From owner-freebsd-current Tue Jul 15 00:00:45 1997 Return-Path: Received: (from root@localhost) by hub.freebsd.org (8.8.5/8.8.5) id AAA10375 for current-outgoing; Tue, 15 Jul 1997 00:00:45 -0700 (PDT) Received: from ady.warp.starnets.ro (ady.warp.starnets.ro [193.226.124.33]) by hub.freebsd.org (8.8.5/8.8.5) with ESMTP id AAA10352 for ; Tue, 15 Jul 1997 00:00:15 -0700 (PDT) Received: from localhost (ady@localhost) by ady.warp.starnets.ro (8.8.5/8.8.5) with SMTP id JAA01260 for ; Tue, 15 Jul 1997 09:59:07 +0300 (EEST) Date: Tue, 15 Jul 1997 09:59:07 +0300 (EEST) From: Penisoara Adrian To: current@hub.freebsd.org Subject: Re: UU.NET, SPAM, and Cyberpromotions (was Re: usregsite.com) In-Reply-To: <199705231636.JAA07391@phaeton.artisoft.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-current@FreeBSD.ORG X-Loop: FreeBSD.org Precedence: bulk Hi, On Fri, 23 May 1997, Terry Lambert wrote: > > They've stated that they no longer run a public posting host; however, > I have recently received mail from an account of theirs being used by > Cyberpromptions "mailbomber" program; headers were: > > | Received: from 206.13.28.25 > | (1Cust52.Max31.Chicago.IL.MS.UU.NET [153.35.113.180]) > | by mail-gw.pacbell.net (8.8.5/8.7.1) with SMTP id EAA07399; > | Thu, 8 May 1997 04:09:14 -0700 (PDT) Well Terry, they just don't give up; I'm myself a victim today: :From BOOKORDER@imsonline.net Tue Jul 15 09:25:36 1997 :Received: from ns1.allinfosys.com (ns1.allinfosys.com [207.55.155.2]) : by ady.warp.starnets.ro (8.8.5/8.8.5) with ESMTP id DAA00851 : for ; Tue, 15 Jul 1997 03:22:41 +0300 :(EEST) :Received: from ken ([153.36.102.95]) by ns1.allinfosys.com ^^^^^^^^^^^^^^^ : (post.office MTA v2.0 0813 ID# 0-11221) with SMTP id CUO296 : for ; Mon, 14 Jul 1997 19:19:35 -0500 :To: ady@ady.warp.starnets.ro :From: BOOKORDER@imsonline.net :Subject: Do you watch TV? Who doesn't? :Message-Id: RAF1.1_7/14/97 8:20:06 PM_ady@ady.warp.starnets.ro :Content-Type: TEXT/PLAIN charset=US-ASCII :Date: Mon, 14 Jul 1997 19:19:35 -0500 Now guess who's IP is that 153.36.102.95 ? If I do a rev-lookup, then it's "1Cust95.Max12.Detroit.MI.MS.UU.NET"; awfully close to Terry's one. > > I did report it, and haven't seen anything since after the second time > I had to report it to them; I got their canned response, so it may be > that they have taken care of this one. Hmm... Did you manage to change the situation in the end ? > > I think, though, that they are still in the position where they can > be illicitly used as a mail relay. > > I've been mail-bombed by Cyberpromotions for complaining to their > abuse address when they failed to remove me from the lists they sell > their customers, and theier customers refused to honor (or in some > cases provide) a working "remove" address. Why would they do that ? This bunch of jerks [ >:( ] is expecting everyone to accept their junk w/o complains and it's their last wish to get you rid of it. > > Since then, for every intermediate host their program has used as a > relay to get to my host, I've made a (1 month time limited) offer of > free assistance in preventing use as a mail relay by all by approved > hosts. I've helped 6 sites so far. Has that number been changed by now ? > > Currently, I'm working on site/IP based SPAM filtering for a mail > server product that my company has sold into tens of thousands of > installations, so if they choose the install option, Cyberpromotions > and their ilk will be blocked for new installations. I have it on > good authority that similar changes are going into Post.Office and > the default sendmail distribution. Serves them right for SPAMming > their transport providers. 8-). Well, this host's MTA (as you can see it's post.office v2.0) didn't handle this spam; maybe we (?) should warn them... > > Eventually Cyberpromotions will "get it" that sending SPAM to me is > the equivalent of severing whichever line of communication they use > to send to me, and that it's in their economic best interests to > remove my address. Or they will sever them all... either way, I'm > happy. I surely do hope so... > > > Regards, > Terry Lambert > terry@lambert.org > --- > Any opinions in this posting are my own and not those of my present > or previous employers. BTW, shouldn't sendmail/smail/etc be made SPAM proof right in the sources ? I know there are various patches (oh, myself I'll have to deal with this very soon), but there should be a valid option ('antispam) right from the start of installing the MTA... Yep, this has been discussed before and will be discussed from now on for a long time. Ady (@warp.starnets.ro)