Slashdot Mirror
UUNet Is The Number 1 Spam Host
An anonymous reader submits "Statistics for February have UUnet leading the Spamhaus top 10 worst Spam ISPs chart. The Register point out that ISPs like UUnet and Abovenet continue to host spammers despite advertising anti-spam AUPs." And the competition is probably wishing they had as much luck.
Thanks to Mozilla + Bayesian filters.
Seriously, my life has changed for the better thanks to Open Source. I don't know what I'd do without it.
Background: 28/M/Bi-Sexual; Owner of a Linux company; MBA Harvard 2003; B.S. Comp Sci MIT 2000
Could this probably be because UUNet in my understanding is one of the largest ISP's?
Veni, Vidi, Velcro!
I know not where it comes from, but I know where it goes. About 500 pieces of it each day, most of it filtered. I have to wonder aloud, with such a deluge, do any of these fools pushing junk actually believe such an onslaught will generate business?
A feeling of having made the same mistake before: Deja Foobar
... or does anyone really think that these guys are NOT aware of this?
I think it's pretty much been proven that this is wishful thinking. When a provider starts blocking large stretches of IP blocks owned by a particular ISP like UUNet, average users scream bloody murder. My prediction is UUNet will do nothing, and nothing will happen to UUNet. Sad but true.
"Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
UUNet is probably just trying to get as many customers as possible.
I'm not sure if this reasoning is sound if we're talking about regular accounts, unless spammers are paying for their bandwidth (a thing I expect they avoid doing at all cost).
A regular customer who checks email once a day should be a lot more profitable to a ISP than someone who sends spam all day long.
Of course things are probably different with commercial accounts... I'm not familiar with UUNet so I don't know if they are a commercial only ISP.
Treehugger? Treehugger... Treehugger!
On a slightly more serious note:
While I advocate extreme violence against spammers, I do feel that it is the responsibility of an ISP to stop spam at the source.
However, if the spammer is merely leasing an IP/Dedicated connection from the ISP, this involves placing restrictions on the actual line - which isn't called for.
In essence, if you are leasing directly from an upstream provider, they aren't so much an ISP in that case. If the customer was grandfathered in under an old contract, the provider could be left without any legal recourse against the person.
However, if a customer is in violation of their AUP and the AUP was agreed upon at the initiation of the transaction (leasing the line, buying the connection, etc), then the ISP should be held to enforcing that, be it by terminating service or installing filters, etc.
I suppose the most difficult thing is when someone leases a line to run a dedicated server serving legitimate mailing lists, etc.
This becomes a case of "How Draconian do you want your ISP to be?"
I know I can deal with the spam. I hate it, but I'd rather deal with spam than be incredibly restricted by my AUP.
Large portions of UUNet have been listed by the various anti-spam blacklists, such as Spamhaus, and all of UUNet is blacklisted in SPEWS. These providers are the scum of the Earth. They will delay, misdirect, and outright lie to keep their sweet large contracts with the spammers, at the expense of all their other customers.
Do you want to put your faith in a business that is indirectly lining the pockets of spammers?
Doing the Right Thing should not be preempted by making a buck.
This is what makes acts like the CANSPAM act so silly. Does anyone really think we'll be able to deal with it, legally or otherwise, until we have the technology implimented to do so?
Do they use stolen credit cards regularly? I wouldn't think so. You can get away with spam a lot of the time without legal conseqences but credit card fraud is another matter. Wouldn't any spammer that did this sort of thing get caught fast? Or do they go through chained proxies to do it all and regularly get away with it?
Before this debate gets too out of hand, has anyone weighted amount of spam vs. size of network?
UUNet is a large, large carrier with many networks globally. Are they the worst spammer because they have the most network entry/exit points, or are they unfairly attacked here because they are just large?
Unfortunately, UUNet is Worldcom, and they handle something like 50% of all internet traffic at some point. They could block the entire rest of the internet easier than we could block them.
Or... we might help accelerate that process. What if filtered spam was "returned" to the sender?
How do you identify the sender? The From: address is forged, the envelope MAIL FROM: is forged, the Reply-To: if forged, and in most cases, the originating IP address (the only one you can count on) is a virus infected zombie.
Granted this would put extra load on all of our own ISP email servers, but it would put a MUCH greater load on the ISP's who host the spammers.
No. All it will do is bombard some innocent victim (probably somebody who complained about spam to the spammer's ISP) with thousands - or millions - of emails that they were not reponsible for. That means that you are part of the attack,, part of the problem.
It's one thing to send out 1million spam messages on your server, but to have to deal with all of those emails coming right back at them...
Which is precisely why spammers forge all identifying information they possibly can, and why your plan will make spam worse, not better.
Comcast is a joke, and not a funny one, hence many people have not been transitioned from attbi.com addresses to comcast.net ones.
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
I love, love, LOVE getting tons of messages bounced back from when one of my domain names gets used as the From in spam. Or when I get MS virus' bounced back saying "You sent a virus" even though I'm not running microsoft.
But it does sound good on paper.
riding round the world on an old motorcycle
I am a UUNet/Worldcom customer and have multiple pipes to my network from their backbone. I think they have one of the best-performing backbones on the Internet.
Unfortunately, while I am happy with UUNet's performance and stability, I am even more unhappy with their apathy towards their network being clogged by spam traffic. And at least 40% of the bandwidth I pay for is consumed by unwanted UCE, so they actually profit from this crap. As a result, there's not much incentive for them to address it. And I have to grudgingly pass these expenses on to my customers.
But UUNet is not any different from other top-tier ISPs. They hide behind the "common carrier" metaphor, using it as an excuse to justify a large portion of the bandwidth they sell to others which is unuseable due to spamming.
I can't help but think if I ordered a telephone line, and 40-60% of the time I had "noise" interfereing with my ability to communicate, that the phone company would be obligated to resolve the situation. Unfortunately, with ISPs, there doesn't seem to be anyone at the top that really gives a damn, nor any incentive on their part to address the situation.
Actually, the idea is a great one, which will never work. Stick all of the spammers in a known IP range, great. Now everyone simply rejects all mail from that IP range, and the world is happy. Problem is, eventually, some ISP is going to get it in thier head that they can squeeze a few more dollars out of the system by offering a "premium" spamming package. This gives the spammer an IP outside the listed spammer range, and allows them to spam to thier black heart's content.
As good as it sounds to put all of the spammers in a box, which we can each shut the lid on, it won't hold. The ISP's will see too much money to be made from allowing spammers outside the box, and then we end up back where we are now.
Nope, the only solution to this problem is going to be a technological one. Fortunatlly, the technology we need has been around since the first days of man, the club. Applied liberally about the head and sholders of every confirmed spammer in the world, we should see a drop in the amount of spam we see.
Necessity is the mother of invention.
Laziness is the father.
!THWACK!
No, you weren't paying attention. Nowadays, lots of spam comes from zombied machines. While these tend to be run by idiots, they're still an innocent third party.
OTOH, I can see sending this back to the corporate mail servers of some of the large ISPs hosting these zombied machines and refusing to cut them off from the 'net.
I've seen zombied machines left on the net for *months*. I'm still seeing my servers hit from machines that were infected *last year*. This is pure laziness on the part of the ISPs hosting these morons. Their accounts should have been yanked long ago. I won't mention names (**comcast** cough cough), but this smacks of gross negligence.
-- The pinhead celt
The issue of spammers is fairly unrelated to the different major bandwidth suppliers. We have three different providers here and spammers rarely request or care which network we put them on. They just want to get their 1.5 day's of major spamming done before we shut them down. The issue is what is going on at data centers to stop spammers quickly and what is being done on the internet to make spamming unprofitable.
./revolution
Perhaps this would hurt spammers the only place that counts - in the pocketbook. When a message is confirmed as spam then have a filter extract all the urls from the message and place them in a file. Have an hourly cron job visit that list of urls and download using wget everything at that url and all of it's subfolders - and delete the files after downloading - and bypass the proxy if you have one - these are all wget options. Have the hourly cron job keep only the last 10,000 or so urls so that there is some semblance of only downloading current spam urls.
This process, if followed by millions of spam haters (perhaps we could have a public spam url website that would let people fetch a hundred urls at a time to work on that we could upload our own spam urls to), would apply the slashdot-effect to all the spammers. Bandwidth costs money for them - it's the only way to make 'em stop.
The spammyness of your web hosting ISP can be a major factor. When you sign up with a host company, either dedicated or shared, you are assigned an IP address from their "pool". If you get an IP from a former spammer life is not good!
I got an IP address that was blacked listed by SPEWS once. Much of my email would not work and the web host company would not change my IP. They suggested I contact SPEWS. I later learned that the host company was a spammer magnet and I was not alone. I switched companies and all is well.
Jeff
How do you know that the company or site named had any thing to do with the spam? If putting an URL in a mass-mailing is enough to get the owners of that URL punished (financially or legally), then you will see joe-job spam used as yet another means to harrass uninvolved third parties.
Mal-2
How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
Gee, isn't it deceptive trade to say one thing and do another? Is failure to enforce a published contract, saying that everyone has to abide by it fraudulant?
On the email servers I manage, UUNet, Level3, Shaw, Cox, and Above.net are all almost completely blocked. The bounce message says "This site does not accept email by default from your current ISP. Please call xxx-xxx-xxxx to request whitelisting."
I love it when spammers call and try to get whitelisted. Like I've never heard of SpamCop, SpamHaus, SPEWS or News.Admin.Net-Abuse.Sightings...
Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.