Slashdot Mirror


SpamCop To Be Sold To IronPort?

Iphtashu Fitz writes "InfoWorld is reporting that SpamCop is about to be sold to IronPort Systems for an undisclosed amount of money. According to the InfoWorld article, the announcement will be made on Nov. 25, and will include IronPort investing $1 million in SpamCop to keep the service up and running. IronPort apparently makes use of the SpamCop DNS blocklist in their spam filtering products and this move is seen as a way to help support SpamCop and formalize their relationship. IronPort is reported as stating that the SpamCop blocklist data will remain freely available to the public."

29 of 111 comments (clear)

  1. undisclosed...? by wrinkledshirt · · Score: 5, Funny

    InfoWorld is reporting that SpamCop is about to be sold to IronPort Systems for an undisclosed amount of money...

    Hey, I don't know about you, but no price is too small for that great selection of penis enlargement offers they must have at their fingertips.

    --

    --------
    Bleah! Heh heh heh... BLEAH BLEAH!!! Ha ha ha ha...

  2. webmail.spamcop.net ? by Anonymous Coward · · Score: 3, Interesting

    What about spamcop's mail service? What will happen to people who pay ~$30/year for zero, and yeah, I mean zero, spam? Accounts sold?

  3. IronPort's Reputation? by Kris_J · · Score: 3, Interesting

    I currently have a SpamCop account, it's my primary address (though I also use Spam Gourmet's aliasing service). Does anyone know if I should start looking for a new email address?

    1. Re:IronPort's Reputation? by nbvb · · Score: 5, Informative

      No way, the guys at IronPort are fantastic.

      If I've ever met a group of people who understand the Spam Problem, it's them.

      This is *fantastic* news! The guys at IronPort Systems make the best damned mail routers I've ever seen. Bar none.

      Their SenderBase and Bonded Sender programs are really a lead into solving the SPAM problem.

      Both products integrate directly into the IronPort C60 mail appliances and automatically apply what they call "reputation filters" which let you control SPAM. You can throttle based on the "reputation score" from SenderBase, as well as traditional methods.

      The fact that BrightMail is integrated also is a major bonus.

      Back to the original point, I'd definitely give IronPort a chance here. They're a GREAT group of people (I've met everyone from the CEO on down), understand e-mail, and really want to do the Right Thing.

      Check them out at: http://www.ironport.com

      Unfortunately, my company's rules won't let me give a public testimonial as a satisfied customer, but believe me, if I could, I would!!

    2. Re:IronPort's Reputation? by Anonymous Coward · · Score: 3, Interesting

      Let me get this straight...these are the same great guys that produce the IP-shifting, filter-thwarting, 1-million-messages-per-hour email delivery appliance? Sounds like they provide tools to spammers, then clean up on the other end with filtering tools and services. But I could be wrong.

  4. Potential advantage of corporate backing by bigberk · · Score: 4, Informative

    Spamcop is one of the blocklists that has been under perpetual attack by spammers. Recently, spammers started a rather major DDoS against spamcop and several other services.

    Antispam services that have limited operating resources (such as the now defunct monkeys.com and osirusoft.com) -- while extremely useful services, simply didn't have the means to withstand major attacks. Those two services had to be shut down because the owners could not deal with the onslaught. Spamhaus, and probably now Spamcop will be able to withstand attacks.

    Kudos to any company that joins in on the spam fighting effort. Also worth mentioning are the good folks at Easynet, who have been running top-notch anti-abuse DNSBLs that are available to the public.

  5. I use SpamCop for e-mail... by rborek · · Score: 5, Insightful
    ... and it's generally pretty well filtered.

    However, I would never use the SpamCop blacklist for completely blocking e-mail - only filtering. Why? Any one "possible spam" message processed through its system lands the server on the blacklist - which means one user that sends out a spam message (or even a message that someone thinks is spam or unwanted) that is then processed as spam through SpamCop puts the mail server onto the blacklist. The server will not be removed for a minimum of 24 hours.

    This means that systems that are active against thwarting spammers can still end up on the blacklist for 24 hours (or longer - you can report e-mail for up to 3 days after it was sent).

    1. Re:I use SpamCop for e-mail... by Zocalo · · Score: 4, Informative
      Any one "possible spam" message processed through its system lands the server on the blacklist

      That's not quite correct. SpamCop uses a fairly simple, but quite effective weighting system that combines the number of reports and the age of reports to decide whether to block an IP or not. You can find out the specifics here if you want, but in a nutshell a minimum of *two* reports are required for a listing of just 24 hours. All IPs will be delisted 48 hours after the last spam complaint, which can be upto 5 days after the last spam was sent, as you imply.

      Yes, mistakes can and do happen (I've seen Amazon and a popular mailing list blocked), which is why SpamCop recommends you don't use it as a DNSBL, but despite that I have found it to be the most accurate blocklist of all. I use three DNSBLs on my server (SpamCop, Spamhaus and my own local one) with an SMTP error verbose enough to pick up bounces. I've seen just *two* false positives, one from a mailing list and another an advert from Amazon. A simple "amazon.com OK" in my mail config fixed that permanantly, but that's not really an applicable solution for a big multi-user server.

      If that kind of filtering makes you nervous, then a better solution is to configure something like SpamAssassin to check the DNSBLs for you and assign a positive score to the hits. If you adjust your SpamAssassin scores to reflect your personal confidence in each enabled service then the results are superb. For the last three months I've been running with the three DNSBLs listed above blocking IPs outright and SpamAssassin checking about half a dozen more for a match amongst all its other checks, plus a few custom ones and adjusted scores. The results are stunning:

      • Two minor false positives on the DNSBLs
      • Zero false positives from SpamAssassin (you rock!)
      • Three spams of the meaningless content type arrived in my inbox (fixed by tweaking some SpamAssassin scores)
      • A few thousand legitimate emails received
      • Probably a similar number blocked or removed - who cares?
      Spam problem? What spam problem? ;)
      --
      UNIX? They're not even circumcised! Savages!
  6. Undisclosed by Lehk228 · · Score: 3, Insightful

    Will the Deal for an undisclosed amount of money be finalized in the undisclosed location that The Vice President was kept in?

    This sounds like a very good thing, IronPort will benifit by being able to tightly integrate SpamCop into hardware and SpamCop will become better due to less downtime due to DDoS attacks

    --
    Snowden and Manning are heroes.
  7. Re:Spamcop's list of websites by Dwonis · · Score: 2, Insightful
    I got into a 'spam war' with one of my roommates back in college, and with that Spamcop list I was able to render his email account COMPLETELY useless within a couple of hours (If you're reading this, sorry 'bout that Brian... )

    Please try to remember that the end-recipient of spam is not the only one who is hurt by spam.

  8. Calm down by kevin_conaway · · Score: 2, Informative

    Relax, everytime one service/company gets bought by a bigger one, folks flip out. Yes, sometimes larger companies have sinister motives but most of the time it is in the best interests of both companies and the industry. Corporate backing == more money == better products (hopefully)

  9. Deja vu Comments? by stryders · · Score: 3, Informative

    This comment seems oddly familiar

  10. Great. Slashdot subscriber spammer! MOD DOWN! by numbski · · Score: 2, Informative

    I'm even putting karma on the line to say so.

    Ugh....I can't believe the couth of some people...

    --

    Karma: Chameleon (mostly due to the fact that you come and go).

  11. I don't know what to be: happy, sad, indifferent.. by numbski · · Score: 2, Interesting

    Here's the deal.

    SpamCop works on fighting spam. They get an investor.

    Happy day!

    Um...I've read several posts that say IronPorts is a good company, so no worries about current customers being abused - good, so my internal gut feelings about privacy issues are abated.

    I haven't used SpamCop personally, so this is only an impression, however I'm a strict hater of blacklists (blocklists?), and that's how SpamCop is being described.

    I personally opt for SpamAssassin Milter, although any method of plugging into SA would suit me, simply because it's so highly customizable, open source, and I don't have to worry about a list going down or suddenly blocking everyone, which has NEVER happened recently (would have linked to the appropriate /. article, but I'm feeling lazy right now).

    Now am I that far off? Are there redeeming qualities about SpamCop that I'm overlooking that make this blocklist a good thing? Who controls who's blocked? Is it fair? Is there a human contact when things go awry?

    --

    Karma: Chameleon (mostly due to the fact that you come and go).

  12. Ironport? by jfroot · · Score: 3, Interesting

    From Ironport's Webpage:

    IronPort's Virtual Gateway technology allows a single IronPort to deliver separate campaigns on unique IP addresses. This technology ensures that if one campaign has a problem with less than perfect spam filters at receiving ISPs, it won't impact other campaigns on separate Virtual Gateways. Each IronPort A60 supports up to 256 unique outbound IP addresses.

    Doesn't this sound a but like a spamming appliance? Basically it's saying that if one of your IPs gets blacklisted for spamming, that's ok because it will use a different one automatically.

    1. Re:Ironport? by twitchkat · · Score: 2, Informative

      Ironport's product is targeted at companies that send tons of emails that they don't consider SPAM -- big companies like Sony or Blockbuster or Merrill Lynch that have huge customer bases who have "registered" to receive mail.

      These big companies' mailservers are often blacklisted as spammers because of:

      - the volume of email they send out,
      - recipients who forget they've opted into receiving mail and report the mail as SPAM,
      - etc.

      IronPort's products are supposed to help these companies out and ensure they can keep pumping out mail.

      I guess by buying SpamCop IronPort will be able to insert their own whitelist into the filtering process: "don't blacklist SPAM from Merrill Lynch because they're a customer."

    2. Re:Ironport? by Zocalo · · Score: 2, Informative
      No. It means that someone legit like Lyris can run two or more different mailing lists on two or more different IPs at the same time on the same box. If one list gets blacklisted accidentally, then the others can carry on functioning. A conventional MTA gateway setup does not offer this by default, although there is no reason why you couldn't configure your favorite MTA to do this.

      True, a spammer could abuse the system, but why would they need too spend the money on the device in the first place? If they have all those IPs available in a single block then a traditional single IP MTA setup would work fine. A simple script to fire off a batch of spam for a couple of hours, switch the MTAs default IP to another and repeat. SpamCop will delist after at most 120 hours after the last spam was sent from an IP, so if you have an entire class /24 to play with and you switch IPs every few hours then uyou have a considerable idle time on each IP while it de-lists. Not much defence against Spamhaus though, once they get wind of the IP block it'll be on their SBL almost immediately. ;)

      --
      UNIX? They're not even circumcised! Savages!
  13. Re:I don't know what to be: happy, sad, indifferen by silentbozo · · Score: 4, Informative

    SpamCop publishes a list, but whether it is used for scoring or blocking is completely up to the person receiving the list. For example, you state that you like SpamAssassin - one of the filters that is used by SA to score spam is the SpamCop blacklist. Also keep in mind that publishing this list is only one of the benefits that SpamCop provides. I use the reporting service to report spam (and incidentally, it's these reports that go into the creation of the blacklist.)

    Funnily enough, SpamCop recently incorporated SpamAssassin for the pop/webmail service that they provide.

    As for getting on and off, there is a deputy you can e-mail (a live human being), in addition to the standard set of webforms etc. SpamCop these days is a very benign service (for the most part). The fact that SpamCop is under almost constant attack by spammers trying to DDOS them, trying to overload their systems with fake accounts, etc. tells me that spammers consider SpamCop to be a major threat.

  14. Iorn Port is also OSS friendly. by ClarkEvans · · Score: 2, Interesting

    They have funded the continued development of Python with continuations, called Stackless, by hiring the original author part-time.

    1. Re:Iorn Port is also OSS friendly. by scrytch · · Score: 2, Interesting

      I wasn't able to completely figure out what the Stackless project is trying to achieve. Prolly since I'm not really a programmer. Can someone shed some light on this?

      Stackless, which incidentally isn't the best name for it (it's based on an architecture that is best described now as "many stacks", not stackless), is a patch to Python that started off as offering first-class continuations (a continuation can be described as taking a snapshot of the run state and providing a sort of "goto" to get back to that snapshot), but it quickly moved away from that into a concurrency model called microthreads. Microthreads in a nutshell are a way of structuring programs as if they were multithreaded, but unlike "real" threads, only one thread ever runs at once, so either a truly concurrent scheduler must pre-empt them, or a microthread must yield to allow another to run.

      The advantage to microthreads is mostly about syntax -- you can write programs as if they were multithreaded, but without having to lock anything, or use awkward bottleneck constructs like thread pools. With added features like channels (a pipe between microthreads), the fact that switching between microthreads is faster than calling a function, and the upcoming feature of 3.0 that lets you pickle microthreads, Stackless really should deserve a spot in Python core (it even dropped continuations, which was Guido's main objection).

      Back to the topic: Ironport appliances run on Stackless Python, using many thousands of microthreads (presumably one for every mail that comes in). Another production use of Stackless is the EVE Online MMORPG. Ironport must keep Tismer busy on other things tho -- Stackless hasn't seen a public update in many months...

      --
      I've finally had it: until slashdot gets article moderation, I am not coming back.
  15. Re:I don't know what to be: happy, sad, indifferen by Kris_J · · Score: 2, Interesting
    Spamcop is a colaberative blacklist. If a Spamcop user (possibly several for checking) reports an email as spam, any further messages that appear to be from the same source get dumped in the "probably spam" pile for a while. To get off the Spamcop blacklist you simply have to not send spam for a short period (I forget how long). Yes, this means if *no one* reports Spam via Spamcop, it soon becomes an empty blacklist or if heaps of people report legitimate mail it gets trapped as spam. Such is life.

    The email service itself lets you decide which techniques and/or lists you wish to use to filter your mail: Spam Assassin scores, Blacklists (you can even use Spamcop's email service but not their own blacklist), or simply by country.

  16. Hrm... Sounds Fishy... by Anonymous Coward · · Score: 2, Interesting

    Ok... So Ironport has 2 main product lines. One for accepting inbound email for multi-site redundant messaging infrastuctures, the other for blasting out huge volumes of mail for marketing campaigns (ahem, SPAM).

    I did some research on these guys awhile back mainly for their inbound smtp gateway stuff, for a multi-site forwarding mess I'm currently trying to straighten out.

    Now about 3 months ago they announced that they were going to do a deal with brightmail for spam filtering on their inbound mail gateway line (and so did symantec for their mail filtering/av/anti-spam/app firewall appliance) and now they're investing/buying spamcop.

    Am I the only one seeing these guys play both sides of the fence? I mean, they've got one division dedicated to optimizing the throughput of their hardware to deliver the maximum spam/sec, while the other group is activly working away setting up spam filtering and blacklisting mail (which quite a bit of probably originated from hardware they made!).

    Is it just me or is this kind of odd?

    1. Re:Hrm... Sounds Fishy... by scrytch · · Score: 2, Insightful

      I mean, they've got one division dedicated to optimizing the throughput of their hardware to deliver the maximum spam/sec

      I'm confused -- should there be a ban on efficient mail gateways or something? Spammers don't have the budget for Ironport boxen. They especially won't have the budget to pay for an Ironport bond, because every single complaint will cost them money.

      --
      I've finally had it: until slashdot gets article moderation, I am not coming back.
  17. Here's the real test... by Dave21212 · · Score: 2, Insightful


    ...of how effective SpamCop is and how much I trust their system.

    Please notice (above) that I use my spamcop.net addy here at /. with *no obsfuscication* needed. I love it. (And it helps identify a few spams that require manual handling = trapped and reported)

    It's the users that make SC what it is. If IronPort ever goes to the Dark Side, the users will defect and there will be no SC any more ! I trust also that they understand this and that this is a happy day for the SC folks.

    --
    "Whoever would overthrow the liberty of a nation must begin by subduing the freeness of speech."--Benjamin Franklin
  18. Dear Sweet Crap by Dragoon · · Score: 4, Informative

    I'm a former direct-mailer (spammer). Yes, Hate me.

    We had 2 IronPort A60's that we would use to pound mail out like insane pixies who had too much sugar.

    With SpamCop being owned by Ironport.. .dear lord, will this mean for an extended supscription one would get removed from spamcop?

    This obviously would mean the dependance on spamcop to be a serious regulatory company, would be an idiotic assumption.

    Ironport Sells 2 series of devices The A and the C

    the A60 is the flagship of the outgoing mail genre, and the C60 is the flagship for blocking the incoming mail.

    In basic sense, they sell the ultimate spam machine, as well as the ultimate anti-spam machine.

    They're basically Gun Runners, and fairly evil. They will sell you one product to send huge mail campaings, and another to avoid them, its a damn protection racket.

    How is this legal in the us?

    --
    Welcome to the End
  19. Good, but.... by Cheeze · · Score: 2, Insightful

    ...I think they should have held out for someone like AOL. Picture this: Aol buys spamcop and integrates it into their network. They go, if you don't use our blacklist by middle of next year, you will no longer be able to send us e-mail. That gives a deadline to all of the jokers that are running open relays to get their software configured up or they will not be able to send mail to AOL or anyone else doing business with AOL. That could be a huge self-regulating spam blocker.

    On a side note, I wonder what will happen to the donated mirror servers. If SpamCop gets funding, are they going to still keep using the freebie public mirror servers or are they going to build their own and start paying for colo space? If they are going to build their own and pay for colo space, that will eat in to that $1Mil pretty fast.

    --
    Why read the article when I can just make up a snap judgement?
  20. Re:SMTP Servers? by jbrw · · Score: 3, Informative
    So, does anyone know of a company that just sells SMTP access?

    fastmail will let you use their smtp server for a one time fee of $14.95. which also gets you access to an imap account, web based mail, super good spam filtering, and some other stuff.

    i primarily use them for the smtp server nowdays though.

    and if you sign up and are feeling generous, you can use "jwilson" as the referrer code and i'll get a kickback of a $1 or something. woo! :)

    you may want to go read their official support forums, with regular appearances from the actual developers/owners of the company, to get a feel for what they offer/how they operate, etc.

    regardless of the smtp server, their web based mail is super nice. go tell your hotmail using friends to sign up to the free fastmail account (sans-smtp access) instead... fastmail will happily suck mail from existing hotmail accounts, so it makes the transition a bit easier.

  21. Re:I don't know what to be: happy, sad, indifferen by scrytch · · Score: 2, Informative

    I personally opt for SpamAssassin Milter

    You do realize of course that two of the checks in SpamAssassin are for Spamcop and the Ironport Bonded Sender whitelist?

    Now am I that far off? Are there redeeming qualities about SpamCop that I'm overlooking that make this blocklist a good thing? Who controls who's blocked? Is it fair? Is there a human contact when things go awry?

    Spamcop blocks nothing. It simply tells you whether an IP address is on the list and provides you with a URL to use to make the final determination yourself. Spamcop itself does not recommend automatically blocking based on SC listing alone. Spamcop is quite trigger happy because it's largely automated (and unfortunately the DNSBL doesn't include things like volume statistics to help automate it -- I suspect that'd be a commercial value-add). If you want a more carefully researched blacklist, I recommend the spamhaus SBL.

    The contact process is documented on spamcop's site. Humans do read and act on it. They're generally a lot more reasonable than, say, the folks on usenet you'll have to speak to if you wind up on SPEWS.

    I'd be astroturfing if I told you the overall "safe" solution I recommend, so I'll leave it there.

    --
    I've finally had it: until slashdot gets article moderation, I am not coming back.
  22. What about Cyveillance? by ccwaterz · · Score: 2, Interesting

    I stopped using Spamcop when they struck a deal to send data to Cyveillance. Is that going to end?