MAPS vs. Gordon Feyck: Who Owns the DUL?
etrnl writes "The spam-l mailing list has an interesting post from Nick Nicholas about a recent lawsuit between MAPS, LLC. and Gordon Fecyk, who had arranged with Paul Vixie to host the DUL with MAPS in 1998. Even more interesting is that Nick was the Executive Director of MAPS who hired Gordon at MAPS in 1999. Notable quote from Nick: 'I find
it extremely ironic that an organization which is currently soliciting donations
to its own legal defense fund would now be using its limited resources to pursue
litigation against a former employee.'"
MAPS wants a temporary restraining order on two separate copyright claims:
first, that Feyck can't use the DUL database, and second, that he can't run a too-similar website (now
down). The bone of contention is that Feyck claims he
bought back
the DUL from MAPS, and
MAPS disagrees.
Incidentally, the DUL is currently stopping CmdrTaco from directly emailing one of the Slash coders.
And while I know he's a decent guy, he also tends to be a little too hard-headed for his own good (at least he ws a few years ago). I suspect that some communication here between the parties will clear up a lot of what's going on.
On the other hand, since I know Gordon to be an honest guy, I suspect that the other party is trying to screw him out of what rightfully is his.
Kickstart
Yes, in reputable news sources, acronyms are explained the first time they appear in a story. HTML even has an tag which lets you explain it with a mouseover.
DUL (Dial-up User List) is not a blacklist, though it is often mistaken for such. The DUL is a listing of dynamic ISPs that is used as a filter by subscriber ISPs to prevent direct e-mail from those addresses.
The future isn't what it used to be.
Here's a problem... with no easy way to deal with it.
Over the last few years, the Internet provider for Costa Rica has been targetted by anti-spam types as a spam hoster.
Now.. that's all well and good, but the end result is that
a) The entire country's IP range is on SPEWS
b) Internet is a government run monopoly here.
c) There is no direct way to be removed from SPEWS. You cannot contact them. You cannot explain your situation. (My situation is that we happen to have some IP addresses in this country, and have trouble reaching our customers because of it. We don't spam.)
Now.. I fully support the fact that the Internet is an anarchy, that each individual is free to decide how their network will or will not accept traffic from others, yada yada yada. On that I am firm.
But when it comes to an ISP.. we have a problem. An ISP that subscribes to this, sure, it's their choice, but it's awfully hard to explain to the client that they have to instruct their ISP to stop using this service. And the odds of the ISP stopping? Not likely.
The point is, in theory, it's all fair, in practice, it's a problem.
Sigh. No it's not. (How many times does this need to be said.) The mail server CmdrTaco is trying to email is stopping him. The DUL is just a listing; it does no blocking.
Sender: Spam Prevention Discussion List
From: Nick Nicholas
Subject: COURT: MAPS Sues Former Employee and DUL Founder, Gordon Fecyk
I have been a strongly outspoken supporter of MAPS for many years.
When I was at pacbell.net I nearly had a heart attack when Paul Vixie called in 1997 to warn us that we were about to be listed in the MAPS RBL for running unsecured mail servers. But I supported his actions even then. Indeed, his call was very helpful in speeding up the bureaucracy at pacbell.net and getting the unsecured mail servers closed to relaying even more quickly. I appreciated Paul's willingness to work with us on resolving our problems.
I wanted pacbell.net to use the MAPS RBL, but instead I was instructed by management to compile my own list. I felt my meager efforts could not compare to the quality of the RBL made available by MAPS, but, unfortunately, my own wishes were overruled.
When Paul offered me the opportunity to become Executive Director of MAPS in December 1998, it was an offer I simply could not refuse, and for the next year and a half I was one of the leading cheerleaders for MAPS.
Even though I left MAPS in August 1999, it was an amicable departure. Soon afterwards I was hired as Chief Privacy Officer for a company in the direct marketing industry, and I still continued to defend MAPS against its many critics in that industry.
Last year I decided to write a book about the history of MAPS. My intent was to focus on the companies that sued MAPS and abused the legal system in order to prevent MAPS from exercising its legitimate free speech rights. I wanted to portray Paul and Dave Rand as beleaguered but slightly flawed heroes.
However, my opinion of MAPS was forever changed this past April when it decided to sue DUL founder, Gordon Fecyk, after Gordon attempted to exercise a December 1998 contract he entered into with Paul Vixie in his capacity as MAPS CEO.
My overview of this matter, as well as copies of court documents filed in the case, can be found at the following URL:
http://www.lawsuitinfo.com
It seems that MAPS has learned a great deal from the lawsuits brought against it by Harris Interactive and others, and has adopted the same slimy tactics. In particular, the affidavits filed by Margie Arbon and Anne Mitchell are full of factual errors and material misrepresentations. I will add my commentary on these affidavits at a later date.
A hearing will be held in the Manitoba court tomorrow (5/7). We will add additional info as soon as possible.
Gordon may have to sell his car in order to pay his not inconsequential legal bills. Is anyone interested in making a contribution to help Gordon with his legal expenses? If so, please send your contributions to Gordon's attorneys at the following address:
Cassidy Ramsay
385 St. Mary Avenue, 2nd Floor
Winnipeg, Manitoba R3C 0N1
CANADA
Checks or money orders should be made out to Cassidy Ramsay
Be sure to include a note with your contribution stating that it is on behalf of Gordon Fecyk in the Mail Abuse Prevention System v. Fecyk case.
All contributions will be placed in a trust fund by the law firm and used solely to cover Gordon's legal expenses.
Contributors will receive an acknowledgement from Cassidy Ramsay. However, all contributions are covered by attorney-client privilege, and thus the identities of contributors will remain anonymous. Information about contributions *cannot* be obtained by MAPS through the discovery process.
I cannot describe how much it saddens me that it has become necessary for me to bring all of these disturbing facts to light, but I think it is essential for the Internet community to be aware of what MAPS has become. MAPS is no longer devoting its energy to fighting spam and co-operating with others in that fight, but instead is suing a former employee who attempted to exercise his legitimate rights pursuant to a contract with MAPS. I find it extremely ironic that an organization which is currently soliciting donations to its own legal defense fund would now be using its limited resources to pursue litigation against a former employee.
Regards,
Nick
http://www.claws-and-paws.com/spam-l/
Search and archives are at:
http://peach.ease.lsoft.com/archives/spam-l.html
But you have to be a subscriber to use the above.
Sig: What Happened To The Censorware Project (censorware.org)
That is nothing worked until a few days ago. I recommend anybody that has spam problems, can run procmail or is in charge of a mail server running sendmail check out the "Distributed Checksum Clearinghouse" (DCC) at http://www.rhyolite.com/anti-spam/dcc/
It took me some time to get the dcc sendmail milter dccm working correctly but, since I did, this has become my new best friend. Its catching 100% of spam targeted at me and rejecting it.
From what I know about MAPS I think its a needed service to keep ISPs in check. But it seems targeted at attacking the delivers of spam and doesn't seem to provide much to directly protect the recipients of spam mail. DCC is the only solution I've found that accurately prevents spam mail from even being delivered to myself or users. I think this is necessary because if nobody actually receives spam the spammers will starve.
So If you're like me and think spam is a rashy plague that you can't get rid of their is a cream available and it is named DCC. Check it out.
I will never live for sake of another man, nor ask another man to live for mine.
Anyone who has worked with / for / against MAPS knows that they are primarily interested in fighting. Their original purpose was to fight spam, but they're just as into fighting folks they don't like and each other. As far as I can tell, they really don't care *who* they fight, as long as there's lots of name calling and moral outrage involved.
MAPS is a joke. A classic case of the old saying about the pavement on the road to hell, and also a classic case of people thinking there's a technical solution to a social problem.
-b
Yes, this prevents someone from running their own SMTP relay on a dynamic IP, but it's the only effective way of preventing such direct-to-target-server spam from going through.
MAPS might have a few good points but in my wholly uninformed point of view, they seem to deserve to lose.
To sum up 3 years:
Gordon Fecyk: Hey Paul, here is the DUL - I'll even indemnify you of any damages because of the list.
Paul Vixie: Great - I'll make you the maintainer of the DUL and we'll draw something up saying you can regain ownership of the DUL for $10 (the contract minimum in the US at the time). MAPS will take the good and the bad - all the publicity and all the legal trouble associated with it. When you want to leave, you can take the DUL back for $10.
forward 3 years
GF to Dave Rand/MAPS: I'm leaving. Here is $10. I have a recent copy of the DUL. I own it. You can use it free for a little while and we'll work out a contract after that. I'll even let you have first change to negotiate for it.
MAPS to GF: Lawsuit.
MAPS argues in the lawsuit that GF doesn't own the DUL and even if he did, he couldn't maintain it properly on his own, it causes legal issues with MAPS (privacy issues), saying that he owns it hurts MAPS, etc.
If I was MAPS, I'd be protecting my income sources as strongly as possible. Not having followed the MAPS project/organization much and seeing they still accept donations, I would be worried too.
The right thing to do would be to honour the agreement between Paul Vixie and Gordon Fecyk. If it bankrupts the organization, it is a sad thing but something could be worked out. (eg: cheap licencing - Gordon seems *very* reasonable)
The wrong thing is to fight for your life and not even try to do the right thing first.
Then again, if the DUL is a major source of income for them, I can't seem them caring much about doing the right thing. Morals are nice but survival comes first I suppose.
My morals suggested I check google for a cached version of the DUL and post the link but it looks like google didn't get it in time. Anyone have links?
Jeff
It's quite clearly a pre-contractual negotiation. It clearly doesn't even contemplate acceptance in those terms. If there's no written contract, the thing Gordon points to as a contract would be evidence of what the terms are, but not conclusive evidence. If there's a written contract somewhere else, then unless those terms are in it, Gordon's out of luck.
It's also worth noting that the DUL is the most valuable part of the MAPS services in that it blocks more spam than the other parts. Without it, MAPS will almost certainly lose customers.
In other words, Taco does have an smtp server of his own to access. On his own machine. Like he should. If you're a dialup user, it's beneficial to have an inbound mailbox server somewhere that's always connected, whether it delivers the mail to you by SMTP or POP/IMAP. But no need to do that for outbound.
The reason the DUL is helpful for blocking spammers is not because there's no legitimate reason for a dialup user to run SMTP - it's just that many of the popular clients use a relay so they don't have to handle error messages or hang out trying to deliver to slow servers or delay delivery on temporarily unavailable servers, and that many spammers abuse cheap disposable dialup accounts, but they get booted off of their ISPs' mail servers too fast to make them practical, or rate-limited, so they deliver their own email so they can reach more suckers before being squashed.
Some ISPs block outgoing Port 25 that doesn't go through their servers - really annoying if you've got more than one ISP account, and don't like having to reconfigure your machine just because you're dialing in from work or on the DSL at home instead of the other dialup.
Bill Stewart
New Fast-Compression-only CPR http://preview.tinyurl.com/dy575ks
It drops any connections from any IP address within the list. It doesn't check any headers, it just checks the IP address of the connecting machine.
So, for example,
a) if dialup user a sends through an smtp server on dialup user b's box, it gets rejected, as the smtp server is running on dialup space.
b) if dialup user a sends directly to an smtp server using the DUL, it gets dropped again
c) if ddialup user a sends to smtp server on dialup user B, which in turn forwards and relays properly through his ISPs SMTP server, it will get through, as the ISP SMTP server will not be in the DUL.
Incidentally, the DUL is currently stopping CmdrTaco from directly emailing one of the Slash coders.
Lucky Slash coder. That's one less email sender who's message he'll have to decipher from proto-Pigeon English to the real thing...
"Accept that some days you are the pigeon, and some days you are the statue." - David Brent, Wernham Hogg
It also has the worst false-positive rate. Typically, most Linux distros I've seen are set up to send their own email rather than rely on a third party email relay to send it. The DUL ensures that machines set up in this default fashion, despite not being set up as relays, will not be able to deliver perfectly legitimate email.
/dev/null. I wouldn't encourage it though, and I wouldn't encourage use of the DUL for the same reason.
Essentially, for something to be useful against spam it has to reject as much spam as possible while leaving as much legitimate email as possible alone. The DUL may succeed on the first ground, but it fails miserably on the second. It also promotes ignoring RFCs, as relaying was never blessed as the way for ordinary users to send email.
You can reject spam by setting up your mailbox as a softlink to
KMSMA (WWBD?)
No, its not DUL preventing our fearless leader from sending e-mail, its the admin of the box using DUL.
This is why I hate things like DUL and MAPS that block everything and are prone to false positives that keep you from even seeing the mail. Stuff like spamassassin can take MAPS and DUL into account and add "spam" score based on that, but at least with spamassasin the mail isn't completely toss away, you at least have the filter it to a "spambox" you look at like once a week for the false positives and/or you can put CmdrTaco on your white list, so he doesn't ever register as spam.
Spamassasin is a much better solution, IMHO.
Read this Link to see what the scum that sell spam software have to say about spamming
http://Lenny.com