... my email is in the database and I have received no such spam...

it's possible your email server or web provider has been compromised.

[rattle]

Well... I SOLD YOUR MAIL ADDRESS FOR 10 BUCKS. I'm sorry...

[AF]

I can not see your email in your profile

[zwzsg]

random word/number

I said common. As in name_surname@email.com etc. Many common address names that people use which I can't be bothered to think of.

The email I registered with at Spring board and is now getting spammed is more random than the billions of email that would be redirected to my mail box and are not being spammed.

[Peet]

I get russian spam on my russian domain :)))