Message filtering methods and systems

Abstract

Methods and systems can filter messages, such as electronic mail (email) messages. According to one example, a method reads sender information for an electronic mail message, wherein the sender information comprises a domain name and a first IP address. The method determines a second IP address associated with a web page associated with the domain name. The method compares the first IP address to the second IP address and provides an indication of likelihood that the electronic mail message constitutes spam based on the comparison of the first IP address to the second IP address.

1 . (canceled) 
     
     
         2 . A method comprising:
 reading sender information for an electronic mail message, wherein the sender information comprises a domain name and a first IP address;   determining a second IP address associated with a web page associated with the domain name;   comparing the first IP address to the second IP address; and   providing an indication of likelihood that the electronic mail message constitutes spam based on the comparing the first IP address to the second IP address.   
     
     
         3 . A method according to  claim 2 , further comprising:
 rejecting the electronic mail message based on the comparing the first IP address to the second IP address.   
     
     
         4 . A method according to  claim 2 , further comprising:
 determining geographic location information based on the web page, wherein providing the indication of likelihood that the electronic mail message constitutes spam comprises providing the indication of likelihood that the electronic mail message constitutes spam based on the geographic location information.   
     
     
         5 . A method according to  claim 4 , further comprising:
 determining the geographic location information based on the web page if the first IP address is different from the second IP address.   
     
     
         6 . A method according to  claim 2 , wherein at least part of the method is performed by an end-user computer. 
     
     
         7 . A method according to  claim 2 , wherein at least part of the method is performed by a mail server. 
     
     
         8 . A computer comprising:
 a network connection; and   a processing unit coupled to the network connection and configured to:
 read sender information for an electronic mail message, wherein the sender information comprises a domain name and a first IP address; 
 determine a second IP address associated with a web page associated with the domain name; 
 compare the first IP address to the second IP address; and 
 provide an indication of likelihood that the electronic mail message constitutes spam based on the comparing the first IP address to the second IP address. 
   
     
     
         9 . A computer according to  claim 8 , wherein the processing unit is further configured to reject the electronic mail message based on the comparing the first IP address to the second IP address. 
     
     
         10 . A computer according to  claim 8 , wherein the processing unit is further configured to:
 determine geographic location information based on the web page; and   provide the indication of likelihood that the electronic mail message constitutes spam based on the geographic location information.   
     
     
         11 . A computer according to  claim 10 , wherein the processing unit is further configured to determine the geographic location information based on the web page if the first IP address is different from the second IP address. 
     
     
         12 . A computer readable medium on which are embedded instructions for execution by a computing device, the instructions comprising:
 instructions to read sender information for an electronic mail message, wherein the sender information comprises a domain name and a first IP address;   instructions to determine a second IP address associated with a web page associated with the domain name;   instructions to compare the first IP address to the second IP address; and   instructions to provide an indication of likelihood that the electronic mail message constitutes spam based on the comparing the first IP address to the second IP address.   
     
     
         13 . A computer readable medium according to  claim 12 , wherein the instructions further comprise instructions to reject the electronic mail message based on the comparing the first IP address to the second IP address. 
     
     
         14 . A computer readable medium according to  claim 12 , wherein the instructions further comprise:
 instructions to determine geographic location information based on the web page; and   instructions to provide the indication of likelihood that the electronic mail message constitutes spam based on the geographic location information.   
     
     
         15 . A computer readable medium according to  claim 14 , wherein the instructions further comprise instructions to determine the geographic location information based on the web page if the first IP address is different from the second IP address.