4 ms·
Ask HN: How to Block Spam Mails?
For my SaaS, a lot of fake accounts are created which seem to be automated bots from @mail.ru @bk.ru @list.ru etc domains.
Now of course I could set up a manual block list or so, but I was wondering how you are doing it?
Is there an existing service or at least a good block list that I can already use?
Thanks!
[Edited for clarity]
- joey_spaztard 1y agoFor clarity: Do you mean "I want to block incoming spam email to my email addresses" or "I operate an email mailing list and I want to block bots from joining the list" ?
- mpaepper 1y agoI mean I run a SaaS and get many fake registered users / bots. What I did for now is: - Added a honeypot field (invisible to users, but bots might fill it) -> if it's filled, instant reject - Added a check for spammy domains -> if it's from such a domain, instant reject
- ciwolex 1y agoThis is smart. Are there scenarios you've noticed that it doesn't work?
- mpaepper 1y agoI've just added it :D But I would guess that there will be new domains that I don't have in my blocklist and then I need to add them again and I would like to have this as a crowdsourced effort.
- ATechGuy 1y agoHoneypots may be skipped by bots. My simple solution to this is to create an input/text field in the account creation form, add a placeholder text "I am human" and ask the user to enter what they see (i.e., placeholder text). I've never received any fake/spam account since I incorporated this technique.
- curious_curios 1y agoPut your site behind cloudflare with geo and bot blocking should eliminate the vast majority of them.
- mpaepper 1y agoYeah, Cloudflare is a good idea, that should probably help block them before even getting to the site.
- Bender 1y agoThis is not an answer to your question but existing sanctions should allow you to configure your application to reject any email addresses that use the .RU TLD. Not a long term fix but may buy you time to configure restrictions on the front end whichever direction you decide to go.