Slashdot Mirror
UUnet's Case Study, or The Trouble With Spam
Eggplant62 writes: "In the wake of recent reports of spam-friendliness at big ISP's like AT&T and PSInet, [this article] takes a pretty good look at the problems UU.net is having with enforcing their AUP when it comes to unsolicited email. According to the article, it can take "two to
four weeks to shut off a spammer's digital tap." The author of this article solicited news.admin.net-abuse.email for material for the article." Guess it isn't easy even for the big carriers to end the pink-meat congestion.
Stupid numeral-alphabet switches aside..
"PSINet confirmed the existence of the contract, which allows Cajunnet to send unsolicited e-mail messages directly from PSINet's networks, saying in a letter posted on its Web site that the contract was handled by a junior lawyer in PSINet's commercial contracts group and pledging to better educate its sales force.
"This would all seem to indicate that there are more pink contracts out there than the consumer is aware of," said Maurene Caplan Grey, a senior research analyst at high-tech market research firm Gartner. She said that while PSINet may have looked at such a contract to improve its flagging finances, the temptation for ISPs to secretly circumvent no-spam policies doesn't pay off. "My gut feeling is, assuming they get caught, it's not worth it. It's poor business form. You won't get partners. You will be blacklisted."
Yeh right. earlier in the article it mentioned that spammers don't give a shite about whether or not they are on the account for a few hours. it's all the same to them.
Furthermore, as we have the tech-world stock-drop known as Dot Bomb, more and more desperate folks will be turning to any moneymaking source possible. The number of USERS isn't gonna drop. the number of SPAMMERS isn't gonna drop. the number of successful ISPs is, and to stay successful a few will cater to the spammers' market, and many ISPs may let 'em sneak in while promising the bulk of users they are anti-spam with stern TOS's.
Goat sex free since 2001
The problem lies especially in the fact that many other large ISPs can clamp down on a spamming user with very little interference from their sales or legal departments. 24 hours, let alone 30 minutes, is too long for a spammer to stay online. When you consider that some of these clowns set up T3's and OC1's and that they can blast 100,000 emails in about 17 minutes, there's where uu.net has it all wrong.
Rich
--
Consumer Watchdog! Yes, we're rough on bogus businesses! And today,
Consumer Watchdog reports on protecting you, the consumer,
from being consumed by dangerous products and phony packaging. -- Firesign Theatre
TINLC Unit #2309 Death to all spammer accounts.
There's 1 thing I do not understand about the generation of spam. I've got accounts on several places, and it makes sense that if my email address were made public somehow (ie usenet, forums like this, etc.) then spmmers can easily retrieve my address & send mail. (hense the Yahooo instead of proper yahoo in my email). Here's the part I dont get. I open an account on hotmail, or AOL... especially AOL, and the emails come pouring in. Porn, Herbal Viagra, all sorts of crap I didn't ask for. And I didn't broadcast the addresses to anyone. So how did they find me? I don't get it.
Uhm.. UUNET is only in charge of their own network. They are an ISP, and if one of their customers is sending spam then it has to be reported to them so they can get cut off.
UUNET isnt 'in charge' of anything other than that.. They arent 'in charge' of spam - each ISP is responsible for use of its own network.
Only mail that actually originated from (or was relayed through) a UUNET IP address should be reported to abuse@uunet.com - if you are (or were) sending ALL of your spam there then all you are doing is wasting their time..
There is no central organization in charge of spam, and even if there was it would be useless.. Go read http://maps.vix.com, http://www.mail-abuse.net and/or http://www.spamcop.net for real information on the topic of spam, and REAL things ISPs can do about it.
I think all accounts should be limited to no more than 50 e-mails/day. Who writes more than 50 e-mails a day. It's already in the user agreements for most ISP's not to bulk e-mail anything, so that shouldn't be a problem. Any exception should require a contract (pink) and a deposit (very hefty) of about $1 per email to raise the daily limit. This could be used by clubs and such that really do have a membership that would like to receive a newsletter. A deposit and no complaints would get them started and keep them going. Abuse would eat the deposit. Complaints are deducted from the deposit at a rate of $250 per complaint. This should restrict most ISP's from being used to annoy the masses.
The truth shall set you free!
I have a 24/7 broadband connection with better then 99.9% uptime at home, and I quite enjoy the minor hobby of being able to run my own tinsy little server on it. I have apache and sendmail, ssh login, etc. The notion of a default policy of filtering ports to the end consumer of bandwidth troubles me enormously.
Indeed, this seems to contradict the notion of free and unrestricted end-to-end service, as discussed recently on slashdot. Not to sound horrible here, but we all manage to live with spam pretty well, it's not like it's all that much of a hassle. I just keep a variety of email addresses to give out for different purposes. A few get a good deal of spam, and it's easy to run a script to delete first time messages from users I have never corresponded with from those accounts.
I just worry that, if we were try to really achieve a spam-free utopia, that it might well be at far too great a cost in freedom. I would rather deal with the occasional spam, then have the commercial bandwitdth providers filter my connection. And there is always the worry of false/vindictive reports leading to unfair account termination.
---
man sig
---
the pen is mightier then the sword. the sword is mightier then the court. the court is mightier then the pen.
So maybe ISPs should do what CompuServe used (I don't know if they still do) to do and restrict the capabilities of newly created accounts.
Okay, apparently noone's heard of this yet, which isn't surprising, but here we go.
:) - you as the email user on that mail server can set up a list of people, as well as a privacy-negotiation policy about receiving email. Those who are on your email pass-thru list can send email directly to you, as normal. Those who are not have to meet your privacy rules before the email goes to you. And/or, you could have it email a message back asking for confirmation before it sends the email to you (thus eliminating the mass majority of spammers - their reply-to addresses are almost always fake).
:)
There IS a cure for spam. A company I used to work for last year came up with some technology based on P3P technology. The idea is you set up an account and get an 'XNS Agent'. XNS is 'eXtensible Name Service'. You get your own 'XNS name' (via OneName.com or some other agency - some are free, some aren't). When you have your OneName, you can set up your XNS Agent to negotiate privacy with whatever online entity understands about XNS.
Here's the spam-killer idea my ex-boss had when we were working on the service: Build XNS into mail servers - the spec is completely open and available at xns.org. Make this like 'Caller ID for e-mail' (my phrase - I'm so proud
So, since the spammers would never take the time to confirm their privacy rules, the emails would never get back to you - and you could have the ability to configure your XNS email agent thingy to either dump those messages that didn't get authroized, or hold them for review, or whatever.
You would, of course, have to take a little more time in setting up your mail account on such an XNS-enabled mail server - set up the email address of those people and mailing lists you're on, so they don't get trashed, or bounce messages back into lists, etc. Small price to pay to actually destroy the entire spam industry, though, I'd think.
The neat thing is - all the specs are open - anyone can add it into their open source mail servers - it's encouraged! It also would mean that people wouldn't have to use special mail clients to use it - it's all server-side, hopefully with a web-based interface to configure your agent.
Pretty slick. Available, open source. Free personal 'OneNames' are available, etc. The OneName people _really_ know and understand privacy - I used to work there, I should know.
It's been frustrating receiving all the spam I have been recently, knowing there's a solution to spam out there, and noone is using it. *sigh*
=Tumbleweed (that's my OneName
I have e-mail in another country. I used to be able to send and receive from it from anywhere worldwide. It is my very first e-mail account. I liked it so I kept it. There has been a change. I still can get my mail worldwide, but now I have to send mail from whatever ISP POP I am using at the time. I still send and receive mail, but I have to explain to clients that the reply-to is correct, even though the header says otherwise. Moral, not all reply-to at another ISP is fraud. When I am in the United States, I use the sending account of where I am at the time, and I do answer the mail sent to the reply-to address.
The truth shall set you free!
Despite having great sympathies for the desire to relieve the general frustration caused by spammers with disposable accounts by simply removing one major source of those accounts from the picture, it unfairly places the communication ability of anyone not rich enough for static IPs at the mercy of the frequently abysmal performance of the mail server of their ISP (@Home, for instance, has mail servers that go down on a regular basis, and despite repeated claims to the contrary has been losing a rather disturbing amount of e-mail altogether) -- whether or not that ISP is having any more difficulty controlling its dialup/dynamic-ip users than it is its users with static addresses.
Forcing use of a third party relay will cause lack of redundancy and create a bottleneck.
Another problem, reading between the lines here, is over user of dynamic IP addresses. On a cable modem or ADSL setup they make no sense at all. Since you need at least one IP per customer anyway. They can sort of make sense with dialup where you only need as many IPs as telephone lines, but can have more customers than telephone lines...
Unless the sender gets special dispensation by contract, limiting users to between 10 & 100 emails a day should get rid of the entire problem of Spam.
MSBPodcast.com The opinions expressed here are my own. If you don't like 'em... Think up your own stuff.
Just set up a filter to move email where to "To:" or "CC:" fields aren't to you or none of sender/recipients are in your address book. Manually add any mailing lists you subscribe to. Have it put it in a "filtered" folder.
I find this takes care of 75% of the spam get... Is sure is nice to again get more legit email then spam. I occasionally check the "filtered" folder for important messages, but rarely do I find anything of value in it.
---
What if the ISP's smtp server is hosed? I used to have cablemodem and the only thing that worked reliably was my pipe, not their servers. When they started caching web access, blocking smtp, nntp, that's when I went back to local dialup. No thanks to their overloaded servers my outgoing mail, web access, etc. would be blocked for days at times. I have better control over my own server and have the ability to blacklist spam to boot.
The point that Nace has missed entirely is that "spam" isn't a term that specifies the *content* of a message.
"Spam" denotes *any* e-mail sent blindly to people who didn't request it.
Whether it's penny stocks, pornography, or "SyberSchool" advertising - if I didn't ask for it, it's spam.
Specialization is for insects. - R.A.H.
Ever heard of caller id? it works great. You set up the digital ras to only let calls in that send their number (or arange with the phone co to get all numbers) and then keep a database of spamer phones numbers. A few tricks with a radius server and you know when they call back.
Posted by Kewlhandtek:
the problem is if you even wanted to buy the stuff you could.........bad links,false links or shutdown links
Posted by Kewlhandtek:
damn it......i have a problem with my "nots" i leave them out tooooooooooo much. YOU CAN`T even buy the stuff
He even admits he gets nasty phone calls and death threats but still insists this is a good way to advertise. Yep, it sure sounds like he is generating a lot of good will towards his comapny this way. What really gets me is he (and those like him) honestly do not see the problem, he just sees spam as a way to cheaply reach a whole lotta people. So we get to help foot the bill for his advertising .
Other ISPs that spend money for excess capacity to handle the spam e-mail -- up to 40 percent of traffic -- bear the financial burden, a burden eventually passed on to consumers, he said.
Nace takes exception to being called a spammer
This kind of mind set is actually worse than the blatently obvious scams and porn spam since his kind will lobby that his use of unsolicited e-mail is a legitimate and respectable way to do buisiness and should be protected.
If Godzilla did not exist, man would have had to create him.
What kind of life does he live that he gets only porn spam? I see mostly beggar stories and MLM schemes.
Maybe spam could be declared "indecent" by the courts, and you'd have to prove you're over 18 to look at it. Why would anyone bother?
I have worked in the security department of a major ISP for quite some time. The response time is not the issue. We could shut down a spammer within 15 minutes of recieving the first complaint. The problem is with fake accounts. A spammer will use stolen credit cards and do online signups with these, set up a mailserver on their computer and spam away the first time they log on and continue until we get the the NMC to kill their connection. By the time we have tracked down their account and have all the paperwork done, (which is just a few minutes) they already have another account waiting, and use a different VPOP, so as not to be totally obvious. The residual damage is having our domain banned, and then trying to contact the other ISPs to clear that ban. This can some times take days. A severe pain in the ass. If they use our mail servers, we can put a maximum sender limit, and that stops them a bit. They then usually migrate to another national ISP with higher limits. Sometimes they use open relays in other countries... but the source ip is from our domain, so we have to shut down the account, then contact the foreign admin of the open relay... and again that can take days, plus several interpreters......etc....etc.
/V\4>....
So response time is not always the main issue.
..remember kids hormel is the devil
/V\4|}
I sent an e-mail to Prohosting, and they promptly removed his site. I don't know if it ever went though, but I know on their web page, spammers get charged $100 per complaint that prohosting gets. The thought that some spammer got charged $100 thanks to me makes my feel warm and fuzzy inside.
Perhaps people would be less inclined to spam if there were actual repercussions, like being charged large sums of money, instead of just getting kicked off.
-The Tempest
Nace takes exception to being called a spammer, a term he associates with pornographers. UUNet's reaction, he said, was unwarranted. "This is a clear-cut case of the big corporations telling the small operator, 'screw you.' " Lots of pornograhic content providers use Spam or other obnoxious marketing techniques, but most of the spam I recieve does not hawk pornographic content.
I know that this messageboard is a haven for "script kids" and other hacking types, so I'm sure one of you knows the answer. I would like to integrate knowlegde of such hacker practices into our MCSE+Internet certification, but the program's technical director is stumped. Any clues?
See you in hell,
Bill Fuckin' Gates®.
See you in hell,
Bill Fuckin' Gates®.
(This post is ©2001 Microsoft(TM) Corporation.)
Why just today I had a BEOWULF CLUSTER of spam!
Yeah, but billboards don't waste your time. I know I don't slow down or stop to read them...
And then leave their addresses as bait at various places.
;).
;)... Still it can be considered a useful feature if infected customer who are spreading trojans get their accounts suspended for a while, and the associated emails (probably bearing the virus/trojan) are deleted.
If someone hits those addresses and is verified to be online as account holder of that ISP, that user is automatically suspended. Can be done with participating ISPs too.
If mail hits those addresses and can be confirmed with reasonable cause to be spam (hits those addresses and > 10 other people) , it is automatically removed from mailboxes of all customers subscribed to the optional spam removal service.
With millions of addresses on their lists it'll be hard for spammers to figure out which are decoys and avoid them.. And setting up decoys can be just about as cheap as sending spam
You have to be careful to ensure that legitimate customers aren't tricked into spamming the decoy email accounts. Trojans can do that
Cheerio,
Link.
Throw them into a tar pit. This keeps them online, and makes them vulnerable as they are a target as long as they are connected.
© Copyright 2000 Kristian Köhntopp
All rights reserved.
Much of the UUNET spam being reported to the MAPS DUL Project happens to be relay spam. This isn't helping the DUL Maintainers because they're already listed. You want to use MAPS RSS and DUL at the same time, and report open relays to RSS as found. See The RSS Project.
Use Evolution instead of Outlook? Bewa
I had someone (from a uu.net dialup) try something like 122,000 userid on my domain. They hit aliases that had never been used. Hiding isn't a solution.
"Next you have the more technical spammer, who has an array of fake credit card numbers, false names, false addresses, and so on."
Maybe ISP's should be a little more careful before they accounts are opened.
It should be possible to tell if the credit card number is fake (gee, maybe check with the CC company).
If false information is used then the ISP should report them to the police.
I suspect that if they did this, part of the spam problem would disappear....
Can't we nail them on some type of TOS violation... even if it is their own TOS??
Skivvy Niner? Email me!
HEY! Look left just ONE MORE TIME!
You've been caught in the middle of this little spam problem and I feel your pain. Unfortunately port blocking and projects like MAPS DUL won't go away any time soon because spammers won't go away any time soon.
The worst DSL related listing in DUL has to be Sympatico Ontatio. This is an exception to the DUL rule of not listing DSL because Sympatico HSE uses PPP(over Ethernet) and can't guarantee the same IP, and they've turned a deaf ear to MAPS and to the Internet community when we complain to them about their spammers.
If the broadband provider's mail server bites, too bad. Find another broadband provider with better service or do what I did: Stick with ISDN and pick and choose between any ISP that does 56k (any server doing v.90 very likely supports ISDN transparently).
I also suggest you read your ISP's terms of service carefully. Chances are they forbid running servers on those connections for the same reasons - too much network abuse.
You might want to read some letters people wrote to the DUL Project about this, and the responses.
Use Evolution instead of Outlook? Bewa
On a consumer level, one of the best ways to fight spam is be proactive on a marketing level. We created a service called Sneakemail that lets the average user implement the "get your own domain and make a new address for each use". Our philosophy is to reduce the "value" of email addresses given out to ebiz while keeping the "value" of them for you the same. A disposable sneakemail address has less value for an online business, its only just a temporary and revokable contract of contact between you and them and has little value for resale. Its also in an ebiz's best interest to keep that address to themselves because spam sent to that address from elsewhere can be very easily traced back to them.
The whole spam war is sorta like the war on drugs, the harder you make it for spammers to get spam to your inbox, the more valuable the spam becomes and the more its worth it to them. But if you take the value of your email address for them away its probably not worth their time and money.
Sneakemail is to spam filters what an ounce of prevention is to a pound of cure.
I hereby pledge that if I am ever summoned for jury duty because somebody physcially LARTed a spammer to death, I will argue that it was justifiable homicide.
As has been said before by others: I'm not trying to sound like a cold-hearted bastard, but I am a cold-hearted bastard, so that's just the way it comes out sounding.
You cannot apply a technological solution to a sociological problem. (Edwards' Law)
At $10,000 per message, the potential contractural debt is ruinous for spammers.
Back in 1998, I was getting about 3 emails a week from this one guy advertising some kind of pyramid scam. The advantage on my part was that he left a toll-free phone number to call. When you dialed it, some guy went on a 3-minute speil about the scam and allowed you to leave a message afterward with your name, phone number, address, etc.
I took this opportunity to leave a message explaining in highly legal-sounding terms that he was using my personal paid-for email box for his commercial advertising purposes. I said that if I recieved any more messages containing the 800 number that I would bill him a (something on the order of) $8000 fee for every advertisement.
I left my email address letter-for-letter, hung up, and recieved no more spam from him.
[A month later, I found the sticky note with that number on it and decided to call it up and leave the beginning 3 minutes of every track from my new chem bros CD on its answering machine. Yeah, I'm cruel...]
I set up a freeserve account for my mother to use with a PC she bought recently. Now freeserve allow unlimited addresses per 'domain'. So If her 'domain' was spam-me.freeserve.co.uk she would recieve mail sent to *.spam-me.freeserve.co.uk.
Within days of opening the account, and not even having used it at all, she had received FOUR pieces of spam. sent to 'addresses such as 'fred@spam-me.freeserve.co.uk' and 'mark@spam-me.freeserve.co.uk'. It seems that freeserve sell addresses as soon as they are opened.
...have to be two of the least productive (and most annoying) forms of advertising. When you think about it, pretty much every other form of advertising has at least a little targeting that goes along with it. Billboards target people who are in the area of the business advertising. Television and radio ads target the general demographic that watches/listens to that show. Banner ads (as annoying as they are), at least know a little about the typical person that is looking at them. Despite claims of spammers to have "targeted" lists of email addresses, there is very little that they can know about those email addresses...same with telemarketers and phone numbers.
:)
One solution advertisers are using more and more as people become immune to typical methods is product placement. TV show, movies, etc., are now filled with "products" in use or on the set. Of course, the stuff spammers are selling is a little harder to use with this method...I can see it now: "Quick, get the guns, we're gonna have to...wait a minute...I don't have to do this...I've made millions...(to viewer)...you too can get rich quick with my new scheme to..."
lol. Never mind
www.code-fix.com
if you have a shell on the school system, try putting a file called ".forward" in your home directory, with the address you want your mail forwarded to (assuming you want it all - you may need to put it to its own address with fancy filters and all that jazz).
SSL Certificate
Of course, this would not be much of a problem if the credit card # used to sign up for one account was not allowed for another account; or if the name and address used (and necessary to authorize the credit card) were logged as unavailable. It wouldn't be hard to do this on a multi-ISP level, making it much harder for the typical spammer to do business...
Suspect there's not much motivation over at UUNet to take that kind of leadership, however, as they get paid $20-40 for each cancelled-and-renewed account...
We do not object to use of [SPAM] to describe [unsolicited commercial e-mail], although we do object to the use of our product image in association with that term. Also, if the term is to be used, it should be used in all lower-case letters to distinguish it from our trademark SPAM, which should be used with all uppercase letters.
(emphasis mine)
it seems that Slashdot ought to have a new spam icon. See http://www.spam.com for more info.
---
Santa Claus: "Ho ho ho!"
NO CARRIER
Ok from reading the links it seems that there should be 2 things uunet could do very easily to get out of this spam problem
Background:
1: The port 25 block. This is mentioned in the article. In a perfect world, a user should only be able to send to their local mail server. Ie: When a user sets up their new ISP, they have to enter the name of their SMTP and their POP server.
With that being said, it should be logical that UU.net should set up their router filters to only accept traffic going to port 25 on their mail servers. Traffic going to port 25 anywhere else should get blocked. If you have a local UU.net account you should use the uu.net mail server.
Now what about road-warriors? the sales people out in the field who need to send mail?
2 things:
1: They probably vpn in, so that does not even matter. otherwise:
2: If you allow any uu.net address to relay via your mail servers, you have a hosed situation.
2: The second option would be for UU.net to provide the IP ranges for its DIAL Up pool to the DUL project run by MAPS.
This project takes Dial up ranges, and blackholes them from connecting to your network. They too follow the idea that you should only connect via your dedicated mail server.
Now the bonus of step 1, is that all of the mail going out of your network goes through mail servers you control, you can do certain checking,
like anyone who is sending mail to 500 BCC'd recipients (multiple RCPT), or if they are using multiple RSET commands to send out the same message but with different subjects, should get rate limited/checked.
Or you can put additional IP information in the message envelope, so that they can be detected easier.
The win with the DUL, is it lets the rest of the net be able to only accept mail from uu.nets mail servers, and takes the cpu overhead of additional filtering off of their routers.
-- C
Just because the spammer in the article was the 'little guy', they made him out to be some sort of victim. According to the article, he fires off 17 e-mails per second! That's almost 1.5M per day, obviously these people didn't opt-in. No, he bought, traded, stole, or guessed their addresses in a cheap attempt at promoting his company with our money.
No, I have no sympathy for him whatsoever...
Think outside the... Hey, where'd the friggin' box go?
Not really. Just because you have a filter doesn't mean it's not effective for the spammers. You wouldn't have responded anyways, and they have no way of knowing whether you have a filter or not.
"Well kids, you tried your best, and you failed. The lesson is, never try."
yes -- spamgourmet.com :)
who's moderating the meta-moderators?
oh fuck, i meant to uncheck it, OK?!!?!
heh...
___________________________
http://www.hyperpoem.net
hyperpoem.net
UUNet Canada has always been a much more clueful organization than the US version.
Rich
--
Consumer Watchdog! Yes, we're rough on bogus businesses!
And today, Consumer Watchdog reports on protecting you, the consumer,
from being consumed by dangerous products and phony packaging. -- Firesign Theatre
TINLC Unit #2309 Death to all spammer accounts.
>On a cable modem or ADSL setup they make no
>sense at all.
Well, they sort of do, from an admin perspective. You don't have to track who was assigned which IP address, release them back into the pool when the customer goes away, etc. It also makes it harder for the customer to run a server, which most broadband companies don't want you doing anyway.
I would think the benefits of assigning an address would be greater than the admin gains from dynamic, though.
Why do people bother to trot out these tired old false analogies? I don't pay to receive any of this crap; I do pay to receive spam.
In addition to supporting the medium, there should be some rules about what kind of content is allowable in these emails.
Out of the question, and your attempt to hitch your pet cause onto the unrelated issue of spam puts you on the borderline of trolldom.
The second issue is that this mob rules mentality that most anti-spammers seem to have screws up other legitimate uses of email.
Classic blame-the-victim fallacy. The spammers, not the people resisting their parasitic attacks on the system, are to blame for the climate of suspicion which currently prevails against legitimate (i.e. subscribed) bulk e-mail (particularly given that spammers attempt to disguise their garbage as "Information You Requested").
The "Newsletters" that many sites send out seem to fall into a gray area that threatens to eliminate this otherwise useful feature.
Newsletters for which an explicit subscription request has been filed are in a white area. "Newsletters" for which no such subscription request has been are in a black area. There is no gray area.
/.
/. If the government wants us to respect the law, it should set a better example.
In the boycott proposal I wasn't suggesting something like RBLing. UUNet, I was suggesting things like not using MCI-Worldcom as a long distence carrier, etc.
Prime numbers are exactly what Alan Greenspan says they are -S. Minsky
I have been maintaining an anti-spam HOWTO document for some time now that might be useful to read. It's written for qmail users and administrators, but does address both the theories/principles behind blocking/preventing spam, and the technical methods that can be used to actually do this. I think it's a good summary document for users, sysadmins, and managers considering these issues.
Second: Are you sure that the spam was sent to the specific address you had set up (but hadn't used)? If it had been sent to anyuser@domain.freeserve.com, it would show up even if the sender didn't know the name of specific mailboxes.
You also say that you never used it. But did you browse untrusted sites with javascript enabled and your browser knowing your those email addresses?
Either way, I would suggest that you take the matter up with freeserve. I'd be extremely surprised if they were selling addresses. Take it up with them to make sure.
I should also say that I used freeserve from November 1998 through June 2000 (after that I moved to the US) and never had that problem. Other than as a satisfied customer, I have no connection to freeserver, Planet Online or Energis other than having some minor contact both the person who designed their email system and the person who is now in charge of their email system.
Prime numbers are exactly what Alan Greenspan says they are -S. Minsky
The idea of creating a real-info blacklist has been bounced around a few times and generally rejected as legally infeasable (would generate too many lawsuits), but still, I keep wishing that as long as ISPs are using AUPs that are incredibly restrictive on users they might as well go all the way and put in a clause stating that by joining the service, you agree that if you are terminated for abuse, the reason for termination and any personal information submitted for the purpose of gaining access may be distributed to all other ISPs that are interested in making account acceptance decisions based upon that information. Maybe give it a 3 or 7 year expiration, kind of like bad credit. Access to a list like this might give even slow ISPs a chance to keep ahead of the problem by preventing it from becoming an issue.
But enough dreaming. For now, we have to make do with whatever technical solutions are available, whether they be RBL-like general blacklists or personal filters. At least those with skill tend not to be spammed much.
The second issue brought up by the article (albeit somewhat indirectly) is the gradual blockage of direct access to mail to dial-up users, either by blocking SMTP at the router level, or by using the MAPS DUL. Despite having great sympathies for the desire to relieve the general frustration caused by spammers with disposable accounts by simply removing one major source of those accounts from the picture, it unfairly places the communication ability of anyone not rich enough for static IPs at the mercy of the frequently abysmal performance of the mail server of their ISP (@Home, for instance, has mail servers that go down on a regular basis, and despite repeated claims to the contrary has been losing a rather disturbing amount of e-mail altogether) -- whether or not that ISP is having any more difficulty controlling its dialup/dynamic-ip users than it is its users with static addresses. Granted, a number of ISPs are filtering at the router or submitting their dialup addresses directly to the DUL themselves, but I have yet to see one of them disclose in their advertisements that they provide a crippled internet connection.
So in summary, what we still need to control this problem ourselves is a better way of publicizing the e-mail distribution points that take a long time to deal with spammers, and a better way of identifying only those dynamic address ranges belonging to ISPs that are either incapable of dealing with their dynamic-IP userbase or have given up on it completely -- and then a centralized location to check up on ISPs with broken services ahead of time, sort of like a Better Business Bureau for the internet.
How to do it? I have no idea. Here's to hoping someone else does.
Well, I figure since I've had to deal it with almost 100% of my career, I may as well toss out my $0.02USD.
/. readers claim, say, swear, or demand it is. First off, you have several types of spammers.
Spam isn't as easy to stop as most of the 'tech savvy'
First off is your atypical newbie moron spammer, who gladly gives you all his correct information, gets online, and fires away, gets disconnected immediately, gets blacklisted.
Next you have the more technical spammer, who has an array of fake credit card numbers, false names, false addresses, and so on. He'll setup six or seven accounts on one ISP, usually something like AOL or UUnet, and bounce around with these accounts, spamming. On and off before they can catch him in the middle of it.
Third, you have the guy with a pile of lawyers working for him, that's going to negotiate and hardball his way into a contract with an ISP that lets him spam.
The only remaining spam-friendly ISP was AGIS. Why 'was'? That policy was changed due to something like 60%+ of their customers cancelling after the announcement. Remember Spamford Wallace? He was the guy they hooked up first, and he was the guy that lost them a lot of business. Companies blocked AGIS - my employer at the time filtered all of AGIS' netblocks immediately, to prevent incoming spam. Some providers, ie; PSInet, have negotiated contracts with 'big name' (aka LOTS of spam) firms that allow them to spam to their heart's content.
Now, you've got a spammer. We'll say your typical type 2. And you want to shut him down. Not that easy. Because you do NOT have a common factor, including where they're dialing in from, they can CONTINUE to abuse your service, and there's not much at ALL you can do about it till they slip up somehow, which most sales droids are NOT going to be aware of. They'll just keep bouncing around and evading. And if the ISP gets blackholed or filtered all over, they'll just jump ISPs entirely. These are the pricks that cause the most damage to ISPs. They usually also use the ISP's SMTP server - best thing you can do is to disconnect them the second you see it, and pray they don't have more accounts. I've had to deal with a couple of these in the past, and we had one guy sign up for *SIXTY* accounts in *ONE DAY*, all with different information. When we FINALLY figured out who it was, we were ONLY able to kill the accounts because we had relatively few (around 2,000) and knew when they were added.
Now, say you have someone who bought a leased line and ordered it up deliberately for spam. You can't prove it beforehand, and some of the software out there makes it incredibly hard to find the true source. You have to catch them in the act most of the time. And the best you can HOPE to do is to do a shut on their interface. That's assuming you don't have a legal department that you MUST consult before disconnecting a customer for a contract violation (ie; spamming) and who MUST sign off on the disconnect order - I had to deal with this before. In some of the larger shops, ie; UUnet, AOL, etcetera, you have to go to your legal group and get them to sign off on a disconnect, then you have to go to your engineering department, who may or may not have to schedule it as a change management, who may or may not have to get their managers to write off on it, who may or may not have to go further up the chain. In other words, typical corporate bull will typically tie up a spam disconnect for over a week. It's the cold reality. If you disconnect a customer who WASN'T spamming, they can and likely WILL nail you for breach of contract on a leased line, and that could cost your company MILLIONS. Legal wants proof, engineering wants time and to be left alone, management just wants the mess out of their hair. Plus the overworked abuse departments do not help, as most complaints go there. Where I worked, we had a two person abuse department, who typically had a three week turnaround on initial reply.
You have to take all these kind of things into account. I'm certainly not saying UUnet is doing a great job - they aren't - but they're doing the best they can. I'm not personally aware of any contracts UUnet has negotiated permitting spam, and they usually *do* disconnect a customer for spamming. Other providers are far worse. You can whine, scream, complain, and moan all you want, but spam is not going to go away overnight, and policies at these places don't get changed overnight, if at all. UUnet has their policies, as do most other providers, and the tech that ignores them and just unplugs that spammer is going to find himself out of work almost immediately.
A lot of the posters definitely need a good dose of reality, because this is how it is. It's not just unplug the guy. Maybe the Mom & Pop ISPs have that luxury with dialups, but the other ones? Not a chance. So you're just going to have to live with it. Build your own filter lists, update them, etcetera, and quit whining about these companies being unable to stop it immediatley. You want it fixed? You go get a job in management and fix it yourself. No amount of your screaming is going to change a thing.
=RISCy Business, who doesn't give a damn what you think.
your company here.
your company here.
shelby != ford
If a major ISP wants to allow a spammer to operate, then the way they should do it is to require it be done from a dedicated circuit, and to prohibit relaying through any mail server not listed in the DNS for the destination address. Such an operation is very easy to block on the receiving end. In addition to RBL/DUL/RSS, I also have my own DNS zone to block my own set of IP addresses.
My point of view on this is that if someone actually wants to be a part of this and get spam, they should be allowed to do so. Likewise, someone who does not should not have to. I'm not opposed to an ISP that wants to allow spammers to send bulk email in a legitimate (e.g. identifiable, easy to block) way. Anything less is, IMHO, fraud (and if the ISP knows it's going on, is a party to the fraud, also IMHO).
What I want to know is if Nace and SyberSchool are sending their email direct (doing normal DNS MX lookups and sending to the designated host) or if they are doing relaying through innocent third party mail servers. If it is the latter case, then I think they should be cut off. If the former, then I have no problem with it because I can block them myself very easily (your ISP can, too, if they want to).
now we need to go OSS in diesel cars
SPAM is used as opposed to spam, for the emphasis on horrible processed material more akin to the Hormel attrocity.
I'm still waiting to see *new* clear spam, or vermicelli spam... also known as sporm... then I will know hell hath no fury like the abortions of human stupidity..
The thing is, some people claim that spam is legal.. Some people have legality tendency to say that spam, as regulated by Under Bill s.1618 TITLE III passed by the 105th U.S. Congress this letter is not considered "spam."
m l
These kind of people should be eliminated since not everybody lives in USA. For example: LinuxBase.Org was spammed: http://lists.debian.org/lsb-impl-0012/msg00000.ht
How can we prevent things like this happening? Take a look at the spam message over there. They claimed that their "expert programmers have made it possible for us to penetrate any email blocking filter in use."
If the IP addresses are static (and usually they are on T3 and T1) then smack yourself for not blocking them on the first incident.
now we need to go OSS in diesel cars
> Is SPAMing even getting through anymore?
8 1-318280,00.html]
I've only had a ``gut-feeling" answer to your question until I stumbled across the following about six months ago. It is the only fact I have seen about this anywhere. (Yes, the writer is from AOL. But I am still amazed at a response rate far above the typical 3-5% for junk mail.)
Until I read it, I always thought the way people made money from spam in this manner: spammers found marks, promised them alot of money if they let them advertise for them on the Interent, sent out the spam, & made off with the money while the mark took the fall. If this email is any indication, a spammer may actually get useful leads & make somem sales from engaging in this obnoxious activity!
Geoff
[from http://www.zdnet.com/tlkbck/comment/82/0,9586,821
Name: Patti Illingworth
Email: plifrog@aol.com
Location: Reno, NV
Occupation: Secretary
I am a small business and use the computer on an individual level. We are not
network but we have the same problems. I also use the internet for personal
things, such as just enjoying it. I get quite a few commercial spams and LOADS
of the porn crap, which I am not interested in. I am with AOL and they have an
email address that I just forward the junk to. I have never gone so far as to
CLICK on one of their hyperlinks and don't intend to. The biggest bother is just
spending the time forwarding and deleting it. Someone did get into my computer
once with a Trojan Horse program and somehow got my password and sent a lot
of this trash out in my name. I was temporarily kicked off of AOL and had to
spend a lot of time just getting rid of the stuff. Overnite, I had 450 messages from
people responding to whatever it said (I never did see the original letter) about
80% were very angry and called me every name imaginable. The other 20%
were responding positively and wanted more information. What a mess that was.
I am aware that it is going to be a difficult thing to stop. We just all need to not let
it bother us and keep on living. I have gotten over being frustrated by it and just
know that some of my time each day will be spent getting these jerks off of my
machine.
Thanks for letting me vent.
I think I see a trend here. Maybe for them it really would be easier to muzzle the entire internet than to produce p
Goodbye Anonymous Coward. You posted too much anyway.
now we need to go OSS in diesel cars
SMTP AUTH
(or, even better, require signing certs authorized by the ISP.. One can dream...)
Your Working Boy,
For the last few months, probably due to the leaked e-mail addresses from Digital Convergance, I've been recieving spam from an e-mail forger... Unfortunately, the spammer in question also changes his address, such as akdsjksd@msn.com or what have you, followed with a subject line such as: Get Mortgage Loans Today! [2387sd]
I've attempted to filter for msn and yahoo addresses, as I rarely recieve anything from those, but that didn't work (so sue me, I'm too lazy to learn any other e-mail software other than Outlook Express)...
Other than the universal "use other software", "switch to linux", etc, responses, how does one block against such spam abuses? At least with legitimate spam, I can respond and get them to remove me from their lists... But the spam with forged addresses, of course I cannot simply respond to get it shut down...
Just because you can mod me down, doesn't mean you're right. Shoes for industry!
Verizon sucks. Three days after I started using their dialup I already had 14 spammed messages. And I NEVER gave, wrote down, spoke out loud, my account name a single time. I get at least 50 junk mails a week and i still have never given, used this email account to anyone since day one. I ,mainly use my old shell account from my previous ISP or Yahoo. I emailed Verizon asking how this was possible. I was given a canned response with a link to the Verizon SPAM FAQ.
Basically the solution is to never give out your email address (which I never have) and filter the crap that gets through on your own end! Verizon is ALMOST as bad as Hotmail..
Bad boys rape our young girls but Violet gives willingly.
Christ!
FINE, I admit it. It was me. I let the dogs out. I thought they were hungry, so I went over to their kennel and unlatched the gate. I didn't realize such a horrible problem would ensue. Please forgive me for letting the dogs out.
If you need direct port 25 access, then you have an idea about what's going on.
...
ISP should let you sign up for it, authorize it, and perhaps put a large deposit down to insure proper use.
I like the idea listed in the maps rbl, just route all port 25 traffic to the local ISP smtp, then the ISP can add tracking information (x-track-userid,x-orig-smtp, and not rewrite the header). Most users would never notice this, and might actually benefit (no more x-plaining, why can't i send mail through our server while I'm at a conference)
If is was a smart system, then it would alert the ISP that a user was trying to directly contact an open relay server... and
Of course, its somewhat naive to compare an ISP the size of UUnet to Freeserve - just in terms of dialup locations.
> Actually, you've put your finger on an important point -- in the case you cited, the spammer wasn't getting a response, and
> wasn't likely to for very long (if at all).
And your response brought out another: there is far more rumor & myth in circulation concerning spam than there is fact. (Sorta like the other other boogie men of modern life -- the drug trade & child pornography -- your cite, including the other links on the Salon web page -- effectively tripled the literature I could quote about the effectiveness of spam advertising.)
I guess I have to revrt to my original assumption about spamming: the only people making money from this are the folks selling the mailing lists or software to other folks who then send their solicitations to millions of email addresses, & lose their Internet access in exchange for a handful of responses -- if they are lucky enough to receive them.
Like P.T.Barnum once said, ``There's a fool born every minute, & two to take him."
Geoff
I think I see a trend here. Maybe for them it really would be easier to muzzle the entire internet than to produce p
One way to get folks to pay attention is for some of the larger ISPs to block further up the line. If Mediaone (now AT&T Broadband) were to block all mail traffic from MSN, it would certainly catch someone's attention and make them clean up their shop real, real fast. For me to trash all MSN mail would perhaps work for me (I indeed do trash entire domains privately), but not do anything to reduce the core problem that MSN is spam friendly. Companies likes da back and if they start losing paying customers because they are skunk striped due to some spammers he has welcomed, those spammers will get the heave ho real fast.
Those spammers aren't paying their pink-contract fees!
If UUnet moved all their spammers onto pink contracts, they'd make much a high profit.
--
Read more of this story at Slashdot.Read more of this story at Slashdot.Read more of this story at Slashdot.
Other than the high-handed tone of your screed, You some good points....and some not so good points. For instance, you *do* pay to receive "spam" via US mail. As the volume of mail grows, the facilities required to handle this mail grows along with it. Who the hell do you think pays for more delivery men, sorters, trucks and all of the other shit that goes along with it. The people who produce junk mail don't make one lump sum payment to enhance the facilities of the USPS. The volume increase isn't due to personal letters my friend. You also pay as you have to fedex stuff around the country so that it will get there in a reasonable amount of time. I think that this particular argument is far more than a "tired old analogy".
As far as the content of the spam goes, it's not my "pet cause", I'm just sick of having to explain to my parents, and other older users of the medium why they get emails about "hot teens" and whatnot.
Personal use I send 10 or so emails a day.
School stuff I send 0-40 a day (group work, copy 3 or 4 people adds up fast)
At work when I worked nights everyone else worked days I was easily sending 100-200 a day. I would guess people who work at home would have similar needs.
I would be pretty pissed off to have to give a $200 deposit to send email. Although some sort of authentication to send over X emails/day would be reasonable.
My ISP blocks outgoing smtp traffic, I MUST use their mailserver. It is annoying, particularly with poorly set up mail servers.
But now I just forward to theirs, and everything is fine.
Forcing the Reply/From headers is just stupid, I would leave my ISP for that kinda shit
---
Here is a link to a special BlackHole List. It is rather arbitrary ( see its name.. ) but quite effictive. I've been using it for some weeks now and the amount of known-spammers for our domain has dramatically decreased. See http://rbl.v6net.org
I'll guess that type 2 spammers (smart dialup users) are a biggest part of the problem, and they're registering many accounts with stolen credit cards, wouldn't the combination of frauds taking place here (and we'll assume that most of the business opportunities are fraudulent at best, and most are prima facia illegal) warrant a serious FBI task force?
They seem to have plenty of time and money to chase script kiddies whose "damage" may only be limited to B&E, but chasing people who steal service with stolen credit cards so they can promote criminal enterprises strikes me as more important by an order of magnitude.
If you run your own mail server or an ISP, just block most of the spam via RBL/DUL/RSS from MAPS. If you don't run a mail server, choose an ISP that does these things for you on theirs. That will block most of your bandwidth waste.
now we need to go OSS in diesel cars
I wish I could tell you the correct US Code...But here is the "$500" part:
...
(B) an action to recover for actual monetary loss from such a violation, or to receive $500 in damages for each such violation, whichever is greater, or
(C) both such actions.
This is about Fax spamming...Or misuse of telephone equipment... If you look at it loosely enough, email could apply... In the real world, I doubt it would hold up...But heck, there are some good lawyers out there... (Good being figurative =])
All I have is the Section # and title:
Sec. 227. Restrictions on use of telephone equipment
You could do a search on that, and find it though, I'm sure..
There really aren't that many different spammers. There are probably less than 100 people behind all the spam. If spamming was illegal, and some lawyer made a business of going after the top offender on Spamcop every month, spam would be gone in a year or two.
Now I think spamgourmet.com will accept mail from other domains, if the MX record for the domain points to the server, but I'm not sure. It'd be interesting to find out one way or the other, and/or to move the site to a server where it could...
who's moderating the meta-moderators?
Ok, maybe I'm naive here, but I've seen enough to realize that capitalistic forces tend to set the course of just about everything in today's world. Which leads me to the question, which benefits from spam. I'll have to assume that all the corporate spammers out there are striving to make some money out of their efforts in some way. Wouldn't one of the most effective anti-spam campaigns be to simply cut off that revenue stream? I'm not sure I've ever actually read a spam email, so I may be out on a limb here, but if people just stop buying or browsing to whatever spammers are selling, they should start to go away.
Kind of like that Simpsons' Halloween episode where the commercial mascots went nuts until everyone ignored them.
UUNet isn't hte only problems, a lot of spam comes from
-- DuckWing
so shit, you're going to boycott the entire US east coast net traffic?
Good luck with that one!
Steven V.
I patented screwing your mom. But it got revoked for "prior art."
PSI had taken (and deserved) a ton of flak in the past because of their crumby handling of UCE and abuse complaints. Fortunately, I think that the pressure of MAPS and others is finally forcing some changes at the companies.
Last week, I had a problem with a PSI customer with a stuck browser who was (accidentally) hammering our shopping cart script. I called up the number listed in the WHOIS record for PSI.net. A few simple keypresses and maybe 20 seconds later, I was connected with the abuse department. I was speaking to a real, live person! The representative was friendly and understanding and willing to take immediate action against the abuse. She requested that I send logs to abuse@psi.net and while I still had her on the phone, I was to wait for a trouble ticket number. A few seconds later, I gave her my trouble ticket number and she took action while I was still on the phone with her. Amazing.
I used to work for a large cable modem ISP and our "Abuse" department at the time was one lady and an always-full voicemail system and mail queue. Keep up the good work, UCE crusaders. It's finally paying off.
Pick an account. Aol, yahoo, whatever. Start replying to spams. Act interested. Act like some idiot fool with cash to burn. Sure, you'll get added to even more lists, but odds are that the original spammer will REPLY TO YOU to get more information.
And what do we now have? THE SPAMMER'S ADDRESS.
Maybe it's not his personal account. But it sure as heck is one he cares about. He checks it for his business. It is very critical for him to have a business account to contact his clients (cough-easymarks-cough).
This sounds very promising, except that spammers are normally either reachable by phone, or they have a website they are promoting. From what I've heard about reading up about spam in various forums, they don't tend to use a real email address to do business - well, they'd get spammed if they did that, wouldn't they!
Not to sound horrible here, but we all manage to live with spam pretty well, it's not like it's all that much of a hassle. I just keep a variety of email addresses to give out for different purposes.
You might possibly be able to convince me to see your viewpoint if 90% of my spam wasn't out-and-out fraud/get rich quick/pyramid schemes. A lot of these things that the spammers are pushing are flat out illegal (under U.S. law), and some people are uninformed enough to buy into them. So maybe port filtering is not the answer, but I don't think spam is okay to live with, at least not the type I'm accustomed to receiving. This is people abusing the system. And unless we continue to fight back in force, it will get worse. There is no doubt in my mind about that.
- Scott
------
Scott Stevenson
Scott Stevenson
Tree House Ideas
I realize not everyone will setup filters, but as long as I have them for me it isn't a problem anymore!
And that makes it okay?
Yeah it gets the bbq going great, however it tends to set you on fire too..
We're on a UUnet T1 at work, and run our own mail server. I really don't want the hassle of having to bounce all my mail through UUnet's boxes, and neither do they - it just increases their network and server load for no reason. I pay them for a pipe and some minimal DNS replication. I *want* to run my own boxes.
Also, one thing the proponents of all these fancy ISP-based solutions seem to overlook is, does the ISP have the staff? With the competitive pricing in the market it is hard for ISP's to afford good staff. I won't mention names, but we had a customer whose office internet and email (and hence DNS) was provided by a major regional ISP, and when we put their new website live I went through three calls and about ten people to find a support person there who understood the concept of why I wanted an A record for the domain name itself.
The response rate isn't 20%, the percent of people responding positively is. Since the original writer doesn't know how many emails were sent out, we don't know the response rate.
God invented whiskey so the Irish would not rule the world.
&& d0n'7 forg3t to g0 by the st0re and g3T s0me SOAP on the way h0me!! ... l0v3 y0u ,,, :)
\0x0x0x0x
Mrs AC
I wonder why they're even in charge of this. This issue obviously affects their business very little, since they sell access, and spammers need bandwidth and we need bandwidth to download all that spam.
I personally used to always send unsolicited emails to abuse@uunet.com and I don't remmeber ever seeing anything come out of it. Those addresses I used to use still get insane amounts of spam. It's ridiculous.
Even my new addresses, which I've only been using for about a month, are already getting spammed. And I only use them for business functions and I'm always careful to not uncheck the "send me more info" buttons.
Obviously, spam is way out of control at this point and needs to be controlled by a different organization.
Maybe someone like internic or icann, at the domain name level, can have enough power to really do something about spammers.
___________________________
http://www.hyperpoem.net
hyperpoem.net
Actually, you've put your finger on an important point -- in the case you cited, the spammer wasn't getting a response, and wasn't likely to for very long (if at all). A trojan may get you SMTP access (or an account password), but once complaints start arriving in the POP box a few hours later, the user will call customer support, change their password, and/or run that virus scan they have been ignoring for months.
This is a general problem. Salon did an article reporting their miserable experiences in trying to respond to spam. Basically, they couldn't get through to anyone!
So aside from the common sense of the recipient, there is a real question how would-be suckers can actually learn where send their hard-earned money when spammers are so elusive. Web pages are one answer, but In the weeks after that Salon article, I tried a few times, and found that the spammer Web sites were usually either dead or empty.
Much (but by no means all) apparent spam is actually meant to harrass the unwitting "sender", either as a vendetta or a blind script-kiddie prank. In managing several domains, I have seen a lot of spam that would never be commercially viable because the sender could never, even in theory, get a reply.
Of course, if there are only a million idiots out there, and each of them periodically decided to 'give it one more try' with that software they wasted $35 on... that adds up to many billions of spam a year, and that's still just a drop in the bucket.
uu.net should take the shoot first, ask questions later approach that hotmail.com does. The problem that large ISPs have is their dialup customers, its quite difficult to track down a spammer on a dynamic IP. I imagine thats the main problem that uu.net has.
Here's a page from spamcop.net (a spam-reporting and filtering service which I highly recommend) that people might find interesting: http://spamcop.net/stats/biggest_source.html.
This is the list of top sources of spam as reported through their service - #1 is UU.net with 43811 reports. #2, a distant second, is sympatico.ca with 3168. Draw your own conclusions.
Why can't the ISP track the phone lines (via call waiting or such) and track down the spammer like that?
Steven V.
I patented screwing your mom. But it got revoked for "prior art."
Just forward your email to your fax machine for a day...and wait!
Steven V.
I patented screwing your mom. But it got revoked for "prior art."
This Question is kind of silly, but I really would like an answer.
Does anyone know how Hormel feels about the usage of the word spam in reference to things besides the meat? (Hormel is the company that makes Spam, the food) Have they ever tried to discourage its use in reference to things besides the meat? Anyone?
Actually, a better way is not to give an explicit limit but employ exponential backoff, like some news servers do. After a small number of messages, each additional message is delayed by an increasing amount. The delays soon become prohibitive.
If a user actually has legitimately need to send large quantities then they need to get a "bulk mail" account. No significant differences from a normal account except that the backoff is eliminated, identity confirmation is required, and an agreement must be signed holding the customer liable for damages if they do spam.
I wonder if it would be practicial to impliment some form of exponential backoff in a router. 'Be tough to distinguish spam from large attachments I suppose.
There are legitimate reasons to have direct port 25 access. The solution, IMHO, is to require ID confirmation and some sort of a deposit to gain port 25 access. It may take a few days to set up but that's no big deal for a legitimate user. 'Makes it pretty hard for a hit and run spammer though.
Prevention is better than cure, in this case.
This seems like an area where a faster, tougher response to spam would greatly reduce their problems with it. If UUnet were to have a working group that spanned the legal, sales and abuse departments that pretty much responded to spam within 12 hours (or some similar short time) and expedited dealing with it, sure, that would cost them a lot more money.
On the other hand, they'd ultimately have less work to do; how many spammers would use the service if they knew that they'd get about 24 hours of use.
A further twist would be placing some sort of brake on large amounts of outgoing mail - perhaps every 10 complaints received reduces the # of messages per hour by 10% that UUnet will handle from these people (or further, artificially choking off the bandwidth of outgoing packets that are directed at port 25 - although that might be infeasible technically). If it turns out the complaints are not well-founded, then the brake could be removed.
Of course, if the ISPs are colluding with the spammers, there's not a whole lot one can do.
I guess hitting their website is usually pointless, but going to it and getting further contact info might help.
;)
On the other side of the coin, if we get a phone #, who is to say that they don't get several dozen random phone calls from a DialPad bot?
------
Let me give you the lowdown
You've not hit upon something new, you're just damned lucky. On both of my domains and all email addresses on those domains I've gotten spam in short order even though I know I was the first and only person to get the domain. And it isn't easy stuff, either. Hell, when I setup an account at a national ISP with this username (greydmiyu) which I have /NEVER/ seen anyone else use anywhere I was getting mail 2 DAYS later. I never use the account for anything since I have my own server. Go fig.
-- Grey d'Miyu, not just another pretty color.
"We follow all the rules and regulations, and we've had full compliance with the law," Nace said, describing the 17 e-mail messages he says he sends over his two T1 lines each second. "All they have to do is say, 'we want off the list,' and they're off."
Nace takes exception to being called a spammer , a term he associates with pornographers. UUNet's reaction, he said, was unwarranted. "This is a clear-cut case of the big corporations telling the small operator, 'screw you.' " LOL!
"
/ \ ASCII ribbon against e-mail
\ / in HTML and M$ proprietary formats.
X
/ \
Time is Nature's way of keeping everything from happening at once... the bitch.
My solution to spam on my school account was simply telling friends that I won't accept any email from msn.com and then filter out the whole domain. So far this has worked wonders. Now I know why I have received so much mail originating from msn.com - I read in the linked article that msn is a UUnet partner and that it lacks port 25 filtering. I wish I didn't have to filter out a whole origin domain. I would just ditch the account, but my school refuses to send school-related email to another account.
However the BEST way to go spam-free is to buy oneself a domain that has never been bought before. I have unlimited POP3 (within the space limits that my hoster provides) for myself a few of my friends. I have been spam free on my domain email for just over 2 years now. Not one single one. It's worth the price of email hosting. Just make sure no one has ever had the domain before and let it go back up for sale. Another of my domains have spam associated with certain email addresses. Careless past owners and users! It was funny though seeing the "kmoore" that previously had an email account has subscribed to various porn sites.
---
---
I'm just an ordinary man with nothing to lose.
Well, I can't speak for UUNet US, but I work for UUNet Canada, and the guy who takes care of spammers works in the same department as me, and I can say with 100% assurance, ANY spam complaint he recieves, is dealt with swiftly, and immediately. I've seen him turn off a customer's 10 meg bustable ethernet connection before, just because they had an open SMTP server that was being used for spam, and until the customer fixed it, they remained disconnected.
Because it cost them time and money
they get a tiny return on their efforts
If a small percenatage reply especially to
the spam with 800 numbers it will cost
spammers more time effort clogged phone systems
bogus e-mail signup forms
I effect we can spam them to death
becuase every bogus reply will cost them something.
http://Lenny.com
12 sys-admins around a dimly light table:
- "Here is yet another one: 'My friends, are you running into brick walls with your job?'"
- "Shall me vote right away?"
- "Guilty"
- "Guilty"
- "Guilty"
- "Guilty"
...
- "I'll the arrangements"
Because it cost them time and money
they get a tiny return on their efforts
If a small percenatage reply especially to
the spam with 800 numbers it will cost
spammers more time effort clogged phone systems
bogus e-mail signup forms
I effect we can spam them to death
becuase every bogus reply will cost them something.
http://Lenny.com
Coming from a fairly large ISP in the southeast, I had to deal with spam from uu.net hitting our subsidiary company's mail servers. Complaining to abuse@uu.net usually did nothing but generate the usual Auto-Reply: " Here is your case number. And well get back to next year...." In the case of a massive attack, the only quickfire solution was to blacklist uu.net on the mail server. Calling uu.net's NOC was like trying to call the cable company at 4:50pm about your cable being out and needing repair; you play the on hold game for 30 mins. Meanwhile, if your queue doesn't break 8000, your sendmail connections top 1000. Uunet needs to rethink their abuse policy and procedures.
--Chemguru
I love spam. Spam is my favorite food. Its light and understated taste refreshes and cleanses the palette after a dish of caviar. Its airy and delicate flavor compliments truffles, eggplant, and parmesan.
It contains partial supplies of 2 vitamins and minerals! It even- imagine this- stays crunchy in milk. If you ask the finest chiefs in the world which pink meat product they prefer, there can be only one choice.... S P A M
Thank you.
"Any connection between your reality and mine is purely coincidental." -Slashdot
Enter a high-paying career in anti-spam technology with high-paying technology companies!
Earn money hawking anti-spam products!
Qualify for that second mortgage!
Yes, you only need to send $12.99 to the following addr
Click here to read something completely unrelated to the rest of this comment
--
It's rare that you're presented with a knob whose only two positions are Make History and Flee Your Glorious Destiny.
The reason that the web pages are so often dead is that they're usually shut down for TOS violations too - SpamCop, for one, reports the admins of any web sites and email addresses linked to in spams it processes. Free web providers like Angelfire and Geocities, in particular, don't seem very hesitant at all to nuke spammer pages..
Q) What is the only way to effectively have a spam-free account?
A) Change your account frequently.
Yes, you could NEVER give it out, but then you might never know what silly shmuck friend of yours will forward an email you sent to a guy who sends out joke lists that are read by another guy who posts the list, email and all, on his website.
OR, you could be really creative and only make your listed reply-to addresses contain those witty NOSPAM.blah.com lines, which sooner or later (if not already) will simply be encoded by a spam collection bot to bypass in search of more legitimate addresses to collect and sell.
Q)What's the solution then?
A) Pick an account. Aol, yahoo, whatever. Start replying to spams. Act interested. Act like some idiot fool with cash to burn. Sure, you'll get added to even more lists, but odds are that the original spammer will REPLY TO YOU to get more information.
And what do we now have? THE SPAMMER'S ADDRESS.
Maybe it's not his personal account. But it sure as heck is one he cares about. He checks it for his business. It is very critical for him to have a business account to contact his clients (cough-easymarks-cough).
So now what do we do? Submit it to some grassroots organization that stores the address. They'll register a few hundred random accounts at legitmate locations (we don't want to spam him back with false addresses like he did, now do we?) and send him oh, 400 emails with varying lengths and varying titles and varying names EVERY DAY. He won't be able to sort out who is who and will waste a bulk of his time trying to find 1 or 2 legitmate buyers.
Thus the loop is complete. They waste our time, we waste theirs. Sooner or later, 95% of them will deem the practice to be more trouble than it is worth. It's not perfect, and sure there are a few holes in the idea, but how does it sound as a start?
------
Let me give you the lowdown
> "We follow all the rules and regulations,and
> we've had full compliance with the law," Nace
> said, describing the 17 e-mail messages he says
> he sends over his two T1 lines each second. "All
> they have to do is say, 'we want off the list,'
> and they're off."
Any time you HAVE to opt-out of a "service" by sending a "take me off the list", then you are a spammer.
This guy is a clear-cut spammer. His account should have been revoked from day 1.
A couple of years ago, when S.1618 was proposed, there was discussion about it on some mailing lists that was interesting. That's long over with, and every piece of email I receive that refers to it is SPAM. So if you set your email filters to trash email referring to "[Ss].1618" and "[Ss] .1618" you'll only trash spam, not real messages.
Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
I havn't really minded spam since I setup mail filters to delete all messages that dont have my email address or one of my forwarding accounts in the TO or CC fields, or are sent from a sender on a predefined list of OK mass mailings (ie listservs). Even hotmail has basic mail filtering ability; if everyone setup filters spam would not be profitable. I realize not everyone will setup filters, but as long as I have them for me it isn't a problem anymore!
___
The way to see by faith is to shut the eye of reason. --Ben Franklin
Because it costs them time and money
they get a tiny return on their efforts
If a small percenatage reply especially to
the spam with 800 numbers it will cost
spammers more time effort clogged phone systems
bogus e-mail signup forms
In effect we can spam them to death
becuase every bogus reply will cost them something.
http://Lenny.com
Because it cost them time and money
they get a tiny return on their efforts
If a small percenatage reply especially to
the spam with 800 numbers it will cost
spammers more time effort clogged phone systems
bogus e-mail signup forms
I effect we can spam them to death
becuase every bogus reply will cost them something.
http://Lenny.com
I had/have some trouble with an UUNet customer who is an extrem spammer, he sends lot of mail, with large CC lists to an open relay in the .cn domain, we get the To: , cause it's for a domain we have the MX, most disturbing is of course that the open
relays in .cn drop the CC and we get lots of angry mails from customer, who get those spam.
.cn domain, that they close their open relay, but a short nmap scan showed me, that they are using M$ server with all ports open and have perhaps no clue how to close it, they just don't react on my mails...:-(
I mailed UUNet, got a trouble ticket and it looked like they closed his account, but he just signs up a new one and it starts all over again.
I mailed the admins in the
Looks like I couldn't do much about it...Perhaps I should launch some DOS attacks to bring those M$ servers down, wouldn't be very friendly, I known, but it looks like, it could be the only thing I could try to prevent those spam...sad...
Michael
It's technical term is DNIS - and every termserver that I know of supports it.
You get your terminal server to send the DNIS to the Radius accounting server, and the Radius server to log it in the accounting records.
If someone is using a forged/stolen CC number, you give this information to the police, and send the bastard to jail.
Credit card fraud is taken _very_ seriously by the police.
Keep many email addresses, I have about 6 or so, I think. I have one that doesn't go out to anyone but my friends and family, period. I have another one that I use for signing up for free crap on the internet. I check it every couple days, I usually has 100+ every time I clean out the box.
Then comes the fun part: I have a few more addresses that I track very carefully. I have a notebook of what email addy I used to sign up for what. Then, when I start getting spam on any of the dummy accts, it makes it easy to figure out what company is either a) spamming you, or b) selling your email addy to a spammer.
I also do the same thing with my regular mail address when I sign up for things. Just toss in an intentional type-o and watch it flourish from one company to 15+. (I have mail coming to me from about that many companies with the same type-o on it, none will own up to where they got it)
On a side note, you can sorta do the same thing with telemarketers, but fucking with them is a lot more fun than blocking them entirely. I once had the rare opportunity to make a carpet cleaning company hang up on me for keeping them on the phone for twenty minutes only to tell them that I have wood floors. Laughed my ass off for weeks on that one...
"See, we plan ahead! That way, we never have to do anything now."
Exactly. I've setup a domain and colocated mail server for my family and friends to use as an SMTP server and POP/IMAP server so they don't have to deal with the inept ISPs' tech support. So now with ISPs apparently starting to block outbound port 25 it gets a little annoying... but no matter. The SMTP server can just as easily also listen on 1025 or 2025 or whatever easily bypassing their lame filtering. Personally I'm of the opinion that an ISP that you pay for should do NO filtering other than private IP and anti-spoofing of their address space and let the end user deal with the spam, NetBIOS traffic, etc. ISPs shouldn't be in the business of blocking anything they should be in the business of providing you the fastest, most reliably open internet access that you can get for your money.
Nace also said that when pressed by one of Nace's co-workers, the UUNet staffer told the co-worker that he was "stupid for not using cloaking software," to hide the IP address of his outgoing mail.
Well, nace was stupid for not constructing fake packets, but any URL has to point to his website in any case, and the URL kinda identifies the account.
Some send a reply, with the subject "remove" in the header, looking to escape from future mailings. Some add death threats, Nace said... Nace takes exception to being called a spammer, a term he associates with pornographers. UUNet's reaction, he said, was unwarranted. "This is a clear-cut case of the big corporations telling the small operator, 'screw you.' "
As oppoosed to, say, a clear-cut case of the big corporations enforcing thier terms of service, whilst people who have been sent spam say 'screw you', or maybe 'I will personally hunt you down and gouge out your eyes with my Leatherman'.
On a more seroius note, why don't UUNet say 'After ten complaints from demonstratably different parties, your connection will be suspended whilst we investigate'? That would allow near-instant shutdown with big UCE incidents.
Michael
...another comment from Michael Tandy.
"Goodness me, how unlike the FBI to abuse the trust of the American public." -- The Onion
It occurs to me that there are two problems here: 1) everyone likes to bitch about spam but how much of the bitching has to do with getting unsolicited email and how much has to do with the larger problems (and costs) that the ever-increasing volume of spam (and legit) email produces? I think that the fundamental nature of the internet has clearly gone from the early "Internet Club" (duh) to a commercial medium. Every other commercial medium (TV, Radio, even US mail) produces huge amounts of unsolicited advertisements. Anyone ever complain to the USPS about the gigantic volume of junk mail that shows up in your mail every day? Anyone ever tried to "unsubscribe" from junk mail in your regular mail? I'd bet 99% of people haven't. It seems to me that the thing to do is to figure out a way to make commercial users of email (advertisers specificly) pay to support the medium. In addition to supporting the medium, there should be some rules about what kind of content is allowable in these emails. And don't even start yammering about fucking first amendment issues. I've yet to get a piece of mail from the postman about some chick that likes to take it in the ass.
The second issue is that this mob rules mentality that most anti-spammers seem to have screws up other legitimate uses of email. The "Newsletters" that many sites send out seem to fall into a gray area that threatens to eliminate this otherwise useful feature. Many small sites (who seem to constitute an ever-increasing percentage of sites) use newsletters to keep users coming back and these newsletters are an important piece of their strategy!
In summary, perhaps this is a good place for the gov't to get more fully involved. I don't normally advocate this type of governmental activity but I think it would be best to solve this problem in a coherent manner before one of the spammers manages to line up a court case involving an equal protection issue or some such.
I believe you're correct, regarding the use of stolen cc's and the like, but can't these people then get thrown in jail? Last time I checked, credit card fraud was illegal, and shouldn't we be seeing a bigger effort made to stopping that sort of thing?
ISP's are seen as responsible is it's only the ISP who can say 'you can't use our service'. THe ISP can set terms of use. If spammers want to hop providers, fine.. what the anti-spam world wants is for NO providers to allow spam, or for the ones that do to be easily identifiable.
UUNet has 43,576 complaints, and the next highest is (sympatico.ca) has only 2,994.
I think that puts UUNet right into AGIS territory in my book. Time to shut the fuckers down until they clean up their act.
-jcr
The only title of honor that a tyrant can grant is "Enemy of the State."
Assuming it's not just slashdotted, I'd like to thank whoever cracked and crashed that motherfucker's server.
-jcr
The only title of honor that a tyrant can grant is "Enemy of the State."
So I don't believe UUNet's "we're trying but it's hard" story. They are lying. And it is about time that we consider a boycott of UUNet's parent, MCI-Worldcom.
Prime numbers are exactly what Alan Greenspan says they are -S. Minsky
The problem with making the ISP responsible for spamming is that they will just go to another provider. In the case of warez, kiddie porn, DeCSS etc. no one expects the ISP to take action, they go after the people responsible. We need a way to go after the spammers ourselves, rrather than leaving it to an ISP that may or may not do anything.
One way to stop spam would be via compulsary encryption. Then only people who take the time to obtain your key will be able to mail you, and you will always be able to verify the identity of the sender via their key.
--
enterfornone - logging in for a change
Maybe it's me but this paragraph sums it up nicely. UUNet spends (approx) half a billion dollars a year on network upgrades (5*52*2mil) and passes on these costs to ISPs that need the bandwidth to handle the onslaught of spam email coming down the pipe from companies that UUNet negotiates "pink contracts" with - all the while spending 10 million a year on spam cops to screw over the rest.
Nice.
Please stop APK.. you're only hurting yourself.
I've always wondered, how effective is SPAM anymore? People get so much junk email nowadays then they just delete it without even thinking twice. Even regular peple who can't figure out why they get these emails in the first place probably get roll thier eyes and delete it too. Is SPAMing even getting through anymore?