The Mac Observer

Skip navigational links

DealsOnTheWeb Daily Deal: OneCall's Weekend Sale - 20 Great Items at Great Prices All Weekend Long

The Slacker's Guide - The Best Mail Filter Available: SpamSieve

by Chris Barylick
February 24th, 2006

It's never going to stop.

That's the simplest truth of the matter.

Despite what any e-mail client or Internet service provider may have to say or efforts they undertake to protect their clients' identities, there's no guaranteed way to stem the tide of spam e-mail. And as fondly as we may remember the early days of widespread Internet use eight or nine years ago when an unsolicited message would come in only every few days -- as opposed to the literally dozens that bomb your e-mail's inbox at midnight -- there's no fighting a marketing scheme that allows literally millions of people to be reached with a message for almost no money.

Of course, some solutions are more effective than others.

Enter SpamSieve, a shareware e-mail filtering program by Michael Tsai that's proven itself to be about the most useful program available for almost every e-mail client that runs on Mac OS X. Compatible with Apple's Email, Emailer, Eudora, GyazMail, Mailsmith, Outlook Express and PowerMail, the program is geared towards as wide a user base as possible.


Setting up mail filtering rules in SpamSieve.

Centered on Bayesian filtering and rule sets, SpamSieve attacks spam mail from two simultaneous approaches. Bayesian filters, which pick out words or character strings from an e-mail's body, metadata, implanted HTML code and header information that helps describe the message, weigh the words and character strings as desirable or undesirable. Once a decision has been reached, SpamSieve will either sort it to a standard inbox or file it away to a junk folder. Taking the whole task of sorting and filtering e-mail on its shoulders, the user assigns a simple rule to bypass the e-mail client's built in filtering protocol and route all e-mail through SpamSieve for analysis.

Once installed, SpamSieve can be customized to match a user's needs. If a questionable but valid e-mail comes through the door, the user can train SpamSieve to recognize similar messages as valid. Strange at first, after a week of consistent training and reinforcement, the program's valid e-mail recognition rate becomes admirable.

A 3.5 megabyte download, SpamSieve is dragged to the applications folder. Once there, the user opens their e-mail program of choice, moves into the preference settings that determine rules, disables the program's junk and spam mail filtering and creates a rule to have SpamSieve handle the task. While this is a little tricky at first, be sure to read the help manual that comes with the download. Categories have been determined based on the e-mail program and situation. Step by step instructions explain what to do, and an electronic format makes navigation that much easier.

SpamSieve is available for a $25 registration fee and will tend to nag the user until registered. The program also offers tip screens which can be disabled. The program occupies 9.3 megabytes of disk space and requires Mac OS X 10.2.6 or later to run.

Truly excellent applications are few and far between -- in the shareware realm, or any other -- and Michael Tsai has done his homework, consistently updating the program and responding to feedback as time goes on. The program has been ported over to a Universal Binary format, and can be cleanly run without emulation on Intel-based Mac hardware.

The spam mail may never stop, but SpamSieve is perhaps the best way to pin it down into a background annoyance on the Mac. If the day ever comes where it becomes legal to chase down the heads of electronic bulk mail firms in the street, I'll be the one handing out pitch forks, blunt weapons and torches to make things that much more interesting.

That wraps it up for this week. As always, if you see anything new, cool or useful in the Mac universe,

.

Chris Barylick covers games for The Mac Observer, and has written for Inside Mac Games, MacGamer, UPI, the Washington Post, and other publications.

Send polite comments to , or post your comments below.

Most Recent Columns From The Slacker's Guide

The Slacker's Guide Archives

Observer Comments

Show: Subjects Only | Full Comments
Close Name:gslusher Posts: 2088 Joined: 13 Nov 2002
Subject: Another option ...

There is another option, especially for those with dialup connections: don't download spam. SpamSieve works only AFTER you've downloaded the email, including attachments. (Therefore, you could end up with porn on your hard drive, not to mention how long it can take to download large spam attachments.) One solution is to use something like POPmonitor.

POPmonitor lets you download the headers (and a user-defined number of lines) of emails in any POP mailbox. (It's easy to set up multiple accounts.) You can review the emails, choose those that are spam (one can review the first part of the content, as I said before) and have POPmonitor delete them. You can also send fake bounce messages.

POPmonitor can do some filtering and can be set to automatically delete those emails it figures are spam, though that can be dangerous, as I've had very legitimate emails marked as spam by every program I know of, including SpamSieve. The user can mark email addresses for a "white" list (or black list!).

Some will complain that this isn't automatic. That's a choice one needs to make. Some of us would rather have some control over spam filtering and don't look kindly upon downloading, then filtering, moving to another folder, etc. For those with dialup accounts (or who use dialup while away from home), something like POPmonitor is much better than SpamSieve. I started using POPmonitor when I used a dialup account and still use it. It also helps me monitor little-used email accounts once in a while. From a time standpoint, it takes me no more time to use POPmonitor than it did to check that SpamSieve hadn't marked some important email as spam.

FWIW, I understand tha Eudora can be set to download headers only, then download only the ones you want.

Close Name:Wings Posts: 89 Joined: 30 Mar 2004
Subject: Another Way, Using Mail's Rules

I've come up with a way that cuts back on the amount of spam that gets through the normal spam filters by simply adding one rule.

First, if you want to track how well this works, add a new mailbox to Apple Mail and name it something like "Received From Unknown".

Go to Preferences/Rules and add a rule (I named mine "FromUnknown"). In the header list, choose "Received". If "Received" doesn't exist, go to the bottom of that popup menu and choose "Edit Header List..." and add it. Set up the rule so that header "Received" CONTAINS "from unknown" (without the quotes), and choose action to be move-message-to-mailbox "Received From Unknown", or to your junk mailbox, or whatever.

I've noticed that about 90% of all spam that gets through to my inbox had "from unknown" in one of the "Received" headers. I think this is when the sender has tried to mask his address, as all emails I receive from normal people never have this phrase (with one exception). The one exception to this is a mailing list I have subscribed to. It also has "from unknown" in a Received header but since I have a filter that directs all mail from that mailing list into a separate mailbox, and that rule occurs before the one here, it still works as it should.

Like I said, this rule is catching about 90% of all junk mail that gets through normal spam filtering, and it has not once redirected a non-spam email to the junk box. I see no reason why it shouldn't work for you too.

Close Name:Guest
Subject: Another route..

..is to use Gmail, which filters 90% of spam pretty efficiently. Using Apple's Mail, it filters out all the rest, bar perhaps one or two a week (I use three busy accounts which attract about 700 spam mails a week. I used to use SpamSieve in conjunction with Entourage and wasn't happy with it.

Close Name:Guest
Subject: Agreed - SpamSieve rules

I've been a very happy customer with SpamSieve.

Part of my job is to be fluent in multiple email applications. By using SpamSieve, I'm able to use one spam corpus for all the apps (Apple Mail, MS Entourage, Qualcomm Eudora, GyazMail, GnuMail) - a big time-saver. I've found that it works extremely well and learns quickly, and for $25 you get one spam filter that works with everything.

Close Name:Guest
Subject: Spam Sieve review

How does this compare with Spamnix, or have you tested it?

Close Name:Guest
Subject: What about SpamNix?

Have you tested SpamNix?

Close Name:Jason Varner -   TMO Mac Specialist Posts: 1125 Joined: 05 Jan 2002
Subject:

It's been my view for a long time that spam filtering should be performed server-side. This has the notable advantages of allowing one to use, as the Guest above put it "a single spam corpus" with any mail client. This also helps bandwidth-limited and dialup users by cutting out the spam at the outset, before it ever gets to the client.

My preferred server-side spam solution is SpamAssassin and an IMAP server. IMAP is particularly nice because it stores all messages server-side by default, as opposed to POP, which defaults to deleting messages once downloaded. IMAP also has much better mailbox support on the server side. (The tendency of IMAP servers to store mail on the server is actually probably one reason why mail providers seem to shy away from it - people can be packrats with their email, and all that old archived cruft would take up a lot of space.)

I have been using SpamAssassin for some months now, and even at the outset, it sucked most of the incoming spam into my spambox. Granted, the spam I get is predominantly difficult to classify by feature (not enough sensible text), so the DNS blacklists are doing most of the work for me. However, once I had the requisite number of spam messages (200) to start using the Bayesian content analysis features, I can count the number of spam that have slipped through on one hand. (And one of those made it through just barely, because it was nothing but a link and a bunch of text cribbed from The Hobbit!). No false-positives for me, either (though in previous testing, I did see one that was a club newsletter that had enough spamlike features that it could easily be mistaken for spam. This was also without the Bayesian filter enabled.)

It's really too bad mail providers don't seem to be more interested in combatting spam at the server level. It seems like a much more sensible approach.

-JMV

Comment on this Article


You cannot edit your comments.   You cannot delete your comments.
Log in | Register | Having Problems? Reset TMO Cookies & Try Again
Username:   Password:   Log me on automatically each visit   

You are not logged in, and this post will appear as "Guest." Log in with your username and password from the TMO forums. If you do not have a username, you can register here.
Please note that guests are limited to including a maximum of two URLs per post.


Post A Comment
  Subject


  Your Comments



Please enter the word exactly as you see it in the image above. Registered users aren't prompted for this. Having trouble reading the image get a new one.


Recent Headlines - Updated January 9th

Fri, 8:31 PM
Photo Gallery - Cirque du Mac 6.0 with the Macworld All Star Band!
5:45 PM
Macworld Expo 2009 - It’s About Time Products Shows Switcher and iPhone 3G Training Applications
5:30 PM
News - ApiMac Releases Protect Files 1.0 Security Utility
3:09 PM
Photo Gallery - Macworld Photo Gallery: Day 3 - Mac Art, Music, More
12:55 PM
News - launch2net 1.8.8 Adds ZTE Modem Support
12:40 PM
Analysis - Optical Illusions and Glossy Displays
11:43 AM
News - Apple Launches iLife ‘09 Up-to-Date Program
8:00 AM
Reports - A Perspective on Mac OS X Security from an Expert
Thu, 5:56 PM
Macworld Expo 2009 - Orbicule Announces Undercover 3 with Location Technology
5:49 PM
News - TOM BIHN, Waterfield Designs Release 17” Unibody MacBook Pro Notebook Cases
3:50 PM
Macworld Expo 2009 - Targus Shows File Share Cable for Mac
3:40 PM
Macworld Expo 2009 - Blackmagic Demonstrates Video Recorder

The Mac Observer Reader Specials