Slashdot Mirror


Mega-ISPs And Spam Support

WH writes: "Over at CNET there's an article about how PSINet and other huge ISPs have been secretly signing deals to provide spammers with internet connections." The other one I've seen is AT&T signing a contract with someone -- there were restrictions, but it's still troubling to see people's appetites for money overwhelming their ability to discern good vs. bad business practices.

75 of 200 comments (clear)

  1. How do we fight this? Sick the cops on 'em... by crovira · · Score: 2

    My sendmail doesn't forward but my li'l home server could still get choked by idiotic Spam-bot attempts to get it to do so.

    It also returns the mail to whoever sent the spam. That ties up the line in two directions. What I'd like is for sendmail to return the first message from a location and to swallow all further attempts to forward mail from the same location. I'm looking at "sendmail for Linux" to figure out how to make it do that. That takes care of my end of it.

    The other end is to make spammers pay for each message they send. You saw the numbers: Up to 20,000,000 emails in one night in a single mailing. That's $660,000. that they don't have to pay the post office.

    They paid a mere $27,000 to PSI Net for the priviledge of saving themselves over $500k+ per night and annoying the sh*t out of us?

    Sick the authorities on them for email fraud and depriving the post offices of the world of up to $234,960,000 per year in revenue.

    Even a paltry 5% sales tax on this amount is $12,500,000. Stolen straight from government coffers. And that's just from one of these ghastly Bozos. There plenty of them. This is a big enough crime to get the FBI, Interpol and governments from around the world interested.

    --
    MSBPodcast.com The opinions expressed here are my own. If you don't like 'em... Think up your own stuff.
  2. Re:Government control by Sloppy · · Score: 2

    I think this would be a place where we need the government to step in.

    Here's why I disagree: if government is to step in, then that means that society wants it, right? But if society really wants it, then society can fix it itself. Just use blacklists, or require crypto sigs on mail that you receive and look it up in a trustworthy-vs-spammer database, etc.

    IMHO, the only advantage that is gained by using government for this, is not that it forces society to deal with the problem (since, if government is involved, then unless there's corruption, it means that society already wants to deal with it). Rather, it forces society into a consensus of how to deal with the problem. The problem I have with that is that when government tries to dictate how to deal with a problem, they come up with crap (e.g. DMCA).

    You may think that your government solution for how to deal with the problem is perfect, but it has holes. For example, if the spam doesn't have a valid return address, and you trace it to having come from a relay outside of USA, what can you do? You just end up with an unenforcable law. I hate unenforcable laws.


    ---
    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
  3. Re:Another option for dealing with spam by Sloppy · · Score: 2

    I get legit email from people I've never conversed with before asking questions or commenting, and I'd rather not lose those.

    But if enough people blacklisted those people's ISP, then those people whose mail you risk losing, would go to another ISP (or their ISP would do what it takes to get off the blacklist).

    This reminds me of the prisoner's dilemma. If everyone adopted the blacklist strategy, then it would become the best strategy, and mutants who didn't use the blacklist would be the ones who suffered (they would get spam, but no additional legit email). But if most people don't use the blacklists, then the few people who do use it, end up losing.

    Argh.


    ---
    --
    As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
  4. Behind Enemy Lines - a veiw of a spammer by wayne · · Score: 2
    Have you ever wondered what kind of person would be a spammer? Ever wondered how they think?

    I found this site a while back and found it very interesting. Check out Behind Enemy Lines.

    --
    SPF support for most open source mail servers can be found at libspf2.
  5. Re:I've known this all along.... by kaip · · Score: 3

    This means, the "individual" gets a gentle slap on the wrist (if that), and they go about their business. PSI, UUNet, and all the big ISPs don't give a rat's ass about spammers. That's why a *very* good percentage of spam you get has 38.x.x.x or 63.x.x.x in the headers. 38 being PSI, and 63 being UUNet. Try it sometime. It'll suprise you.

    According to the SpamCop statistics the biggest sources of spam are currently:

    1. UU.NET (78,521 complaints)
    2. DIALSPRINT.NET (9,638 complaints)
    3. USS.NET (8,708 complaints)
    4. BELLSOUTH.NET (8,348 complaints)
    5. BELLGLOBAL.COM (6,404 complaints)
    6. PSI.COM (6,139 complaints)
    7. POPSITE.NET (5,733 complaints)

    UU.NET wins this contest easily... :(

  6. Popsite.net! by macdaddy · · Score: 2
    Like I've been telling people for years now, popsite.net is about as spam friendly as it gets! I've reported hundreds of pieces of spam to them and never once got a response. I've CCd their domain billing/admin/tech contacts and never once got a response. Heck one time I even CCd the president (president@whitehouse.gov, not com! :) ) and talked about how there should be federal laws against unsolicited commercial email and the providers that support it. Nothing. Nadda. Zilch. Go to their website and read the page. Sure they make it sound like they aren't the bad guys, be you and I both know that's a crock of spam.

  7. PSI I don't understand, but with AT&T... by squiggleslash · · Score: 2
    On average, I receive approximately 7 automatically dialed calls every day (detected by the fact none leave answerphone messages or call back immediately combined with the fact that I don't get that many human callers and people who know me generally are sophisticated enough to use them and start talking after the bleep). For the few I answer, 90% are AT&T.

    Let's be honest, AT&T is a spammer. It has been well before the term existed, before even the Internet was popularised enough to be spams originator. It sends unsolicited messages to people who don't want them. It sends them 6, 7 times a day. It receives a negative reply to every message but still doesn't stop.

    I assume the same is true of Worldcom as well, but I currently have their long distance phone service so they don't call me. Curiously Sprint don't call me either.

    I don't think we should be remotely surprised AT&T is happy to accept spammers as customers. They've been profiting from older forms of spam for decades, there's clearly no code of ethics that's stopping them from doing this, and it's money for nothing. All we can do is complain, tie up their system administrators and support lines with so many complaints about the behaviour that it becomes uneconomic to continue. And I don't know what the chances of us achieving that are, but with enough spammers and with complaint fatigue being real possibilities, it's questionable we stand a chance at all.
    --

    --
    You are not alone. This is not normal. None of this is normal.
    1. Re:PSI I don't understand, but with AT&T... by russ-smith · · Score: 3
      You can sue them for the phone calls see

      ATT Called.com

    2. Re:PSI I don't understand, but with AT&T... by squiggleslash · · Score: 2
      My favourate anti-spam site is/was (haven't looked at it in a while) Junkbusters which gives a lot of information on how to prevent telemarketing calls and other forms of spam (in the "unwanted advertising" sense of the term.) The thing is, I want AT&T to pay for an act they do to their customers regardless of who knows about the anti telemarketing legislation or who doesn't. So I accept the calls, or rather my answer phone usually does, and it racks up the cents that AT&T pays Bellsouth in interconnection fees, and the dollars in money spent on sales operators, and ties up operators and lines so they can't be spent on other calls. Meanwhile, AT&T reduces its chance of winning me over as a customer every time it does this.

      I am thinking of asking them to send copies of their "Do not call policy", which they're obliged to do, without asking them to put me on their "do not call" list. That means AT&T giving free money to the USPO as well as the phone company.

      Which means lower local phone charges and lower stamp prices, so everyone wins. ;)
      --

      --
      You are not alone. This is not normal. None of this is normal.
    3. Re:PSI I don't understand, but with AT&T... by British · · Score: 2

      I recently got rid of my long distance service(Excel), and ever since then, AT&T has been calling me off and on, sometimes up to 3 times a day, INCLUDING SATURDAYS! Even when I bsed with one of the AT&T reps and eventually said I wasn't interested and hung up on her, I still get calls from them. I know each time since it always shows up as "UNAVAILBLE" on my caller ID box.

      I know, I should ask them to put me on their "do not call" list. Hopefully they won't sell that list(of legitimate phone numbers!) to someone else.

  8. Re:How do we fight this? by Floyd+Turbo · · Score: 3

    Subscribe to the MAPS RBL. Use their BGP feed to drop traffic. This way, the outage is coordinated with vast numbers of other RBL subscribers. As a result, it hits the spammers much harder and gets action taken much more rapidly.

    This will still cost you legitimate traffic, but there's no way around that. You simply have to bite the bullet and suck up some short term costs for the long-term health of the net.
    --

  9. Re:Even virgin accounts are spammed by Stormie · · Score: 2

    A hotmail acount I never used, is spammed by +- 30 emails a day.

    Same here, I created a Hotmail account intending to use it while my-deja.com was down for upgrades. The upgrade got postponed, I didn't use the Hotmail account for a while, but when I went to first send mail through it, the box was full of spam.

    The account name is only 4 letters, thus I suppect that the spammers spam form A to ZZZZ.

    Well, my account name was 14 letters long, so I suspect rather than Hotmail sells the addresses themselves as an extra revenue stream.. ;-)

  10. Re:Whats so bad about spam? by Duckling · · Score: 2

    Yes, I do; when the amount of advertising completely overwhelms and drowns the content.
    Sometimes it seems to me like we're headed that way with spam as well.

    Besides, with TV / magazine ads, I have the option
    to completely forget about them, ignore them.
    Not so with spam. I have to invest time and effort
    to filter and delete all this junk.

    If someone was to ring you up 20 times a day to
    throw different salespitches, you would probably
    want to outlaw phone sales, wouldn't you?

  11. Free (but not as in beer) Speech by Rupert · · Score: 2

    Spam costs me money. It costs me time and bandwidth, it costs my ISP bandwidth and disk space.

    I'm absolutely for free speech, but I draw the line at being forced to accept collect calls from anyone with something to sell.

    If I sign my business up with a cheap hosting company, and I end up with the same IP address as goatse.cx, I can expect to get blocked by censorware. If I think my customers are the kind of people who use censorware, then I have to find a different host.

    I personally think MAPS is the right way to go. You're free to use it, or not, or use your own list. The spammers can keep making their collect calls, but now I don't have to pick up the phone.

    --

    --

    --
    E_NOSIG
  12. Re:Even virgin accounts are spammed by shippo · · Score: 2
    I set up one last year, mainly to allow me mail access when working away from home. I deliberatly chose a jumble of alpha-numerics, yet got spammed almost instantly. There is no way they could have guessed this account, unless they tried every 6 character alphanumeric string possible.

    Oddly my main ISP email address got on a Chinese spam list a few days after joining, and I still get chinese spam to this address two or three times a week.

    I now use this email address for all web activity where security is not needed.

  13. Re:Some People have no clue by Alien54 · · Score: 5
    I'm beginning to lean towards the shoot them in the face solution.

    I understand. the advantage is that the small fry cannot go over seas. and other countries may get into the act.

    [insert visions of KGB agents hunting down russian spammers]

    Well. there is always the following option, as posted on Segfault back in april 99:

    Mafia Don Announces New Anti-Spam Venture

    As the NSA and FBI fear, traditional crime organizations have been incorporating high-tech communication into their organizations. Although Janet Reno was quoted stating "This is law enforcement's worst nightmare.", techies around the world are sure to be pleased with one New York Syndicate's new venture.

    It all started when Don Dominiqi signed onto his AOL account last Monday morning. His inbox was filled with "Make Money Fast", "Viagra On-Line", and "Teenybopper Web Sex" ads. Lost amidst the drivel was an important note detailing a non-taxed shipment of Marlboros, which were later confiscated by the BATF. Little did he know, as he shouted "Bring me the left hand of this f*cking gutterslime!" what would become of it all.

    Later that same day, Billy "Run!" Brutekowski and Larry "My Eyes!" Plucker cornered the pasty-faced offender of the Family in a small cyber cafe in Grenich Village. "This was by far the creepiest place the Boss has ever sent us." stated Billy, who only spoke on condition of anonymity. "Everyone in this place looked pale and sickly, like they had already been 'spoken to'. We asked for this punk, and several people quickly pointed him out. Most of the scum we find in gin joints aren't so quick to finger one of their own," Billy continued.

    "He must not watch much TV, because this sh*t didn't even flinch when we came to the corner he was hiding in," Larry proceeded to relate. "We dropped this sheet of paper the Boss had given us on his table and he says 'So you guys want to make money fast, eh?' He puts out his and says to give him $20. This scrawny little dirtball tells me to give him $20!" Larry was quite agitated at this part in his story, and his description of how Sammy Spammer's hand fell off was quite garbled.

    Billy continued, "Up till now, this was a routine visit. We was just being playful. The weird sh*t began when we tried to leave." "This pimply faced kid blocks the door as we try to leave, and I'm thinking to myself 'Great, a f*cking Karate Kid hero. He just stand there, and then he hands me a $5 bill." Billy pulls out the $5, and holds it like it is his first quarter from his favorite grandmother. "They lined up after that, and we had $175 in 'tips' when we left the joint."

    Later that day the Don himself visited the café, unwilling to believe the story. Although the details are unclear, sources at the café indicate that the Don has hired them to build and host a new Anti-Spam site. Through a SSL transaction system, the site will accept spam complaints and credit card donations towards 'solutions to problems'. Multiple complaints against the same spammer are added to the total until an acceptable solution has been found.

    Larry tells us that a typical $250 solution is a broken hand, and for $2000 all anyone ever sees again of 'the problem' are his shoes.

    The URL is to be announced next week, and the cyber café's phones have been jammed with requests for more information.

    --
    "It is a greater offense to steal men's labor, than their clothes"
  14. Even virgin accounts are spammed by Shadow-Wing · · Score: 3

    A hotmail acount I never used, is spammed by +- 30 emails a day. The account name is only 4 letters, thus I suppect that the spammers spam form A to ZZZZ.

    --
    Do not underestimate the power of the Dark side
    1. Re:Even virgin accounts are spammed by d00f · · Score: 3
      I'd suggest much of the problem lies in the mail providers being unwilling to or unable to use measures to stop spam.

      I own a small webmail company (fastworks.com) and we routinely get spammed. There are a number of methods people use and a number of ways to combat them.

      Spammers will go out and get a dialup account, start spamming after the ISP's abuse department has gone home (usually a Friday night) and continue until someone finally pulls the plug.

      These spammers will either send the spam by connecting directly to the victim's SMTP server or by using a 3rd party relay.

      We combat this by subscribing to the RSS, RBL and DUP services at mail-abuse.net.

      Mail sent via a dialup connection is often denied at the outset because many dialup connections are in the DUL. Open relays are often in RBL and RSS.

      These two measures alone cut out more than 80% of our incoming spam.

      Another popular way (among spammers) is to try the brute force method. They connect to a service with a few million subscribers and blast away with a dictionary-type attack. This usually causes the most problems on a network side because the victim mail server has to contend with 100,000 plus bounces in a few hours. This tends to fill mail queues quite fast.

      Some of the most popular mail systems (which shall remain nameless) combat this problem by not bouncing after a threshold has been reached. This, although a simple method still allows the spam to get through.

      I refuse to believe that I'm any smarter (maybe faster, but not smarter) than the folks running yahoomail and hotmail, but it makes a lot more sense to me to have the delivery agent blackhole (delete) this spam as it arrives based on the source IP, email address and even the content. It doesn't take much logic to detect a host that sends you 100,000 messages in an hour where 90% of them bounce.

      This cuts out 99.9% of bruteforce spam. It saves us on disk space since the spam is never delivered, and it saves on CPU cycles since the SPAM lands in /dev/null as soon as it is received rather than bouncing all over kingdom come.

      I believe a very effective way to stop spam is to regulate that each ISP must specify valid SMTP servers much in the same way there is a whois database with all the DNS servers listed. If we do this, then organisations can easily choose to deny all messages coming from dialup connections and it leaves spammers with only one method of sending spam. They would have to use their local ISP's SMTP relay to get their spam out. This would be trivial for the ISP to find and shut down. It would also bring stronger incentives to monitor and stop such activity if their own SMTP servers were being hit.

      Now if only we can stop ICQ spam...

      -Michael

    2. Re:Even virgin accounts are spammed by tetrad · · Score: 2
      Well, my account name was 14 letters long, so I suspect rather than Hotmail sells the addresses themselves as an extra revenue stream..

      I suspect this is true, because I've experienced the same thing. A Hotmail address that I gave to nobody has received an incredible amount of spam. The only conclusion is that the spammers got the address from Hotmail itself. (Oh well, you get what you pay for, I guess...)

      What I wonder is whether this actaully backfires on Hotmail? In one of my accounts I get upwards of 30 spam messages a day. Multiply this by a few million accounts, and you need some serious hardware to store and process all these messages. Surely in the long run it would have been cheaper not to sell the addresses in the first place?

    3. Re:Even virgin accounts are spammed by M.+Silver · · Score: 2
      you need some serious hardware to store and process all these messages.

      This would account for why Hotmail accounts regularly get tossed from mailing lists... they bounce with a 554 ("Permanent" disk full) every few weeks. It's gotten to where my disconnect notice has a special piece for Hotmail users explaining why they should switch.

      --

      Slashdot's token middle-aged housewife
    4. Re:Even virgin accounts are spammed by Hortensia+Patel · · Score: 2

      Some interesting tidbits here. I have a mail.com account with a fairly unlikely address - not likely to be in a dictionary, and too long for the AAAA-ZZZZ approach. I don't seem to get "random" spam, but what I've noticed is that every time I get a real message, I get a spam message soon afterwards. One-for-one correspondence. Coincidence, or has anybody else noticed this?

  15. MCI and Spammers by Greyfox · · Score: 3

    Back when I was working at MCI (Before the Worldcomm takeover) we had a very strict anti-spam policy. If we got enough complaints about spamming from your domain, we'd cut your ($1600+ a month) internet connection off. That was always something I respected about the company.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  16. I've known this all along.... by Accipiter · · Score: 4
    Oh please. Anyone who has ever forwarded a spam E-Mail to abuse@psi.net or abuse@uu.net knows this. You usually get a first reply stating:

    Your e-mail has been received by [insert isp]'s abuse investigations. You have been assigned ticket number #SpammersAreCoolXorAndRot13. DO NOT REPLY TO THIS E-MAIL. It's automated. So shut up.

    Then, almost like clockwork, a follow up letter arrives:

    This is a follow-up letter from [insert isp]'s abuse team. Ticket number #SpammersAreCoolXorAndRot13 has been dealt with according to our AUP, and action has been taken against the individual.

    This means, the "individual" gets a gentle slap on the wrist (if that), and they go about their business. PSI, UUNet, and all the big ISPs don't give a rat's ass about spammers. That's why a *very* good percentage of spam you get has 38.x.x.x or 63.x.x.x in the headers. 38 being PSI, and 63 being UUNet. Try it sometime. It'll suprise you.

    As for this article, it comes as no suprise to me. UUNet and PSINet have been known to forward your abuse@ complaints to the spammers themselves, and are both well-known spam harbors.

    DIE SPAMMERS, DIE. (Oh, and please take a few Spam-Friendly ISPs down with you. Okay?)

    -- Give him Head? Be a Beacon?

    --

    -- Give him Head? Be a Beacon?
    (If you can't figure out how to E-Mail me, Don't. :P)

    1. Re:I've known this all along.... by JeffL · · Score: 3
      Indeed, the majority of spam I get originates at a uu.net or psinet dialup (except the foreign stuff relayed through a Chinese or Korean government servers), and I get this same annoying response back each time.

      If the institution of higher learning that I am at got some backbone they could probably finance their entire IT budget off the spammers, because it is illegal in this state.

    2. Re:I've known this all along.... by tiny69 · · Score: 2
      UU.NET dial-up servers are used by a few large ISP's. MSN is the largest ISP I know of that uses UU.NET. So an MSN customer will get an IP which will point back to a UU.NET server. Unless the spammers put an MSN email address in the SPAM, there is really no way of determining which ISP is being used (Unless UU.NET looks at their logs).

      In the small town I live in, four different ISP's that I know of use the same UU.NET dial-up server. The only difference is on the users end when they dial-up. Logins are [ISP code]/[user login] (i.e. - MSN/luser). There is no way to effectively add UU.NET to RBL because a LARGE chunk of IP's would be blocked.

      --
      Go not unto/. for advice, for you will be told both yea and nay (but have nothing to do with the question)
    3. Re:I've known this all along.... by sconeu · · Score: 2

      PSINet sells nationwide dialup service to ISPs, *that* is why so much spam originates from their network.

      Yep. PacBell is a 63.xxx.xxx.xxx

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
    4. Re:I've known this all along.... by sconeu · · Score: 2

      So maybe PacBell gets their block for UUNet. But at home, my DSL line is 63.xxx.xxx.xxx

      --
      General Relativity: Space-time tells matter where to go; Matter tells space-time what shape to be.
  17. Re:So what's new? by swb · · Score: 2

    They're in it for the money. They make tons of money selling WATS lines to telemarketers and other phone-annoyers, why shouldn't they make money off of spammers?

    My understanding is that if there's money to be made off of it, corporate America will do it and grease congress to make it legal and then justify it by saying "we're in a legally sanctioned business".

    Anybody who thinks that "business ethics" means anything more than "lying or stealing without getting caught" is living in fantasy land. Of course I think it *ought* to mean more than that, but the hard reality is that it doesn't.

  18. Re:How do we fight this? by fatphil · · Score: 2

    What happened to the blacklist of 'spammer' domains that was constantly kept up to date.
    (With its oh so memorable FLA name!)

    My "ISP" has the following 550 messages waiting for you if you connect to its SMTP port from the wrong location

    550 We do not accpet mail from Yahoo.com a known spammer domain.

    Anyone with their own SMTP port can implement this.

    FatPhil

    --
    Also FatPhil on SoylentNews, id 863
  19. Kuro5hin also had this by John+Jorsett · · Score: 2

    Kuro5hin had a story about this on Nov. 1. Here .

  20. Some People have no clue by Alien54 · · Score: 2
    The spammer made this observation in passing:
    "We'll send out between 5 (million) and 20 million emails at a time and take a lot of heat from people whining and complaining."
    as I noted, no clue at all.

    This is why I support the idea of a spammers license. This point of the spammers license is not to legalize spam. The point is to get a legal address where they can be billed for spam, and make it legal to bill the spammers for the traffic at each step of the chain, including the recipient. Enforce the collection via you favorite government agencies - say the IRS and the ATF for example (take your pick). Sufficiently high billing rates would make it rather unprofitable.

    .

    "Never apply a Star Trek solution to a Babylon 5 problem"

    --
    "It is a greater offense to steal men's labor, than their clothes"
  21. Let yourself be blackmailed? Dumb, dumb, dumb. by Tau+Zero · · Score: 2
    If you could give giant ISPs more money NOT TO carry spammers than the spammer can give them TO carry them, then perhaps they might listen to your arguments.
    Once you pay the danegeld, you never get rid of the dane. I like the idea someone posted for dealing with Canter & Seigel better.
    --
    --
    Time is Nature's way of keeping everything from happening at once... the bitch.
  22. Re:How do we fight this? by cetan · · Score: 2

    I don't really get spam, so I guess I don't care. People can subscribe to RBL/MAPS and block my legit emails if they want I guess, but I don't see spam as ever stopping. Filter early and filter often that's the only way to deal with it.

    --
    In Soviet Russia...michael would be rotting in Siberia!
  23. ISP's that do this sould LOSE BIG! by gabrieltss · · Score: 2

    I think any ISP that starts this garbage should have all it's users LEAVE! Then they should be DDoS'ed. Spam is NOT free speech it is HARRASEMENT! I think that These ISP's should also be sued for harboring criminals - people who harrass others. Since they are signing contracts with these scum it would not be hard to get suppeanas to get the name, address, phone numbers of these scumbags to sue them for harrassment - then sue the ISP for harboring criminals.

    That would teach 'em!

    --
    The Truth is a Virus!!!
  24. MAPS by lpontiac · · Score: 2
    Any moves to blacklist these guys yet?

    Of course, suing MAPS seems to be coming into fashion, and I could the the shit really hitting the fan in this situation. Hopefully, though, things would go the right way and a precedent would be set in favour of blocking prominent domains.

    And it would be fun to watch the telco suits squirm like the worms that they really are.

  25. Re:Government control by Shotgun · · Score: 2

    Here's why I disagree: if government is to step in, then that means that society wants it, right? But if society really wants it, then society can fix it itself. Just use blacklists, or require crypto sigs on mail that you receive and look it up in a trustworthy-vs-spammer database, etc.

    So instead of enforcing a law that says everyone must identify themselves (or at least their originating address), you would have us work at one level removed from the problem. After half the people in the world have been spammed, the spammer's name can go into a blacklist. Of course, what will be blacklisted if no name was sent, and what's to stop them from using another throw away account.

    IMHO, the only advantage that is gained by using government for this, is not that it forces society to deal with the problem (since, if government is involved, then unless there's corruption, it means that society already wants to deal with it). Rather, it forces society into a consensus of how to deal with the problem. The problem I have with that is that when government tries to dictate how to deal with a problem, they come up with crap (e.g. DMCA).

    e.g., traffic laws (what we have now is so much worse than the early days of the car when people could just cross the intersection whenever they liked, isn't it?).

    e.g., environmental control laws (it is much better when companies get to decide when their waste is too toxic for the environment, isn't it?)

    I could go on with a long list of good laws that lead to an orderly and civil society, but suffice it to say that not all laws are bad. Your slander of the entire legal system supported by a single example pushed through by powerful individuals in a manner that, if not corrupt, is at least questionable, does not give due credit to a system that has served us well for two centuries. Right now we have a tension in how people should interact. It is a proper role for the government (the organization appointed to add order to how we interact) to add order to this interaction.

    You may think that your government solution for how to deal with the problem is perfect, but it has holes. For example, if the spam doesn't have a valid return address, and you trace it to having come from a relay outside of USA, what can you do? You just end up with an unenforcable law. I hate unenforcable laws.

    If it becomes too much of a problem, you can block the entire domain at the US borders? We can nuke that country? How about, we exercise trade sanctions or even enter into a treaty with said country? Since the citizens of that country would most likely have the same problems that we are, maybe we could get them to implement a compatible law.

    BTW, when was the last time you got a fax without the transmitting number being printed on it? All fax machines, and programs automatically add the originating phone number because companines large enough to make a profit selling these consumer products don't want to run up against the law. A lone spammer on AOL may spurn the law, but do you think PSINet or AT&T would do it openly without getting paid some fairly high dollars? And if they get paid that much, that means that the cost to the spammer will be increased, which should cause a decrease in the quantity of spam. Which in the end is all that we really want anyway.

    --
    Aah, change is good. -- Rafiki
    Yeah, but it ain't easy. -- Simba
  26. Why are they not on the RBL? by molog · · Score: 2
    Really, if anyone should be put on it it is them. UU.NET is the ogrigonator of nearly 80% of the spam I get. Of course I guess I could set up my own mail server and take care of it myself.
    Molog

    So Linus, what are we doing tonight?

    --
    So Linus, what are we going to do tonight?
    The same thing we do every night Tux. Try to take over the world!
  27. Re:Spam wouldn't be so bad if... by arcade · · Score: 2

    Bullshit. Spam is bad as long as its non-invited. Yesterday, "nissan computer corp" spammed me because of nissan auto wants to shut'em down. Guess what? ncc is now one of my sworn enemies, and i've complained to their ISP's, simply because I don't want their spam.

    If they had gone other ways than spamming, I would've supported them. But, by spamming, they made me one of their enemies.


    --

    --
    "Rune Kristian Viken" - http://www.nwo.no - arca
  28. That's what I did by ch-chuck · · Score: 2

    a dialup & email account I had since 1994, from a small startup ISP, was recently sold to Earthlink, notorious for allowing spam - I prefer the local FreeBSD Mom&Pop shop (w/ roots going back to BBS days) anyway, wasn't using the dialup anymore, the email address was on many spam lists, all signs said CANCEL, and good riddance it was.

    --
    try { do() || do_not(); } catch (JediException err) { yoda(err); }
  29. Re:How do we fight this? by cetan · · Score: 2

    Exactly. My main email all comes from my yahoo account. I have found it very useful, good uptime, and one can setup a great set of filters. I get maybe 1 spam a month to my inbox (all the rest is routed to the trash which I never see). I find web-based email much easier to get to than a shell because you don't always have SSH handy.

    --
    In Soviet Russia...michael would be rotting in Siberia!
  30. Another option for dealing with spam by Masem · · Score: 2
    One of my concerns with implements the RBL or similar block lists is that it will get legitimate email to me in addition to spams; e.g. all or nothing. Because I do run web sites, I get legit email from people I've never conversed with before asking questions or commenting, and I'd rather not lose those.

    I found a procmail recipe set called "SpamBouncer" which has catches for most common spams and can read from RBL and other sources for more spam goodies. Besides being able to install as either a machine-wide or a individual user setup, it can also have several options for dealing with spam: /dev/null, bouncing the mail back to the domain for possible spam dealings, or, my favorite, dumping all spam to a specific mailbox. This way, I can read through the spam that was sent and see if any messages were truly legit (and in a list of subjects which is mostly spam, it's easy to pick out the legit headers, as opposed to picking out spam headers in a bunch of legit mail).

    Only drawback with this is that it is processor heavy; a long overdue fetchmail that pulled up a 100 messages got my CPU usage on a 200MHz to 15+. But the program is actively maintained, usually with weekly updates.

    --
    "Pinky, you've left the lens cap of your mind on again." - P&TB
    "I can see my house from here!" - ST:
  31. Potential for abuse... some assumptions by Some+guy+named+Chris · · Score: 4

    There are over 3,000,000 businesses in the USA which are members of the United States Chamber of Commerce (a href=http://www.uschamber.com/_About+Us/Who+We+Are /default.htm>source). Now, assume that spam becomes an accepted business practice, and 10% of these small businesses decide to send out 1 spam a month. Assume you are only on 10% of these companies spam lists (a generous estimate, since once you get on one, you tend to get on them all).

    3,000,000 small businesses
    * 10% spammers
    ---------
    300,000 spamming small businesses
    * 10% of lists you are on
    ---------
    30,000 spams you get a month
    30 days per month (avg)
    ---------
    1,000 spams per day.

    Now, if you received 1,000 spams per day because spam was legitimized, just how useful is email to you anymore? I'd say not very.

  32. Re:How do we fight this? by Starship+Titanic · · Score: 4

    Yes, rejecting all traffic from ISPs of that size IS possible. Ever heard of the Usenet Death Penalty? Those were applied to a lot of major ISPs and backbone providers, inculding, as it appears, PSI. The same is possible for all net traffic. So how do we fight this? Talk to your ISP's/uplink's friendly sysadmin.

    --
    This is an EX-PARROT!
  33. How to Stop Spam by Greyfox · · Score: 3
    If everyone rejected unencrypted messages by default, spammers would go away. If they were no longer able to send out 2 million spams with one shot to an E-Mail list, spamming would become economically unfeasible.

    But Grey (I hear you cry) we still get junk mail despite the postage. True, but THEY actually have something to sell you. Spam alienates most of the target audience so only shifty companies advertise that way. If they can blast out 2 million E-Mail for free and have 10 or 15 people they can bilk respond, they've made a profit. Require bigger hardware for encryption, plus the time it takes to encrypt to 2 million public keys and all of a sudden, spam gets a lot less economical.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  34. Re:How do we fight this? by IO+ERROR · · Score: 5
    Subscribe to the MAPS RBL.

    Also subscribe to the MAPS RSS and DUL lists. Out of the spam that I get here, 99% of it gets blocked by RSS and DUL, and the other 1% by RBL. I've not received a single spam since installing these.

    If you have sendmail 8.10 or later, do this in your sendmail.mc file:

    FEATURE(dnsbl,`blackholes.mail-abuse.org',`Mail rejected, see http://www.mail-abuse.org/rbl/')dnl FEATURE(dnsbl,`relays.mail-abuse.org',`Open relay rejected, see http://www.mail-abuse.org/rss/')dnl FEATURE(dnsbl,`dialups.mail-abuse.org',`Dialup rejected, see http://www.mail-abuse.org/dul/')dnl FEATURE(`delay_checks')dnl

    You won't see any more spam, and your log file will show the address they tried to send to (this is what delay_checks is for).
    ---

    --
    How am I supposed to fit a pithy, relevant quote into 120 characters?
  35. Spammer Quote by dmuth · · Score: 2
    "We are very up-front about what we do and how we do it," said Cajunnet general manager Eugene Wanless. "I think a lot of people consider it spam. We'll send out between 5 (million) and 20 million emails at a time and take a lot of heat from people whining and complaining. Eventually our ISPs wind up turning us off.
    Ah, the typical spammer mentality. When we're upset about paying (either directly or indirectly) for their crap in our mailboxes, they call it "whining". I think that speaks volumes for the respect, or lack thereof, that this particular spammer has for other peoples' property.

    OBInfo: I maintain a FAQ for figuring out the origin of forged spams and how to complain about them here. I hope folks find it helpful.

  36. Re:Spam wouldn't be so bad if... by DrWiggy · · Score: 2

    If there were a lawyer who was prepared to handle spam cases where they assist in suing the spammer, I'm sure there would be a reasonable market once a few high-priced cases got through.

  37. Re:RBL on a Windows Client? by CharlieG · · Score: 2

    One question - has anyone figured out how to do this on a windows (Figure "The Bat" as the client) system?

    --
    -- 73 de KG2V For the Children - RKBA! "You are what you do when it counts" - the Masso
  38. Make supporting spammers cost them money by Per+Abrahamsen · · Score: 2

    > There in this for the money.

    Yes, which is why we should filter out ISP's who support spammers. This will cost them customers, and thus money.

  39. Re:How do we fight this? by Tackhead · · Score: 2
    > Subscribe to the MAPS RBL.

    And when MAPS refuses to RBL spam sources like uu.net (likely via msn.com dialups without port 25 filtering, but uu.net refuses to identify their rogue resellers), and dialsprint.net (Dialsprint took ~6 months before it finally cleaned up its act and blocked port 25), and att.net (who denied the existence of pink contracts right up until the news broke)?

    RBL is a good start.

    But the /. article is about how you deal with institutions that appear to be "too big" to RBL.

    I say - block 'em yourself. If uu.net gets RBL'd (which will never happen), then they only have to twist one arm to get themselves unblocked. But if 1000 sysadmins independently drop uu.net traffic on the floor, they're well and truly fscked.

    There are still AGIS netblocks from 1997 that remain on the DENY list. May uu.net suffer the same fate.

  40. Re:So what's new? by Veteran · · Score: 2
    Any field in which you can take classes in ethics is a field which has no ethics . Otherwise why would anyone need to take the classes? If the practitioners of the field behaved ethically no one would ever think to create ethics classes for the field; it would be like a class for basketball players teaching them how to jump.

    I do understand Yin and Yang; there is an element of formal ethics study in largely ethical professions. I know that there is a 'code of ethics' for professional engineering; but that is something that lawyer and business types created so that the engineering profession would remain forever in its place as a sacrificial profession for the consumption of business men and the law.

    It is not something that ethical engineers saw that they needed to impose on their unethical fellow engineers to clean up their profession. In addition, from Yin and Yang it is predictable that there would be unethical fields where there are no ethics classes available; crime comes to mind - nobody can take classes in 'criminal ethics'.

    Formal stated ethics usually occur in 'Con job' professions like the law or business where it is important that people believe that the fields are ethical when they are not.

  41. Government control by Shotgun · · Score: 2

    I think this would be a place where we need the government to step in. It is illegal to send a fax without the originating phone number. This is both acceptable and effective, since if someone wants to converse with me I have to be able to contact them. Spam should be the same way. It should be illegal to send email without the correct and legitimate origin as a return address within the same domain. That way I could respond to the email with an encrypted, uuencoded copy of a core dump or two. Anonymous re-mailers are safe here, since they would only be required to attach the remailer's address.

    PSINet, AT&T, et. al. will think twice about these contracts once they understand that mass spamming will result in a righteous DoS attack. The spammers will have to either pay higher rates, or find a legitimate job. Either way I won't have to delete 30 bogus emails a day anymore.

    --
    Aah, change is good. -- Rafiki
    Yeah, but it ain't easy. -- Simba
  42. Re:Spam needs refinement by radja · · Score: 2

    how about people lying in their spam? (in my case, this is about 3 in 4 spams).

    >From: spammer@foo.bar
    >Subject: Make money fast

    >I saw your webpage, and ..

    No you didn't... I'm pretty sure, since I dont have one. then there's ofcourse the old "lotsa money! (if you're american)", and the classic 'here... have some doodles in japanese/korean' which could fall in earlier mentioned categories but I cant read it so i dont really know. Good thing my autoreply is still the DeCSS source..

    //rdj

    --

    No one can understand the truth until he drinks of coffee's frothy goodness.
    --Sheikh Abd-Al-Kadir, 1587
  43. Good vs Bad business practices by dpilot · · Score: 2

    Spamming and acting as a spam haven is clearly bad netiquette, but that's not necessarily the same thing as bad business practices.

    At the moment, I'm not sure that it's truly established in their minds that spamming is a bad business practice. From their point of view, it's CHEAP advertising, so cheap that it doesn't matter if the business rate from it is REALLY low.

    If you really want to stop ATT from spam-related behavior, either permitting it or doing it, then drop them as a long-distance carrier. Do it by mail, and tell them why you are doing it.

    Corporate spam won't stop until we, as consumers, manage to change it from a good business practice into a bad one.

    Either that, or we'll get into the "JC Whitney" business. When I first moved to Vermont, there was a JC Whitney catalog waiting for me in my never-before-used mailbox. I was even the first occupant of that apartment, so it wasn't bulk mail for the previous resident. But JC Whitney and Sharper Image catalogs are a fact of life. We all get them, and several others. They've degenerated into background noise. As we get to more sophisticated mail handling, maybe spam will assume a level of normal noise, too.

    --
    The living have better things to do than to continue hating the dead.
  44. How do we fight this? by petard · · Score: 5
    There are two techniques I can think of for fighting this evil business practice:
    1. Take your business elsewhere, and tell them why.
    2. Refuse to carry their traffic.
    (1) doesn't apply to me. I am not one of their customers, nor is my company. (2) is very difficult. Can anyone afford to reject all traffic from ISP's this size? I certainly can't. I get far too much legitimate traffic from them to do that without a sever degradation in my service. So how do we fight this one WITHOUT LEGISLATION? (I'm not 100% sure, but legislation sounds like a losing proposition to me!)
    --
    .sig: file not found
    1. Re:How do we fight this? by Teferi · · Score: 2

      Anyone know how to do this using qmail?

      "If ignorance is bliss, may I never be happy.

      --
      -- Veni, vidi, dormivi
    2. Re:How do we fight this? by Steve+B · · Score: 2

      There already is legislation in some jurisdiction -- doesn't that put the rogue ISPs on the hook along with the spammers, if they have explicitly contracted to aid and abet their criminal activity?
      /.

      --
      /. If the government wants us to respect the law, it should set a better example.
    3. Re:How do we fight this? by Sloppy · · Score: 2

      I have found it very useful, good uptime, and one can setup a great set of filters

      But that's just the point: You wouldn't find it as useful, if whatever mail you sent from there had a tendency to not be delivered. Then you and everyone else who uses Yahoo would find another service, unless Yahoo did something to correct their problem. As long as Yahoo is convenient for you (and everyone else), then Yahoo has no incentive to behave and the problem won't get fixed.


      ---
      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    4. Re:How do we fight this? by Greyfox · · Score: 2
      A while back I put all of agis.net's IP addresses in my network filters, which cut my total number of spams in half.

      I'm perfectly willing to drop large networks into my network filters. Like AOL. Never seen a useful mail from AOL. Right in the filters. Same thing with the assorted free E-mail sites.

      While it may not be a big deal if one site filters out all that, it gets more important when bunches of sites do. If you can't get to a significant portion of the internet because your backbone provider is a known spammer, you're going to take your business elsewhere, even if you're a spammer.

      --

      I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  45. annoying to the customer by Pink+Daisy · · Score: 2

    Sending out emails twice is "annoying to the customer" because they receive two emails. I take it that means annoying to the potential customer receiving the spam, rather than the customer on whose behalf the spam is sent. Kind of interesting that they don't want to annoy the customer twice, but they are completely willing to put up with annoying us just once. Actually, there is one advantage to email: if I try to flame someone who sends me paper junk mail, I would probably get charged with arson.

    --

    If you are modding me down because you disagree with me, use the "Flamebait" category, not the "Troll" one.
  46. More than one or two by Greyfox · · Score: 2
    Though I wasn't working for that division, I believe if they got one or two, they'd tend to attribute that to random error, forged headers, etc. Of course, forwarding the spam so our network guys could look at the headers was always effective.

    I think the users generally got a warning first, so if they had an open relay they could close it without getting cut off.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  47. Spam wouldn't be so bad if... by Peter+Simpson · · Score: 2

    ...they were actually selling something useful.
    Has *anyone* ever seen a spam that wasn't advertising:

    Gambling site
    Loans/credit for losers
    Accept credit cards
    Sex site
    Weight loss/nutrition supplement
    Get anything on anyone
    Spam software

    Sheesh!

  48. Blame Canter and Siegel by darylp · · Score: 2

    We should have seen this coming. Ever since the "Green Card" spam, things have been getting worse as these gutter-snipes consider themselves legitimate businessmen.

    Now if someone had walked up to Canter and/or Siegel in the street and just shot the fuckers in the face, the net wouldn't be in such a sorry state as it is now? The warning would have been heard and this pissants would have moved on to a less dangerous profession like running a crack house.

    Or maybe little 8 year old Timmy REALLY enjoys receiving emails advertising "XXX RED HOT FISTING NECROSLUTS" Do you want your kids getting such filth? Of course you don't. So take action!

    Protect our children - Shoot a spammer in the face with a high calibre handgun!

  49. Re:Which also blocks listserv. by PD · · Score: 2

    All that is required is for a heads up to be sent to the admin: "Hey Mr. Admin, I'm going to run a mailing list for about 500 people. Just want to let you know what all that traffic is. Thanks."

  50. Re:Whats so bad about spam? by Myddrin · · Score: 3

    Because SPAM is much more intrusive
    than a TV add.

    Each message comes in and takes a small part
    of your hard-drive space and time. It would
    as each producer of each tv ad came into
    your house and took a single grape and a single small slice of cheese.

    While each grape or slice of cheese doesn't cost much, the collective mountain of foodstuffs
    would be quite expensive.

    I added up the sum of the cose of HD space and
    time I wasted on spam once (took an average week and projected it out over a year). It came to
    something like 1 day(deleting my junk folder repeatedly) and about $15,000(obviously the space was deleted and reused) in HD space.....

    And I'm very careful who get's my home address. (I have about 3 different spam addresses though.)
    ---
    RobK

    --
    Myddrin
  51. Policy from HostPRO by duplicate-nickname · · Score: 2
    I have never heard of HostPRO until I recieved spam from one of their customers. I forwarded the spam onto their abuse team and recieved this reply:

    The message you forwarded involved one of our dedicated customers. Although HostPro expects our dedicated customers to abide by our Acceptable Use Policy we allow them to adopt their own procedures for handling complaints.

    Does this mean I will be spammed at will with no recourse?

    --

    ÕÕ

    1. Re:Policy from HostPRO by PigleT · · Score: 2

      Simple. Find their MD's and postmaster's email addresses, and set up a procmail rule to forward it all, automatically, straight back to them. Worked for me with the Harris Poll pillocks, anyway ;)
      ~Tim
      --
      .|` Clouds cross the black moonlight,

      --
      ~Tim
      --
      .|` Clouds cross the black moonlight,
      Rushing on down to the circle of the turn
  52. Re:uu.net by PigleT · · Score: 2

    Ah, you noticed. UUnet have the beginnings of a history of being crap.

    I report Usenet spams from UUnet more often than not; all I get back is unrelated automated crap from them, with no personal followup later - ever. UUnet ought to have their plug pulled until they wise up.

    (General point: go easy on spamcop, btw. Speaking as a sysadmin at a site that occasionally sends out bulk mails, it *is* still the case that bulk mail is not unsolicited, ie reporting us to spamcop.net just because you can't be arsed unsubscribing will not endear you.)
    ~Tim
    --
    .|` Clouds cross the black moonlight,

    --
    ~Tim
    --
    .|` Clouds cross the black moonlight,
    Rushing on down to the circle of the turn
  53. Re:So what's new? by Veteran · · Score: 2
    Basketball players might actually benefit from learning how to jump correctly. Yin and Yang predicts that there would be some ethical professions where the enhanced ethics of formal training is useful - even though in most cases it is used as window dressing for unethical professions.

    Once again - from Yin and Yang, a largely ethical profession like medicine will have unethical elements to it; medical experiments and things like abortion do present ethical dilemmas.

    Conversely it is possible to be an ethical businessman or an ethical lawyer, and I do personally know examples of each. However it is extremely difficult to be an ethical business or legal practitioner who is very rich - I don't know either of those. All of the wildly successful people in both of those fields that I know are unethical. I am sure that there are exceptions to those observations - somewhere there are successful businessmen and lawyers who are ethical - I have just never met any.

  54. Re:Viagra! by M.+Silver · · Score: 2
    Dunno why I get them, considering I'm only 19

    Could be worse. I get them, and I'm female.

    --

    Slashdot's token middle-aged housewife
  55. PGP only accounts could help... by pallex · · Score: 3

    ...have an isp set up an email system so it only accepts valid PGP encrypted emails. Spammers would then need not only an email address, but a valid key for each person, plus cpu time to encrypt the message for each person.

    Or does someone already offer this service. Strictly PGP encrypted ONLY.

  56. how is spamming a bad buisiness practice? by spoonyfork · · Score: 2

    If you could give giant ISPs more money NOT TO carry spammers than the spammer can give them TO carry them, then perhaps they might listen to your arguments. Until then, it is a simple function of money. Spammers pay to have their traffic carried, you all pay nothing and bitch. Gee, I wonder who the ISPs are going to listen to.

    --
    Speak truth to power.
  57. spamjammer - having fun on the jerk's nickel by pjammer · · Score: 5

    Like many of you, I seethe each time I open my mailbox and see FREE XXX/Make $10,000 per week from home/lost 3 inches guaranteed crap.

    Hunting/identifying/shutting down spammers' freemail address and geocities/angelfire sites is not that satisfying - you know the jerks are just going to start another one.

    Fight fire with fire!
    I've been having fun saving the 800 numbers in my Palm V and calling them from public phones - and leaving the 800 number of other spammers in their voicemail. Call 800-555-1219: "Hi, this is Mark Miller, and I'd love to make $10,000 from home each week. My number is 800-555-4492. Look forward to hearing from you!"
    Call 800-555-4492: "Hi, this is David Logan, I'd be very interested to talk! 800-555-1219"

    Alternatively, I've left messages pointing to my home fax line. And I KNOW those thieving motherfuckers call back - there's always a few call-and-hangups after each phony voicemail I leave.

    The idea of jamming up hopeful get-rich-quick idiots gives me warm fuzzies at night. Sure, it's a cheap thrill, but they are gratifying nonetheless. That 800-number "duck quack" meme cost the company over $10,000 in long distance charges per day. Don't just ignore spam - run up their telephone charges and drive them out of business. Your country is counting on you.


    - The Mischief Commitee
    (a wholly owned subsidiary of Project Mayhem. Member FDIC)
    -------------------------------------------------

    -- If the blues don't kill you, brother, they'll make you a mighty, might man.

  58. Here's how to get them to leave a message... by KlomDark · · Score: 4
    Almost all telemarketing operations use a system called a 'predictive dialer'. What that means is a computer dials a list of numbers, but only at the rate that of the current average of the time it takes for the actual telemarketer to complete the call (Including both sales and hangups). It dials the number, listens to the way the phone is answered, then switches the call to a waiting telemarketer if it is determined to be a person on the line.

    How does it do that? It listens for a pattern in the sound when answered. Typically, an answering machine has a message like "Hi, you've reached so & so, please leave a message" - basically a long, uninterrupted pattern of sound. When a person answers, they generally just say "Hello?" and wait for a reply - a quick pulse of sound, then nothing.

    That's what the predictive dialer listens for - a quick pulse. If a long string, then it hangs up, so they don't waste their phone bill on an answering machine.

    How do you take advantage of this? Instead of putting "Hi, you've reached so & so, please leave a message", instead put something like "Hi" "you've reached so & so, please leave a message"

    This will fool the dialer into thinking it's a real person, and transfer the call to a telemarketer. Sure, the telemarketer will hang up, but you've just consumed an extra five or ten seconds of their time, and a few cents of connect time. This impeded the amount of time they can spend bothering other people, and when it happens in the thousands, it can actually have an effect.

    Do it, try it!

  59. The war is already there by Stupid+Dog · · Score: 2
    There is already are ware between the programmers of filter software and the spammers. See SpamCop.net. Ok, the owner of that site takes money for a almost spam-free email adress, but after my primary mailbox got unusable, I saw no other choice.

    This site uses some very tough filters:

    • The MAPS RBL, which blocks notorius spammers and sometimes even puts their uplinks on the RBL.
    • The Open Relay Behaviour Modification System which tests and lists open relays (This is the filter that blocks most of the SPAM for me)
    • An ISP-"Scorelist", which means that email that comes from an ISP with a high score has to be confirmed again from the sender because SpamCop wants to see if the return address is forged.

    The negative impact is that there is about one piece of mail per week SpamCop holds back. And people who send email to me are often people who cannot understand the confirmation request.

    So I think that this war cannot be won. After my experiences with ORBS, MAPS and SpamCop, I must say that having a nearly spam-free mailbox has severe disadvantages, and I think that there are lots of people who will accept SPAM in the end; simply because it is too difficult to build filter software that filters most SPAM and is user-friendly at the same time.