Date: Tue, 15 Jul 1997 09:59:07 +0300 (EEST) From: Penisoara Adrian <ady@warp.starnets.ro> To: current@hub.freebsd.org Subject: Re: UU.NET, SPAM, and Cyberpromotions (was Re: usregsite.com) Message-ID: <Pine.BSF.3.96.970715092751.1216B-100000@ady.warp.starnets.ro> In-Reply-To: <199705231636.JAA07391@phaeton.artisoft.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Hi,
On Fri, 23 May 1997, Terry Lambert wrote:
>
> They've stated that they no longer run a public posting host; however,
> I have recently received mail from an account of theirs being used by
> Cyberpromptions "mailbomber" program; headers were:
>
> | Received: from 206.13.28.25
> | (1Cust52.Max31.Chicago.IL.MS.UU.NET [153.35.113.180])
> | by mail-gw.pacbell.net (8.8.5/8.7.1) with SMTP id EAA07399;
> | Thu, 8 May 1997 04:09:14 -0700 (PDT)
Well Terry, they just don't give up; I'm myself a victim today:
:From BOOKORDER@imsonline.net Tue Jul 15 09:25:36 1997
:Received: from ns1.allinfosys.com (ns1.allinfosys.com [207.55.155.2])
: by ady.warp.starnets.ro (8.8.5/8.8.5) with ESMTP id DAA00851
: for <ady@ady.warp.starnets.ro>; Tue, 15 Jul 1997 03:22:41 +0300
:(EEST)
:Received: from ken ([153.36.102.95]) by ns1.allinfosys.com
^^^^^^^^^^^^^^^
: (post.office MTA v2.0 0813 ID# 0-11221) with SMTP id CUO296
: for <ady@ady.warp.starnets.ro>; Mon, 14 Jul 1997 19:19:35 -0500
:To: ady@ady.warp.starnets.ro
:From: BOOKORDER@imsonline.net
:Subject: Do you watch TV? Who doesn't?
:Message-Id: RAF1.1_7/14/97 8:20:06 PM_ady@ady.warp.starnets.ro
:Content-Type: TEXT/PLAIN charset=US-ASCII
:Date: Mon, 14 Jul 1997 19:19:35 -0500
Now guess who's IP is that 153.36.102.95 ? If I do a rev-lookup, then
it's "1Cust95.Max12.Detroit.MI.MS.UU.NET"; awfully close to Terry's one.
>
> I did report it, and haven't seen anything since after the second time
> I had to report it to them; I got their canned response, so it may be
> that they have taken care of this one.
Hmm... Did you manage to change the situation in the end ?
>
> I think, though, that they are still in the position where they can
> be illicitly used as a mail relay.
>
> I've been mail-bombed by Cyberpromotions for complaining to their
> abuse address when they failed to remove me from the lists they sell
> their customers, and theier customers refused to honor (or in some
> cases provide) a working "remove" address.
Why would they do that ? This bunch of jerks [ >:( ] is expecting everyone
to accept their junk w/o complains and it's their last wish to get you
rid of it.
>
> Since then, for every intermediate host their program has used as a
> relay to get to my host, I've made a (1 month time limited) offer of
> free assistance in preventing use as a mail relay by all by approved
> hosts. I've helped 6 sites so far.
Has that number been changed by now ?
>
> Currently, I'm working on site/IP based SPAM filtering for a mail
> server product that my company has sold into tens of thousands of
> installations, so if they choose the install option, Cyberpromotions
> and their ilk will be blocked for new installations. I have it on
> good authority that similar changes are going into Post.Office and
> the default sendmail distribution. Serves them right for SPAMming
> their transport providers. 8-).
Well, this host's MTA (as you can see it's post.office v2.0) didn't
handle this spam; maybe we (?) should warn them...
>
> Eventually Cyberpromotions will "get it" that sending SPAM to me is
> the equivalent of severing whichever line of communication they use
> to send to me, and that it's in their economic best interests to
> remove my address. Or they will sever them all... either way, I'm
> happy.
I surely do hope so...
>
>
> Regards,
> Terry Lambert
> terry@lambert.org
> ---
> Any opinions in this posting are my own and not those of my present
> or previous employers.
BTW, shouldn't sendmail/smail/etc be made SPAM proof right in the
sources ?
I know there are various patches (oh, myself I'll have to deal with this
very soon), but there should be a valid option ('antispam) right from the
start of installing the MTA...
Yep, this has been discussed before and will be discussed from now on
for a long time.
Ady (@warp.starnets.ro)
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.3.96.970715092751.1216B-100000>