CN101123589A - A method and device for preventing from spam - Google Patents
A method and device for preventing from spam Download PDFInfo
- Publication number
- CN101123589A CN101123589A CNA200610109330XA CN200610109330A CN101123589A CN 101123589 A CN101123589 A CN 101123589A CN A200610109330X A CNA200610109330X A CN A200610109330XA CN 200610109330 A CN200610109330 A CN 200610109330A CN 101123589 A CN101123589 A CN 101123589A
- Authority
- CN
- China
- Prior art keywords
- spam
- damping
- grade
- damping control
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Granted
Links
Images
Abstract
The invention discloses a method and a device of anti-spam email. The method and the device analyze the spam possibility of the emails to obtain a damp controlling coefficient; and carry out the damp on the email data flow capacity from an email sender according to the damp controlling coefficient. The invention avoids the deletion of a normal email due to a false alarm and the loss of users due to mail delivery rejection, which are caused by the spam email filter process on an application layer in a prior art. At the same time, the invention adopts the damping way towards the spam email flow capacity, which effectively reduces a sending efficiency of the spam email. Compared with a storage-retransmission method applied in the prior art, the invention can limit network bandwidth consumption due to the spam email flow capacity and decrease pressure of a spam email gateway and an email server.
Description
Technical field
The present invention relates to the email disposal technical field, be specifically related to a kind of method and device of anti-rubbish mail.
Background technology
Along with the fast development of Internet (Internet), e-mail technique is used widely, provides conveniently communication mode to the user.Simultaneously, thing followed spam problem serious problems also becoming Internet user and faced.Recent studies have shown that in the mail that subscriber mailbox receives, it is spam that the mail above 50% is arranged.Handle these spams and need spend a large amount of valuable time of user.
The spam problem is so serious and become a principal element that influences network normal email system effectiveness, and mainly based on two reasons: the cost that at first is these mails of transmission is very cheap; Second reason is that mail need not too many control and just can issue receiving terminal by transmitting terminal.
For these reasons, in order to resist spam, existing technology is considered from two aspects:
The method of first kind solution spam problem is the supression to e-mail sending, adopts the anti-garbage mail system of this technology that client riddle (Client Puzzle) system and metered mail (PricingE_mail) system are arranged at present.
For client riddle system, it has increased delivers the required cost of an envelope mail, this cost is the system resource that need take, for example: cpu cycle, memory headroom etc., for the transmit leg of spam, the summation that this a large amount of transmission spams are paid system resource cannot receive.But use client riddle system to do bigger transformation, cause the application of this anti-garbage mail system not possess versatility the mailing system software of client; And sending mail for normal user also needs to take the higher system resource, and the systematic function of client is descended, and transforms the user for this kind and generally can't receive, and based on this point, also makes native system be difficult to promote.
For the metered mail system, it has increased delivers the required cost of an envelope mail, this cost is to need the transmit leg must be to the mail defrayment that sends, for current most of Internet users, the Email defrayment that sends also is difficult to accept, and this mailing system also needs the mailing system software of client is done bigger transformation, exists versatility not to be difficult to the problem of promoting the use of by force equally.
Another method that solves the spam problem is from the protection to the recipient, use at present the most widely technology be twit filter, this technology can not rely on the transformation that mail is sent client software.
The Spam filtering technology adopts twit filter, promptly common alleged spam gateway; The spam gateway filters the mail that receives, filtering technique comprises: white list, blacklist, content-based filtration or the like, a large amount of research is absorbed in to be provided more accurately and Spam filtering technology efficiently, some complicated algorithm, for example: Bayes (Bayesian) filtration etc. are devised and apply in the Related product.
Though the spam gateway can filter out most spam, helped the user greatly, also there is obvious defects:
Because all twit filters all may produce wrong report, so mail filter is often deleted normal mail because of wrong report, thereby cause unexpected loss to the user, and the credit worthiness of mail service provider is descended, even cause the dispute of user and mail service provider.
Adopt " storage-forwarding " mechanism and spam gateway to be generally operational in the mail server front end because the spam gateway is operated in application layer simultaneously, during the mail arrives gateway, be received.Adopt this technology can't limit of the consumption of spam flow, particularly when worm-type virus with the mail is the carrier propagation, can't limit the propagation of worm mail on Internet the network bandwidth; In addition, to spam send behavior without limits ability also can cause the spammer to initiate Denial of Service attack to mail server easily.
Summary of the invention
The object of the present invention is to provide a kind of method and device of anti-rubbish mail, be applied to the email disposal technical field, can prevent from effectively that twit filter from reporting by mistake to the user to bring unnecessary loss.
To achieve the object of the present invention, the technical scheme of being taked is: a kind of method of anti-rubbish mail comprises: mail is carried out the spam probability analysis obtain the damping control coefrficient; According to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping.
Alternatively, described damping is for replying receiving from the mail data bag postponement of described transmit leg; Described damping control coefrficient is for postponing the duration of replying postponement; Describedly according to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping and comprise: reply after the mail data bag from described transmission source that receives being postponed the duration of described postponement.
Alternatively, described damping is for limiting the transmission window of reception from the mail data bag of described transmit leg; Described damping control coefrficient is the value of transmission window; Describedly according to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping and comprise: the value according to described transmission window limits the transmission window from described e-mail sending mail data bag.
Alternatively, described damping is for abandoning the mail data bag of preset number to the mail flow from described transmit leg, and described damping control coefrficient is the cycle that abandons that abandons preset number mail data bag; Describedly according to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping and comprise: abandon the cycle mail data flow from described e-mail sending is periodically abandoned preset number mail data bag according to described.
Alternatively, describedly mail is carried out the process that the spam probability analysis obtains the damping control coefrficient comprise: mail is carried out the spam possibility grade that the spam probability analysis obtains described mail; Search the damping control coefrficient that obtains described spam possibility grade correspondence.
Alternatively, mail being carried out the spam probability analysis comprises: transmit leg is initiated to send the Simple Mail Transfer protocol handshaking information that obtains behind the connection request of mail analyze.
Alternatively, transmit leg is initiated to send the Simple Mail Transfer protocol handshaking information that obtains behind the connection request of mail to be analyzed, the process that obtains the spam possibility grade of described mail comprises: judge that described e-mail sending is whether in white list, if the spam possibility grade that this mail then is set is the grade of white list correspondence; If not, judge that then described e-mail sending is whether in blacklist, if the spam possibility grade that this mail then is set is the grade of blacklist correspondence; If not, whether the recipient who then judges described mail comprises the honey jar mailbox, if, the spam possibility grade that this mail then is set is the grade of honey jar mail reception side correspondence, if not, then carry out reverse inquiry of the domain name, and judge whether transmit leg domain name and transmit leg Internet protocol address mate, if not, the spam possibility grade that this mail then is set is the grade of address dummy correspondence.
Alternatively, further comprise: if described e-mail sending domain name and transmit leg Internet protocol address coupling, judging then whether the mail traffic volume that described e-mail sending preset before current system time in the duration surpasses threshold value, is the grade of the too high correspondence of historical traffic volume if the spam possibility grade of this mail then is set.
Alternatively, further comprise: if described mail traffic volume does not surpass threshold value, then carry out the inspection of historical spam traffic volume, judge whether send spam quantity in the duration that described e-mail sending preset before current system time surpasses threshold value, if then corresponding spam possibility grade is set according to the amount that surpasses threshold value.
Alternatively, described method further comprises: after described mail reception is finished, upgrade the historical mail traffic volume of described e-mail sending; And the content of described mail checked, if judge that described mail is a spam, then upgrade the historical spam traffic volume of described e-mail sending.
The device of a kind of anti-rubbish mail provided by the invention comprises: analytic unit is used for that mail is carried out the spam probability analysis and obtains the damping control coefrficient; The damping control unit carries out damping according to described damping control coefrficient to the mail data flow from described e-mail sending.
Alternatively, described analytic unit comprises: the grade analysis unit is used for mail is carried out the spam possibility grade that the spam probability analysis obtains described mail;
Query unit is used to search the damping control coefrficient of the spam possibility grade correspondence of the described mail that the level cells analysis obtains;
Described damping control unit is used for searching the damping control coefrficient that obtains according to query unit the mail data flow from the transmit leg of described mail is carried out corresponding damping.
Adopt technique scheme, beneficial technical effects of the present invention is:
1) the present invention obtains the damping control coefrficient by mail is carried out the spam probability analysis; According to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping, avoided in application layer spam being filtered in the prior art, often the loss that causes to the user is delivered in normal mail deletion or refusal, therefore can not have a negative impact normal mail user because of wrong report.The present invention simultaneously adopts the mode that the spam flow is carried out damping, effectively reduce the transmitting efficiency of spam, improve the transmission cost of spam, thereby reduce the whole marginal benefit of spam industry, adopt " storage-forwarding " to compare with prior art, can also limit of the consumption of spam flow, reduce the pressure of spam gateway and mail server the network bandwidth.
2) the present invention is according to the spam possibility grade that analysis obtains, and searches corresponding damping control coefrficient, and the flow of mail is taked the mode of grading control, along with the raising of the quantity of grade setting can make the control degree meticulousr.
3) and the present invention by before message body receives, in conjunction with local record the mail envelope information that simple transport protocol (SMTP) handshake phase obtains is analyzed, can be at the spam process of transmitting early stage, effectively identification spam and spam send behavior, thereby in time the sender to this mail is limited, and has response speed characteristics faster.
Description of drawings
Also the present invention is described in further detail in conjunction with the accompanying drawings below by embodiment.
Fig. 1 is the flow chart of the method for the embodiment of the invention one anti-rubbish mail;
Fig. 2 is that the embodiment of the invention one is postponed the signaling process schematic diagram of replying;
Fig. 3 is the flow chart of the method for the embodiment of the invention two anti-rubbish mails;
Fig. 4 is the signaling process schematic diagram of the embodiment of the invention two restricting data bag transmission windows;
Fig. 5 is the flow chart of the method for the embodiment of the invention three anti-rubbish mails;
Fig. 6 is the flow chart of the method for the embodiment of the invention four anti-rubbish mails;
Fig. 7 is the structural representation of the device of the embodiment of the invention five anti-rubbish mails.
Embodiment
The object of the present invention is to provide a kind of method and device of anti-rubbish mail, its core concept is to obtain the damping control coefrficient by mail is carried out the spam probability analysis; According to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping.Avoided in the prior art, thereby twit filter has been judged to be the normal email deletion of spam or the loss that the refusal delivery causes the user.Further the present invention carries out the spam probability analysis to the mail that receives, after the analysis, be not to judge whether this mail is spam, but draw the spam possibility grade of this mail, and by different level damping is carried out in the transmission of this mail data flow according to the damping control coefrficient of the spam possibility grade correspondence that draws this mail.It is more careful to make the processing of spam, and the present invention realizes that to the damping of the spam transport layer the recipient of mail do not rely on the modification to the client software that sends mail, versatility is stronger, is easy to promote the use of.
Method and device to a kind of anti-rubbish mail provided by the invention is described in detail below.
The method of embodiment one, a kind of anti-rubbish mail, flow chart comprise as shown in Figure 1:
101, mail is carried out the spam probability analysis, obtain the spam possibility grade of described mail;
In the present embodiment, mail has been carried out the spam probability analysis can be after receiving mail, adopt the conventional analysis mode in the existing Spam filtering technology, as white list, blacklist, content-based filtration or the like, what this step was emphasized is after the mail that receives is analyzed, draw the spam possibility grade of this mail, concrete analysis mode is not construed as limiting the invention.
102, search the damping control coefrficient that obtains described spam possibility grade correspondence;
103, according to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping.
The present invention has introduced the notion of damping and damping control coefrficient, and described damping refers to butt joint and receives and dispatches the inhibition that the data traffic of delivery method transmission is carried out, and the damping control coefrficient is used to represent the degree of damping.In the present embodiment, described damping is for replying receiving from the mail data bag postponement in described transmission source; Described damping control coefrficient is for postponing the duration of replying postponement.
Seeing also Fig. 2, is that present embodiment is postponed the signaling process schematic diagram of replying, and comprising:
The recipient receives the packet that transmit leg sends.Behind the duration that postponement is preset, the receive direction transmit leg sends and receives replying of this packet, after transmit leg is received described replying, sends next packet.
In transmission based on the mail data bag of transport layer, to replying behind the packet postponement certain hour that receives the transmit leg transmission, can play the purpose that hinders the data packet transmission, be understandable that, postponing replying from recipient to the transmit leg in transport layer may cause the transmission of transmission control protocol (TCP) overtime, but general TCP only connects and can just can interrupt after continuous 15 retries, and the time of these 15 retries is depended on retransmission time out (RTO) estimated time.And the time-out time of SMTP generally is unusual coarseness, for example: the delivery time-out time of message body is 10 minutes, cause erroneous judgement even the mistake of spam analysis appearance therefore occurs, postponement is replied also can not send the influence that user's generation can not receive to normal mail, and for the spam transmit leg, for economic interests, the transmit leg of spam need keep certain transmitting efficiency, and this postponement is replied for the transmit leg of spam and cannot be received.
Embodiment one compared with prior art obtains the damping control coefrficient by mail is carried out the spam probability analysis; According to the damping control coefrficient mail data flow from described e-mail sending is carried out damping.Avoided in application layer spam being filtered in the prior art, often the loss that causes to the user has been delivered in normal mail deletion or refusal, therefore can not have a negative impact normal mail user because of wrong report.The present invention simultaneously adopts the mode that the spam flow is carried out damping, effectively reduce the transmitting efficiency of spam, improve the transmission cost of spam, thereby reduce the whole marginal benefit of spam industry, " storage-forwarding " of prior art employing relatively, can also limit of the consumption of spam flow, reduce the pressure of spam gateway and mail server the network bandwidth.
Embodiment two, a kind of method of anti-rubbish mail, and flow chart comprises as shown in Figure 3:
301, mail is carried out the spam probability analysis, obtain the spam possibility grade of described mail;
302, the value of searching the transmission window that obtains described spam possibility grade correspondence;
303, according to the value of described transmission window the transmission window from described e-mail sending mail data bag is limited.
Seeing also Fig. 4, is the signaling process schematic diagram of present embodiment restricting data bag transmission window, comprising:
Transmit leg sends connection request;
The receive direction transmit leg sends replying of connection request, the described value that comprises notice transmit leg window of replying; Among the figure, the value of window is the m byte.
After the recipient receives described replying, send packet to transmit leg, the size of described packet is no more than the value of described window.
Embodiment two is with the difference of embodiment one, and the mode of another kind of damping is provided, and described damping is for limiting the transmission window of reception from the mail data bag in described transmission source; Described damping control coefrficient is the value of transmission window, wherein, the value of described transmission window allows the size of the maximum data packet passed through for this window, the value of described transmission window directly influences the quantity and the transmission speed of an envelope mail data bag, the size that restriction allows transmit leg to send packet can make this transmit leg produce the lot of data bag for sending an envelope mail, and the shared size of the header packet information of mail data bag is fixed, make in the transmission of whole envelope mail, force transmit leg because send the transmission quantity that a large amount of header packet informations has increased the data of this envelope mail, Internet resources can become the bottleneck of spam transmit leg gradually.In fact in actual applications, for the spam transmit leg, satisfy certain transmitting efficiency, for the mail that sends, if transmission speed is very low, transmit leg then can be forced to cancellation and send, and current spam sends the function that software generally also provides automatic cancellation to send based on economic interests.
The method of embodiment three, a kind of anti-rubbish mail, flow chart comprise as shown in Figure 5:
501, mail is carried out the spam probability analysis, obtain the spam possibility grade of described mail;
502, search the abandon cycle of described e-mail sending preset number that abandon that obtains described spam possibility grade correspondence according to bag;
503, abandon the cycle mail data flow from described e-mail sending is periodically abandoned preset number mail data bag according to described.
Embodiment three is that described damping is the mail data bag that the mail flow from described transmit leg is abandoned preset number with the difference of embodiment one and embodiment two, and described damping control coefrficient is the cycle that abandons that abandons preset number mail data bag; The damping mode that adopts in the present embodiment comes the transmission of mail data flow is formed obstruction with this mechanism based on the overtime retransmission mechanism of Transmission Control Protocol.
The embodiment of the invention one to embodiment three has proposed three kinds of modes and in transport layer the mail data flow of transmit leg has been carried out damping, be understandable that described damping can also take existing other modes that the data flow is carried out damping, concrete damping mode is not construed as limiting the invention.
In the embodiment of the invention one to embodiment three, mail is carried out the spam probability analysis, the step that obtains the spam possibility grade of described mail adopts after receiving mail, adopts existing Spam filtering technology that mail is carried out the spam probability analysis; Be understandable that, the present invention can also take the step that mail carries out the spam probability analysis: transmit leg initiate is sent the mode that the spam possibility grade of this mail was analyzed and obtained to the smtp protocol handshaking information that obtains behind the connection request of mail, provide a kind of below and carry out mode that the spam possibility analyzes and the anti-rubbish mail method of carrying out damping according to the SMTP handshaking information.
Embodiment four, a kind of method of anti-rubbish mail, and flow chart comprises as shown in Figure 6:
601, obtain SMTP handshaking information that transmit leg sends mail after, carry out the white list inspection, judge described e-mail sending whether in white list, if, then turn to step 602, if not, then turn to step 603;
602, the spam possibility grade that this mail is set is the grade of white list correspondence, and turns to step 614;
603, carry out the blacklist inspection, judge that described e-mail sending is whether in blacklist, if then turn to step 604; If not, then turn to step 605;
604, the spam possibility grade that this mail is set is the grade of blacklist correspondence, and turns to step 614;
605, carry out honey jar mailbox recipient and check judge whether the recipient of described mail comprises the honey jar mailbox, if, then turn to step 606, then turn to step 607 if not;
606, the spam possibility grade that this mail is set is the grade of honey jar mail reception side correspondence, and turns to step 614;
607, carry out reverse inquiry of the domain name, and judge that whether mate transmit leg domain name and transmit leg Internet protocol (IP:Internet Protocol) address, if not, then turns to step 608, if then turn to step 608;
608, the spam possibility grade that this mail then is set is the grade of address dummy correspondence, and turns to step 614;
609, carry out historical traffic volume inspection, judge that whether the mail traffic volume that described e-mail sending preset in the duration surpasses threshold value, if then turn to step 610, if not, then turns to step 611 before current system time;
610, the spam grade that this mail is set is the grade of the too high correspondence of historical traffic volume, and turns to step 614;
611, carry out the inspection of historical spam traffic volume, judge whether send spam quantity in the duration that described e-mail sending preset before current system time surpasses threshold value, if then turn to step 612; Then turn to step 613 if not;
612, according to the amount that surpasses threshold value corresponding spam possibility grade is set, and turns to step 614;
613, the grade that the spam possibility of this mail is set is the grade of normal email correspondence, and turns to step 614;
614, search the damping control coefrficient that obtains described spam possibility grade correspondence;
615, according to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping.
616, after mail reception is finished, upgrade the historical mail traffic volume of described e-mail sending;
617, the content of described mail is checked, judge described mail for whether being spam, if execution in step 618 then, if not, process ends then.
618, upgrade the historical spam traffic volume of described e-mail sending and process ends.
The damping mode of taking in the present embodiment can adopt embodiment one to embodiment three any-mode, present embodiment since do not begin to receive message body before, only to obtaining the handshaking information analysis, draw the grade of the spam possibility of this mail, and the mail data flow from described e-mail sending is carried out damping according to spam possibility grade, accomplish the damping of spam is reflected fast, what this kind mode was based on that the present invention takes mail is the characteristics that damping rather than deletion or refusal are delivered, the requirement of the accuracy of reduction judging rubbish mail that can be suitable, the step 601 of this spam probability analysis can one to embodiment three pair of step that mail carries out the spam probability analysis of applicating adn implementing example to step 611.
The foregoing description four provides a kind of a kind of specific implementation of carrying out the spam probability analysis according to the smtp protocol handshaking information, be understandable that, the above-mentioned step 601 of spam probability analysis of carrying out is to 611 not absolute orders, and the user can be according to the priority of actual conditions adjustment judgement, also increase that can be suitable and reduce step, the present invention emphasizes provide a kind of concrete realization of carrying out spam possibility information based on the SMTP handshaking information may, concrete step and order are not construed as limiting the invention.
Embodiment five, and a kind of device of anti-rubbish mail, structural representation comprise as shown in Figure 7: analytic unit 710, and described analytic unit 710 comprises: grade analysis unit 711 and query unit 712; Damping control unit 720.
Described grade analysis unit 711 is used for mail is carried out the spam possibility grade that the spam probability analysis obtains described mail;
Described query unit 712 is used to search the damping control coefrficient that the spam possibility grade correspondence of the described mail that obtains is analyzed in grade analysis unit 711;
Described damping control unit 720 is used for searching the damping control coefrficient that obtains according to query unit 712 the mail data flow from the transmit leg of described mail is carried out damping.
Among the present invention, in the present embodiment, described damping is for replying receiving from the mail data bag postponement in described transmission source; Described damping control coefrficient is for postponing the duration of replying postponement, be understandable that, described damping can also be for limiting the transmission window of reception from the mail data bag in described transmission source, correspondingly described damping control coefrficient is the value of transmission window, described damping can also be for abandoning the mail data bag of preset number to the mail flow from described transmit leg, correspondingly stating the damping control coefrficient is the cycle that abandons preset number mail data bag.Be understandable that described damping can also take existing other modes of the data flow being carried out damping.
In sum, method and device to a kind of anti-rubbish mail provided by the invention have proposed a kind of early stage scheme that the data traffic of spam is limited that sends at spam, by to spam the transmission in network carry out damping, rather than deletion or refusal delivery, can avoid rubbish E-mail error is offered the loss that the user brings, and can effectively reduce the transmitting efficiency of spam; Simultaneously can reduce the consumption of spam, reduce the load pressure of spam gateway and mail server, and the present invention need not mail server and client software are transformed, be easy to apply the Internet bandwidth.
More than the method and the device of a kind of anti-rubbish mail provided by the present invention is described in detail, used specific case herein principle of the present invention and execution mode are set forth, the explanation of above embodiment just is used for helping to understand method of the present invention and core concept thereof; Simultaneously, for one of ordinary skill in the art, according to thought of the present invention, the part that all can change in specific embodiments and applications, in sum, this description should not be construed as limitation of the present invention.
Claims (12)
1. the method for an anti-rubbish mail is characterized in that, comprising:
Mail is carried out the spam probability analysis obtain the damping control coefrficient;
According to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping.
2. the method for anti-rubbish mail as claimed in claim 1 is characterized in that, described damping is for replying receiving from the mail data bag postponement of described transmit leg; Described damping control coefrficient is for postponing the duration of replying postponement;
Describedly according to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping and comprises:
The mail data bag from described transmission source that receives being postponed the duration of described postponement replys afterwards.
3. the method for anti-rubbish mail as claimed in claim 1 is characterized in that, described damping is for limiting the transmission window of reception from the mail data bag of described transmit leg; Described damping control coefrficient is the value of transmission window;
Describedly according to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping and comprises:
Value according to described transmission window limits the transmission window from described e-mail sending mail data bag.
4. the method for anti-rubbish mail as claimed in claim 1, it is characterized in that, described damping is for abandoning the mail data bag of preset number to the mail flow from described transmit leg, described damping control coefrficient is the cycle that abandons that abandons preset number mail data bag;
Describedly according to described damping control coefrficient the mail data flow from described e-mail sending is carried out damping and comprises:
Abandon the cycle mail data flow from described e-mail sending is periodically abandoned preset number mail data bag according to described.
5. as the method for any described anti-rubbish mail of claim 1 to 4, it is characterized in that, describedly mail is carried out the process that the spam probability analysis obtains the damping control coefrficient comprise:
Mail is carried out the spam possibility grade that the spam probability analysis obtains described mail;
Search the damping control coefrficient that obtains described spam possibility grade correspondence.
6. the method for anti-rubbish mail as claimed in claim 5 is characterized in that, mail is carried out the spam probability analysis comprise: transmit leg is initiated to send the Simple Mail Transfer protocol handshaking information that obtains behind the connection request of mail analyze.
7. the method for anti-rubbish mail as claimed in claim 6, it is characterized in that, transmit leg is initiated to send the Simple Mail Transfer protocol handshaking information that obtains behind the connection request of mail analyze, the process that obtains the spam possibility grade of described mail comprises:
Judge that described e-mail sending is whether in white list, if the spam possibility grade that this mail then is set is the grade of white list correspondence; If not, judge that then described e-mail sending is whether in blacklist, if the spam possibility grade that this mail then is set is the grade of blacklist correspondence; If not, whether the recipient who then judges described mail comprises the honey jar mailbox, if, the spam possibility grade that this mail then is set is the grade of honey jar mail reception side correspondence, if not, then carry out reverse inquiry of the domain name, and judge whether transmit leg domain name and transmit leg Internet protocol address mate, if not, the spam possibility grade that this mail then is set is the grade of address dummy correspondence.
8. the method for anti-rubbish mail as claimed in claim 7 is characterized in that, further comprises:
If described e-mail sending domain name and transmit leg Internet protocol address coupling, judging then whether the mail traffic volume that described e-mail sending preset before current system time in the duration surpasses threshold value, is the grade of the too high correspondence of historical traffic volume if the spam possibility grade of this mail then is set.
9. the method for anti-rubbish mail as claimed in claim 8 is characterized in that, further comprises:
If described mail traffic volume does not surpass threshold value, then carry out the inspection of historical spam traffic volume, judge whether send spam quantity in the duration that described e-mail sending preset before current system time surpasses threshold value, if then corresponding spam possibility grade is set according to the amount that surpasses threshold value.
10. the method for anti-rubbish mail as claimed in claim 9 is characterized in that, described method further comprises:
After described mail reception is finished, upgrade the historical mail traffic volume of described e-mail sending; And the content of described mail checked, if judge that described mail is a spam, then upgrade the historical spam traffic volume of described e-mail sending.
11. the device of an anti-rubbish mail is characterized in that, comprising:
Analytic unit is used for that mail is carried out the spam probability analysis and obtains the damping control coefrficient;
The damping control unit carries out damping according to described damping control coefrficient to the mail data flow from described e-mail sending.
12. the device of anti-rubbish mail as claimed in claim 11 is characterized in that:
Described analytic unit comprises:
The grade analysis unit is used for mail is carried out the spam possibility grade that the spam probability analysis obtains described mail;
Query unit is used to search the damping control coefrficient of the spam possibility grade correspondence of the described mail that the level cells analysis obtains;
Described damping control unit is used for searching the damping control coefrficient that obtains according to query unit the mail data flow from the transmit leg of described mail is carried out corresponding damping.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200610109330A CN100596121C (en) | 2006-08-10 | 2006-08-10 | A method and device for preventing from spam |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN200610109330A CN100596121C (en) | 2006-08-10 | 2006-08-10 | A method and device for preventing from spam |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN101123589A true CN101123589A (en) | 2008-02-13 |
| CN100596121C CN100596121C (en) | 2010-03-24 |
Family
ID=39085768
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN200610109330A Expired - Fee Related CN100596121C (en) | 2006-08-10 | 2006-08-10 | A method and device for preventing from spam |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN100596121C (en) |
Cited By (9)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101877680A (en) * | 2010-05-21 | 2010-11-03 | 电子科技大学 | Junk mail sending behavior control system and method |
| CN102299816A (en) * | 2010-06-23 | 2011-12-28 | 上海博泰悦臻电子设备制造有限公司 | Vehicle-mounted equipment and mail receiving system thereof as well as management method of mail receiving system |
| CN104038409A (en) * | 2014-05-30 | 2014-09-10 | 汉柏科技有限公司 | Method and device for email security management |
| CN106330680A (en) * | 2016-08-30 | 2017-01-11 | 黑龙江八农垦大学 | Electronic mail cleaning method |
| CN111404805A (en) * | 2020-03-12 | 2020-07-10 | 深信服科技股份有限公司 | Junk mail detection method and device, electronic equipment and storage medium |
| CN113676497A (en) * | 2021-10-22 | 2021-11-19 | 广州锦行网络科技有限公司 | Data blocking method and device, electronic equipment and storage medium |
| CN114143282A (en) * | 2021-11-30 | 2022-03-04 | 中国建设银行股份有限公司 | Mail processing method, device, equipment and storage medium |
| CN115529185A (en) * | 2022-09-29 | 2022-12-27 | 北京中睿天下信息技术有限公司 | Mail classifying and cleaning method |
| CN115567475A (en) * | 2022-09-27 | 2023-01-03 | 北京二六三企业通信有限公司 | Junk mail identification method, device, equipment and storage medium |
Families Citing this family (1)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| TWI552545B (en) * | 2015-03-04 | 2016-10-01 | Electronic mail delivery method |
-
2006
- 2006-08-10 CN CN200610109330A patent/CN100596121C/en not_active Expired - Fee Related
Cited By (12)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN101877680A (en) * | 2010-05-21 | 2010-11-03 | 电子科技大学 | Junk mail sending behavior control system and method |
| CN102299816A (en) * | 2010-06-23 | 2011-12-28 | 上海博泰悦臻电子设备制造有限公司 | Vehicle-mounted equipment and mail receiving system thereof as well as management method of mail receiving system |
| CN102299816B (en) * | 2010-06-23 | 2016-07-06 | 上海汽车集团股份有限公司 | Mobile unit, the mail reception system of mobile unit and management method thereof |
| CN104038409A (en) * | 2014-05-30 | 2014-09-10 | 汉柏科技有限公司 | Method and device for email security management |
| CN106330680A (en) * | 2016-08-30 | 2017-01-11 | 黑龙江八农垦大学 | Electronic mail cleaning method |
| CN111404805A (en) * | 2020-03-12 | 2020-07-10 | 深信服科技股份有限公司 | Junk mail detection method and device, electronic equipment and storage medium |
| CN111404805B (en) * | 2020-03-12 | 2022-11-22 | 深信服科技股份有限公司 | Junk mail detection method and device, electronic equipment and storage medium |
| CN113676497A (en) * | 2021-10-22 | 2021-11-19 | 广州锦行网络科技有限公司 | Data blocking method and device, electronic equipment and storage medium |
| CN114143282A (en) * | 2021-11-30 | 2022-03-04 | 中国建设银行股份有限公司 | Mail processing method, device, equipment and storage medium |
| CN114143282B (en) * | 2021-11-30 | 2023-11-10 | 中国建设银行股份有限公司 | Mail processing method, device, equipment and storage medium |
| CN115567475A (en) * | 2022-09-27 | 2023-01-03 | 北京二六三企业通信有限公司 | Junk mail identification method, device, equipment and storage medium |
| CN115529185A (en) * | 2022-09-29 | 2022-12-27 | 北京中睿天下信息技术有限公司 | Mail classifying and cleaning method |
Also Published As
| Publication number | Publication date |
|---|---|
| CN100596121C (en) | 2010-03-24 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN100596121C (en) | A method and device for preventing from spam | |
| US8135779B2 (en) | Method, system, apparatus, and software product for filtering out spam more efficiently | |
| US6965917B1 (en) | System and method for notification of an event | |
| US8171159B2 (en) | Systems and methods for adaptive communication control | |
| EP2446411B1 (en) | Real-time spam look-up system | |
| CN1960516B (en) | Duplicate notification message processing method in terminal | |
| US8788596B1 (en) | Unsolicited message rejecting communications processor | |
| WO2005119488A2 (en) | Techniques for determining the reputation of a message sender | |
| US8407304B2 (en) | Method and system for email notification | |
| CN1719812A (en) | Method and system for filtering refuse E-mail | |
| US7383306B2 (en) | System and method for selectively increasing message transaction costs | |
| CN100484107C (en) | A method to screen the mail and device and system | |
| US8180835B1 (en) | System and method for protecting mail servers from mail flood attacks | |
| EP2069948A2 (en) | Method and apparatus for filtering electronic messages | |
| KR20050002320A (en) | E-mail managing system and method thereof | |
| CN101789105B (en) | Packet-level dynamic mail attachment virus detection method | |
| JP5366504B2 (en) | Mail receiving server, spam mail receiving method and program | |
| US7539761B1 (en) | System and method for detecting and defeating IP address spoofing in electronic mail messages | |
| JP2006251882A (en) | Unsolicited mail handling system, unsolicited mail handling method and program | |
| JP2005210240A (en) | Mail filter system, mail filter, mail filtering method and program for use therein | |
| CA2615573C (en) | Method and system for email notification | |
| KR100525758B1 (en) | Method for preventing spam mail through packet-monitoring and system therefor | |
| KR20040035329A (en) | method for automatically blocking spam mail by mailing record | |
| Moors et al. | Improving email reliability by sender retransmission | |
| CN1558627A (en) | Electronic mail delivery method |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| C06 | Publication | ||
| PB01 | Publication | ||
| C10 | Entry into substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| C14 | Grant of patent or utility model | ||
| GR01 | Patent grant | ||
| CF01 | Termination of patent right due to non-payment of annual fee | ||
| CF01 | Termination of patent right due to non-payment of annual fee |
Granted publication date: 20100324 |