Slashdot Mirror


UUNet Is The Number 1 Spam Host

An anonymous reader submits "Statistics for February have UUnet leading the Spamhaus top 10 worst Spam ISPs chart. The Register point out that ISPs like UUnet and Abovenet continue to host spammers despite advertising anti-spam AUPs." And the competition is probably wishing they had as much luck.

113 of 346 comments (clear)

  1. Largest ISP? by fewnorms · · Score: 4, Insightful

    Could this probably be because UUNet in my understanding is one of the largest ISP's?

    --
    Veni, Vidi, Velcro!
    1. Re:Largest ISP? by Anonymous Coward · · Score: 5, Informative

      UU carries 50% of the US's total Internet traffic and 90% of its e-mail. It makes an easy target.

    2. Re:Largest ISP? by ackthpt · · Score: 2
      Could this probably be because UUNet in my understanding is one of the largest ISP's?

      UUNet is now part of MCI (formerly WorldCom^Hn) do you think they care?

      "Johnson, why are our revenues down?"
      "We kicked off some spammers, in accordance with company policy, Sir."
      "Well, put them back on, dammit, we need every cent we can get, it's a tough economy!"

      --

      A feeling of having made the same mistake before: Deja Foobar
    3. Re:Largest ISP? by Anonymous Coward · · Score: 5, Insightful

      That may be part of it, but back when I worked as an abuse admin (in 1998) they didn't care much (we had a deal with them for our dial up customer to use their POPs in areas where we didn't have any) and near as I can tell that hasn't changed a bit. It's PC to have an anti-spam AUP, so they have one (and had one back then, too) but it's not profitable for them to enforce it.

    4. Re:Largest ISP? by ackthpt · · Score: 5, Informative
      MCI was never WorldCom.

      Check again. When WorldCom filed for bankruptcy they changed the name back to MCI.

      --

      A feeling of having made the same mistake before: Deja Foobar
    5. Re:Largest ISP? by koan_72 · · Score: 5, Insightful

      They probably are, but resources that deal with abuse should grow proportionally with size, if you try to cut corners in that department, as in the case of UUnet, you end up with a bad reputation, and hopefully, a whole lot of IP address blocked. I know from experience when I was manually reporting spam, back in the day when the amount still permitted it, they took months of complaints sometime to drop a spammer, and it was usually due to being blocked by Spamhaus or Spews. Aren't the internet arm of Worldcom anyway? You see where they get their code of ethics.

      Spam would not be a problem if all ISPs dealt efficiently with open proxies and spamvertised sites.

    6. Re:Largest ISP? by JeremyALogan · · Score: 4, Informative
      Could this probably be because UUNet in my understanding is one of the largest ISP's?
      You are correct... they are North America's largest ISP. The problem lies in that, whether you realize it or not, you are probably one of their customers. Back in the day it was common for a company to buy one of their T1s (or T3s, or OC3s, or OC12s, or OC48s, or whatever), a couple phone lines/modems and WHOLLA... instant dial-up ISP. I'm not sure, but I wouldn't be surprised if this doesn't still go on (not everyone uses AOL and Earthlink, ya know). At my last job we had one of their T1 lines and, so far as I can tell, they didn't really cared what we did with it. The only time we ever heard from them was when they couldn't ping our router and then it was just to make sure everything was okay.

      And yeah... why do they still use that name? They've been owned by MCI/Worldcom for years now... eveen says so on their front page.
    7. Re:Largest ISP? by slash-tard · · Score: 5, Informative

      The MCI / UUnet thing is mostly internal politics but also a little bit business related. You can get 2 internet circuits or 2 frame relay connections from the company and have it go over 2 different networks for diversity. One would run on the MCI network, the other would run on the UUnet network. This gear is supposed to be completely separate.

      Also they dont monitor your traffic, can you imagine the logs that would create. They only contact you about spam (or whatever else) if someone complains to them about something coming from your IPs.

    8. Re:Largest ISP? by chromatic · · Score: 2
      You're not really hurt personally.

      They're wasting my bandwidth, my CPU cycles, my disk space, my time, and, occasionally, they're forging my domain on spam sent to other people. How is that not hurting me?

    9. Re:Largest ISP? by Arker · · Score: 2, Insightful

      (I know, I know. Spam is such a HUGE waste of time. You know what? Nobody has a gun to your head forcing you to use email. Sorry.)

      EXCUSE ME? No one gave you permission to spam my email. It's theft, pure and simple. Theft of resources I've paid for, I own, and you have no rights to.

      UUNet and Abovenet have been spammer friendly for ages, this is no news. The fact is they think they're big enough they're above the law, and act accordingly. They think they're too big to black-hole, and unfortunately they're right. If they aren't cut down to size the spammers will all end up at a handful of these huge companies and email will become completely unusable for any purpose. In the long run that will get rid of the spam problem, of course, but the cost is a bit high. Anyone who has a usable plan on how to cut these bastages down to size needs to speak up, and soon.

      The internet infrastucture is far too important to allow any single entity to control such a huge chunk of it that they're immune to consequences.

      --
      =-=-=-=-=-=-=-=-=-=-=-=-=-=-
      Friends don't let friends enable ecmascript.
    10. Re:Largest ISP? by zangdesign · · Score: 2, Insightful

      There is one other solution.

      Block UUNet.

      Give'm the death sentence. Sure, it's painful, but if enough people stop accepting traffic from UUNet and explain why, it should force them to enforce their policies.

      --
      To celebrate the occasion of my 1000th post, I will post no more forever on Slashdot. Goodbye.
    11. Re:Largest ISP? by chromatic · · Score: 2, Insightful

      You should have said straight out that you don't believe that I have the right to decide who can use my property. It would have saved time.

    12. Re:Largest ISP? by Arker · · Score: 2, Insightful

      It's not a slippery slope at all. Spam is email which is both bulk and unsolicited. The email system was never designed to accomodate such, and indeed cannot survive if it is allowed. If your email to me is unsolicited, that's fine - as long as it's not a bulk message being sent to thousands or millions of people at once. If it's a bulk message, that's fine too, as long as it's sent only to those that have solicited it. But when you combine both properties, sending in bulk to folks that have not explicitly requested to be on a mailing list to receive it, then it's spam.

      Your numbers are, of course, incorrect. Spam mailers almost never pay for their bandwidth, the fact that you're trying to figure on that shows that you aren't actually familiar with the problem. They steal outgoing bandwidth almost without fail, and that's something pretty well impossible to stop. A spam-friendly ISP isn't one that allows them to send (this is not needed and rarely offered - spammers rely on throw-away accounts and zombied boxes taken over with trojans at no cost,) it's one that continues to host websites that are spam-vertised.

      --
      =-=-=-=-=-=-=-=-=-=-=-=-=-=-
      Friends don't let friends enable ecmascript.
    13. Re:Largest ISP? by Arker · · Score: 3, Insightful

      I respectfully disagree. It doesn't matter one bit if it's commercial or not. It doesn't matter if I agree with the message or not. The key is it that it's unsolicited and bulk. This is key because once you allow unsolicited bulk emailings, you create a system where there is little to no extra cost to send to extra people, and it makes sense to send to as many as possible, Carry that somewhere near it's logical conclusions. Every business in the US sending one message a year to every email address is enough to destroy email as a useable media. Every nonprofit doing the same would have essentially the same effect. The point is that once you allow the use of email for unsolicited bulk mailing, you create an incentive to send so much email that no one will ever be able to find the messages they actually have their email accounts to receive.

      I've been spammed by the Republicans, and the Democrats, by the Libertarians, by the Green Party and the Reform Party and the Socialist Workers Party and even by some group in Portugal whose dispatches I find difficult to decipher.

      Some of these groups had my deepest sympathy. I still made sure each and every one felt the pain that comes with spamvertising. Why? Simple. If there isn't a consistent and reliable pain to be anticipated anytime you spam, commercial or not, then there is every incentive to send ads to everyone as often as possible until email becomes completely unusable. But, as long as some of us stand on our right not to be spammed, complain about it and insist politely but forcefully that those who spam us pay the price as outlined in the AUPs they agreed to, then the cost of Spam is not zero and this does not happen.

      So no, I don't agree at all. UBE is Spam. Period. I don't care if they're political, commercial, or trying to raise money for crippled orphans. If you allow UBE you create the incentives that end e-mail as a usable system very shortly afterwards.

      The trouble when you come to UUnet and Abovenet is that when you complain, they ignore you. Normally that means go to their upstream - well guess what, they have no upstream, for all intents and purposes they're it. If everybody else on the planet got together and blackholed them, it might work, but it would cause the rest of us almost as much pain as them. They're that big. They know it, and so unlike all the other ISPs they don't give a flying f$ck what their customers do, or what you think about it.

      Got a solution to that problem? I'd love to hear it.

      --
      =-=-=-=-=-=-=-=-=-=-=-=-=-=-
      Friends don't let friends enable ecmascript.
  2. What comes around... by rf0 · · Score: 5, Interesting

    ...goes around. I'm sure when spam block become so vicious that ISP's like this are blocked off they will either go under or change their mind

    Rus

    1. Re:What comes around... by orion024 · · Score: 5, Interesting

      That's a valid point. Or... we might help accelerate that process. What if filtered spam was "returned" to the sender? Granted this would put extra load on all of our own ISP email servers, but it would put a MUCH greater load on the ISP's who host the spammers. It's one thing to send out 1million spam messages on your server, but to have to deal with all of those emails coming right back at them...

    2. Re:What comes around... by taustin · · Score: 2, Insightful

      Unfortunately, UUNet is Worldcom, and they handle something like 50% of all internet traffic at some point. They could block the entire rest of the internet easier than we could block them.

    3. Re:What comes around... by taustin · · Score: 5, Insightful

      Or... we might help accelerate that process. What if filtered spam was "returned" to the sender?

      How do you identify the sender? The From: address is forged, the envelope MAIL FROM: is forged, the Reply-To: if forged, and in most cases, the originating IP address (the only one you can count on) is a virus infected zombie.

      Granted this would put extra load on all of our own ISP email servers, but it would put a MUCH greater load on the ISP's who host the spammers.

      No. All it will do is bombard some innocent victim (probably somebody who complained about spam to the spammer's ISP) with thousands - or millions - of emails that they were not reponsible for. That means that you are part of the attack,, part of the problem.

      It's one thing to send out 1million spam messages on your server, but to have to deal with all of those emails coming right back at them...

      Which is precisely why spammers forge all identifying information they possibly can, and why your plan will make spam worse, not better.

    4. Re:What comes around... by chimpo13 · · Score: 4, Insightful

      I love, love, LOVE getting tons of messages bounced back from when one of my domain names gets used as the From in spam. Or when I get MS virus' bounced back saying "You sent a virus" even though I'm not running microsoft.

      But it does sound good on paper.

    5. Re:What comes around... by pinheadcelt · · Score: 2, Insightful

      !THWACK!

      No, you weren't paying attention. Nowadays, lots of spam comes from zombied machines. While these tend to be run by idiots, they're still an innocent third party.

      OTOH, I can see sending this back to the corporate mail servers of some of the large ISPs hosting these zombied machines and refusing to cut them off from the 'net.

      I've seen zombied machines left on the net for *months*. I'm still seeing my servers hit from machines that were infected *last year*. This is pure laziness on the part of the ISPs hosting these morons. Their accounts should have been yanked long ago. I won't mention names (**comcast** cough cough), but this smacks of gross negligence.

      --
      -- The pinhead celt
  3. why? by .silG.00 · · Score: 2, Interesting

    why would the competition would have luck by hosting SPAMMERS? get payed because of all the traffic?

    --
    ------
    mmmm round and soft...
    1. Re:why? by justMichael · · Score: 2, Funny

      When a spammer finds a "spam friendly" ISP they generally pay a premium for their access. Which is why the ISP is spam friendly in the first place.

      Disclaimer: NO I am not a spammer. If you want I'll supply the "XL Humungous Butt Plugs" to give to spammers as a gift, you are going to have to deliver it yourself. With dimensions of 5" x 9", most folks are not gonna like it, unless the gaotse guy is a spammer.

  4. I know not by ackthpt · · Score: 4, Insightful

    I know not where it comes from, but I know where it goes. About 500 pieces of it each day, most of it filtered. I have to wonder aloud, with such a deluge, do any of these fools pushing junk actually believe such an onslaught will generate business?

    --

    A feeling of having made the same mistake before: Deja Foobar
    1. Re:I know not by Kenja · · Score: 5, Insightful
      "I know not where it comes from, but I know where it goes. About 500 pieces of it each day, most of it filtered. I have to wonder aloud, with such a deluge, do any of these fools pushing junk actually believe such an onslaught will generate business?"

      It DOES generate buisness, thats one of the problems. Stupid people are out there on the internet trying to make there "members" larger.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    2. Re:I know not by pangian · · Score: 5, Insightful

      Yes. They do. Therein lies the rub. Either:

      1) Spamming does make money, because some idiots actually buy things from spammers;

      2) People don't actually buy directly from spammers, but for marketers of some products (illicit, low yield) mainstream media just isn't an option, so the only way to make people aware that these products exist is through spam. (i.e. I may not buy herbal viagra, or dental insurance or an MBA directly from the people flooding my inbox, but now I know that I can buy these things online. If me and 100 of my neighbors search for these products later, at least a few will buy from the original spammer.

      3) Professional spamming shops are doing a good job of convincing retailers that 1) and/or 2) are true.

    3. Re:I know not by ackthpt · · Score: 2, Insightful
      I just wish they would enforce that new law. The federal government took the time to make most harsher state laws moot, and now they arn't even doing anything to enforce their bullshit laws.

      As one critic voiced it, on the BBC this morning, the current administration doesn't do anything until it's crisis. I wish that weren't true, maybe they are actually gathering up a pile of this trash and getting ready to haul in about 500 people, which should scare the bejeezus out of most of the rest. If Bush wants votes, this would probably be a good way to demonstrate how much he cares about the average american. [some figure in the news today puts the number of americans on the internet at 150 million, how many of that do you believe think spam is a problem?]

      --

      A feeling of having made the same mistake before: Deja Foobar
    4. Re:I know not by ackthpt · · Score: 2, Insightful
      A couple points of your hypothesis I'll contest.

      1) I think the number of emails going out to generate the same return is going up as most people are wise to it.

      2) The agent (Ralsky as one example) charges for the spam, probably could care less or is simply unable to meter success. All transactions are cash up front.

      As the volume needs to increas and blocking comes into play there should be a cap. As my spam volume is still increasing, but the rate of increase is slowing I think we're approaching that cap.

      --

      A feeling of having made the same mistake before: Deja Foobar
    5. Re:I know not by Fnkmaster · · Score: 2, Insightful
      I think you're right. Even if nobody buys Viagra from a spam email, the first place anybody thinks of to get Viagra is online - why bother going to see a doctor, you can just Google for Viagra and buy online! It's interesting, the real benefit from a lot of spam would seem to be for the manufacturer who benefits from the brand-building and the awareness of an online market created (thus also benefitting those who rank high in Google results).


      In fact, it would seem possible that some of the egregious violators may just be setting up phantom shops to spamvertize, which can be easily shut down, renamed, etc. while they keep a separate "clean" operation for harvesting search hits.


      Or maybe spam just works and people really are buying from spammers.

  5. How to stop spam. by laymil · · Score: 5, Funny

    The easiest way to stop spam is as follows:

    Step 1: Buy an aluminum baseball bat.
    Step 2: Find spammer.
    Step 3: Beat spammer with aluminum baseball bat.
    Step 4: Sell what is left of spammer to Hormel, makers of spam.
    Step 5: Deposit money into legal fund for defense against spam. (Baseball bat Distribution center)

    1. Re:How to stop spam. by laymil · · Score: 5, Insightful

      On a slightly more serious note:

      While I advocate extreme violence against spammers, I do feel that it is the responsibility of an ISP to stop spam at the source.

      However, if the spammer is merely leasing an IP/Dedicated connection from the ISP, this involves placing restrictions on the actual line - which isn't called for.

      In essence, if you are leasing directly from an upstream provider, they aren't so much an ISP in that case. If the customer was grandfathered in under an old contract, the provider could be left without any legal recourse against the person.

      However, if a customer is in violation of their AUP and the AUP was agreed upon at the initiation of the transaction (leasing the line, buying the connection, etc), then the ISP should be held to enforcing that, be it by terminating service or installing filters, etc.

      I suppose the most difficult thing is when someone leases a line to run a dedicated server serving legitimate mailing lists, etc.

      This becomes a case of "How Draconian do you want your ISP to be?"

      I know I can deal with the spam. I hate it, but I'd rather deal with spam than be incredibly restricted by my AUP.

    2. Re:How to stop spam. by FattMattP · · Score: 4, Funny
      I know that everyone is going to read the parent post and think what a funny and great idea it is. Well, it's not. A nice solid wood bat is the right way to go. It'll be heavier and will get your point across in much less swings.

      :-p

      --
      Prevent email address forgery. Publish SPF records for y
    3. Re:How to stop spam. by laymil · · Score: 2, Informative

      That is essentiall what I was trying to say. A lot of connections via UUNET are made without an ISP relationship - so even though they own the block of IPs, etc - it's not their responsibility.

  6. Re:Spam doesn't matter to me by MikeCapone · · Score: 5, Interesting

    It's indeed possible to catch most of it with good filtering (I get over a hundred a day and catch about 95% of it -- but I'm using a webmail account so I don't have control over the filtering), but it's still clogging up the net and wasting everybody's bandwidth.

    Sometimes I wonder if we'd "feel" a big difference in net responsiveness (browsing, file transfer, latency in online gaming, etc) if all spam stopped suddenly. Probably.

  7. Clue by Cranx · · Score: 5, Informative

    Spammers can sneak into even the most STRINGENT anti-spam ISP network. A stolen credit card that works only once gets a spammer an account that can deliver many thousands of letters before they're shut down. UUnet isn't spam-friendly anymore than Rackspace is spam-friendly. Spam is going nowhere until good authentication techniques are implemented internet-wide.

    1. Re:Clue by neiffer · · Score: 3, Insightful

      This is what makes acts like the CANSPAM act so silly. Does anyone really think we'll be able to deal with it, legally or otherwise, until we have the technology implimented to do so?

    2. Re:Clue by eaolson · · Score: 4, Informative
      Spammers can sneak into even the most STRINGENT anti-spam ISP network. A stolen credit card that works only once gets a spammer an account that can deliver many thousands of letters before they're shut down.
      The question isn't whether or not spammers get on the network. Any system that allows people to sign up automatically with a credit card is vulnerable to that. The question is whether or not UUnet is willing to do anything about a spammer once he's brought to their attention. Although some of the SBL records for UUnet appear to be out of date, some spammers dating back at least to April 2003 are still present on their network.
      UUnet isn't spam-friendly anymore than Rackspace is spam-friendly.
      It's amusing that you mention Rackspace. I understand they appear to be cleaning up recently, but previously, they were more than happy to host spammers, so long as they paid their bills.
      Spam is going nowhere until good authentication techniques are implemented internet-wide.
      You'll excuse me if I don't hold my breath. IMHO, so long as there is a China, there will be spam. Until then, I'm going to keep using Spamcop and SPEWS.
    3. Re:Clue by Monkelectric · · Score: 4, Informative
      The problem with that statement is its unqualified, when you see statements that say "more then ..." someone is trying to manipulate you.

      Here's why -- UUNET is a *HUGE* ISP they have more spammers then anyone else because they're bigger then anyone else. What you need to know is if they have a higher spammer/customer or spammer/site ratio than usual.

      You always hear this same stuff about crime statistics. I just heard on the news that crime in california is down 50% and they were credting the 3 strikes law. Of course it means nothing, because if you look at population statistics you'll find out that theres a dramatic drop in population of young people who statistically are most likely to commit crimes. So crime is occuring LESS (total number), but the crime rate is more or less the same.

      --

      Religion is a gateway psychosis. -- Dave Foley

    4. Re:Clue by LostCluster · · Score: 2, Informative

      The only thing that can truely take care of spam is a protocol for the provider upstream of a user to be able to revoke an e-mail that passed through them. It means moving to an e-mail system that doesn't trust home e-mail servers that don't pass through a trusted company anymore.

      Right now, any IP address holding computer has the ability to become a mail server, so any IP address holding computer has the ability to spew spam.

  8. It's all about the allmighty dollar by teutonic_leech · · Score: 2, Insightful

    ... or does anyone really think that these guys are NOT aware of this?

  9. Wow, there's a surprise. by James+A.+H.+Joyce · · Score: 5, Interesting

    Big ISPs which can afford to lose customers talk shit and do nothing. You know as well as I do that it's going to be us, the end-users, who have to be proactive about this. These ISPs don't give a fuck. They're probably run by cable school drop-outs.

  10. Not likely to happen anytime soon... by Saeed+al-Sahaf · · Score: 5, Insightful
    ...goes around. I'm sure when spam block become so vicious that ISP's like this are blocked off they will either go under or change their mind

    I think it's pretty much been proven that this is wishful thinking. When a provider starts blocking large stretches of IP blocks owned by a particular ISP like UUNet, average users scream bloody murder. My prediction is UUNet will do nothing, and nothing will happen to UUNet. Sad but true.

    --
    "Who are in control, they are not in control of anything - they don't even control themselves!" - Glen Beck
    1. Re:Not likely to happen anytime soon... by ilctoh · · Score: 5, Insightful

      Correct. It is the ISP's responsibility to prevent SPAM at its source, not merely block users from it. Users are also responsibile for using available filtering technology, and being careful about giving out their email address (especially on personal web pages). Perhaps the most useful thing that any ISP can do right now is to provide an easily accessed and located "Anti-Spam Information Page", with instructions and suggestions for users of that ISP to control SPAM.

      --
      How many slashes would a slashdot dot, if a slashdot could dot slashes?
  11. Re:grasping for customers by MikeCapone · · Score: 4, Insightful

    UUNet is probably just trying to get as many customers as possible.

    I'm not sure if this reasoning is sound if we're talking about regular accounts, unless spammers are paying for their bandwidth (a thing I expect they avoid doing at all cost).

    A regular customer who checks email once a day should be a lot more profitable to a ISP than someone who sends spam all day long.

    Of course things are probably different with commercial accounts... I'm not familiar with UUNet so I don't know if they are a commercial only ISP.

  12. Re:Spam doesn't matter to me by ssbljk · · Score: 5, Insightful

    problem is when it catchs important mail and then you have to check for 1 good in hundreds of bad ones

    --
    /ss
  13. Re:ATTBI.COM!!!!!! by ackthpt · · Score: 3, Interesting
    If I get another bogus e-mail from "anyone@attbi.com" I'm gonna snap!!! They are no more! Kill it in the registrar...

    263.net/263.com bombs me pretty consistently, I think it's chinese. It suggests pretty strongly to me that a lot of this "Chinese censorship" stuff is crap. If you've got the dough, then you can do as you please in the PRC.

    --

    A feeling of having made the same mistake before: Deja Foobar
  14. So why are there still customers? by lavalyn · · Score: 2, Insightful

    Large portions of UUNet have been listed by the various anti-spam blacklists, such as Spamhaus, and all of UUNet is blacklisted in SPEWS. These providers are the scum of the Earth. They will delay, misdirect, and outright lie to keep their sweet large contracts with the spammers, at the expense of all their other customers.

    Do you want to put your faith in a business that is indirectly lining the pockets of spammers?

    --
    Doing the Right Thing should not be preempted by making a buck.
    1. Re:So why are there still customers? by Anonymous Coward · · Score: 2, Interesting

      because the reality is:

      1. every person who buys hosting just cant afford to deal with being "politically correct" when choosing providers. Its not practical to change ISP's every 3 months because their current ISP pisses off some vocal minority who represents some whacko cause (take porn, for instance, whom hosting providers get a lot of flack from Christian groups)

      2. Sometimes financial constraints force you to go with one provider alone

      3. If an ISP shuts down spammers, some other ISP will be happy to make the lost profits that that ISP didnt want to make

      4. The SPEWS people are generally regarded as a bunch of hypocritical zealots. Very few people use them and very few people care what they say.

    2. Re:So why are there still customers? by Pig+Hogger · · Score: 2, Insightful
      4. The SPEWS people are generally regarded as a bunch of hypocritical zealots. Very few people use them and very few people care what they say.
      Only a spammer would talk like that.
    3. Re:So why are there still customers? by AndroidCat · · Score: 2, Insightful
      Entire countries, where the country has an ISP monoculture. Besides SPEWS is only a tool. You can either whitelist ranges, or you can add them where you think SPEWS isn't firm enough.

      I see the 10% figure waved frequently by sock-puppets on nanae. I also see an amazing pulse in the anonymous coward posts on spam issues. Interesting.

      --
      One line blog. I hear that they're called Twitters now.
  15. Re:Spam doesn't matter to me by sporty · · Score: 3, Insightful

    Until the spam takes up so much bandwidth for you to download and filter.

    --

    -
    ping -f 255.255.255.255 # if only

  16. Time for ISP's to take responsiblity. by aldridge · · Score: 5, Funny

    Its time for ISP's to take responsiblity for the shit that they host. Didint Gates say that spam will be dead by 2006? ( http://www.cbsnews.com/stories/2004/01/24/tech/mai n595595.shtml). Time to start breaking down doors Bill. I guess he could just use a backdoor in to the spammers running windows.

  17. Do they use stolen credit cards regularly? by enosys · · Score: 5, Insightful

    Do they use stolen credit cards regularly? I wouldn't think so. You can get away with spam a lot of the time without legal conseqences but credit card fraud is another matter. Wouldn't any spammer that did this sort of thing get caught fast? Or do they go through chained proxies to do it all and regularly get away with it?

    1. Re:Do they use stolen credit cards regularly? by elemental23 · · Score: 3, Informative

      You'd be surprised. I work in the abuse department of a large ISP and we see spammers setting up throw-away accounts with unique stolen credit card numbers daily. Spammers are no longer just sending bulk e-mail; now they also frequently traffic in stolen CC numbers and create viruses that install proxy servers on home users' Windows machines for the purpose of covering their tracks.

      I guess they figure the reward is worth the risk. Plus they're stupid.

      --
      I like my women like my coffee... pale and bitter.
    2. Re:Do they use stolen credit cards regularly? by ddent · · Score: 4, Interesting

      Apparently your not familiar with the plight of most internet merchants these days. Credit card fraud is basically ignored, and is the merchant's liability. Sad, but true.

  18. Give spammers their own IP range by KalvinB · · Score: 4, Interesting

    UUNet should give known spammers on their network their own IP range. If you spam, you get moved into that range. Those who don't want their crap can then easily filter it out by blocking those allocated spammer IPs. And the ISP still gets paid.

    Customers who are running legitimate mail servers can stay out of that range as long as they don't break the AUP. The ISP doesn't even have to kill port 25 on the spammer IPs. They could simply limit the amount of bandwidth that can be used to something like 10MB per day on port 25. Which is reasonable. There's no incentive to out and out ban those IPs if no massive amount of junk can come out of them. The spammer is just forcibly restricted until they can behave themselves. At which time they can go back to a less restricted IP range.

    I don't think there's any law that says ISPs can't selectivly put people in certain IP ranges. I don't think spammers have any way to fight it under current anti-discrimination laws. If you can even call it discrimination since it's would be based solely on the actions of the person and not who they are.

    Ben

    1. Re:Give spammers their own IP range by bigberk · · Score: 4, Insightful
      UUNet should give known spammers on their network their own IP range
      Are you kidding me? UUNet should boot known spammers from their network. Sheesh. ISPs get bad reputations precisely because they do what you describe (tolerate spammers and try to manage around them).
    2. Re:Give spammers their own IP range by Sylver+Dragon · · Score: 2, Insightful

      Actually, the idea is a great one, which will never work. Stick all of the spammers in a known IP range, great. Now everyone simply rejects all mail from that IP range, and the world is happy. Problem is, eventually, some ISP is going to get it in thier head that they can squeeze a few more dollars out of the system by offering a "premium" spamming package. This gives the spammer an IP outside the listed spammer range, and allows them to spam to thier black heart's content.
      As good as it sounds to put all of the spammers in a box, which we can each shut the lid on, it won't hold. The ISP's will see too much money to be made from allowing spammers outside the box, and then we end up back where we are now.
      Nope, the only solution to this problem is going to be a technological one. Fortunatlly, the technology we need has been around since the first days of man, the club. Applied liberally about the head and sholders of every confirmed spammer in the world, we should see a drop in the amount of spam we see.

      --
      Necessity is the mother of invention.
      Laziness is the father.
  19. Um, are these results weighted? by netik · · Score: 5, Insightful

    Before this debate gets too out of hand, has anyone weighted amount of spam vs. size of network?

    UUNet is a large, large carrier with many networks globally. Are they the worst spammer because they have the most network entry/exit points, or are they unfairly attacked here because they are just large?

    1. Re:Um, are these results weighted? by Jayjay75 · · Score: 4, Informative

      Did we RTFA?

      "UUNet hosts more spammers than any other ISP. It has 151 listings on the Spammers Block List (SBL), including 34 known spam gangs with ROKSO records, according to the anti-spam organisation Spamhaus' records for February 2004."

      They host 34 known professional hard-core spam-gangs. Size has nothing to do with it.

    2. Re:Um, are these results weighted? by Mesaeus · · Score: 5, Insightful

      UUnet is not being attacked because of the number of spam originating from its networks, but because of the large number of KNOWN spamgangs STILL residing on their network after literally thousands upon thousands of complaints. Some of the spammers haven been there for over TEN MONTHS now.
      This leaves us with two possible scenarios to explain this :

      1) UUNet is a spamhaus and will host spammers as long as they pay.
      2) UUNet is dead set against spam, however somehow their abuse department has never read all the complaints, including ten month old ones. Maybe they got "lost in traffic or stuff". Or maybe those poor abuse department people are overworked ? Or just plain DEAD ? After all this silence you start to wonder...

  20. Re:Spam doesn't matter to me by ceejayoz · · Score: 3, Insightful

    The spammers seem to be able to circumvent the Bayesian filters nowadays - about half the spam now gets through Mozilla Thunderbird's. :-/

    I suspect it's the practice of putting random words at the end of the e-mails that does it.

  21. UUNET is largely innocent by Dezsr5 · · Score: 4, Informative

    The reason UUNET is known as a facilitator of the largest amount of spam is that they are the largest ISP. And many of their customers have what is called an open relay. Since most UUNET customers send thier outbound mail through mail.uu.net (UUNET's mail relay), spammers that find an open relay send email that looks as if it is coming from a UUNET customer (and UUNET's mail relay.) This is a problem that UUNET tries to remedy, but educating a I-D-10-T customer )not to mention 10,000 customers) about his/their own mail server's open relaying capabilities is difficult to say the least. If a spammer tries to use UUNET's mail relays directly, it does not last long and eventually he is told to take his buisness elsewhere. The people that think that UUNET is using spammers to make more money are just plain ignorant.

  22. You're paying for it by ZakMcCracken · · Score: 5, Interesting

    At issue is the business model for interconnection agreements between carriers. When an IP carrier interconnects with another, the basic metric to see who pays whom and how much is the download/upload ratio of the connecting carrier. Peering (at-cost interconnects) is only granted to carriers with whom there is a level upload/download ratio.

    So if you're an IP carrier with no or little hosting on your network, you mostly download from your interconnects. Therefore you pay more to interconnect with the big IP backbones like UUnet.

    If you're UUnet, there is an economic incentive for you to host spammers, because it boosts your upload; therefore you pay less (or, in the case of UUnet, get more money) on interconnects.

    If I was UUnet, I don't see why I would waste money on fighting spammers who (1) are my customers and (2) increase my bottom line by boosting upload at interconnects.

    By considering all packets to be equal on the backbone, you're averaging "unwanted" traffic vs. "useful" traffic such as web traffic (aka porn). The side effect of this is, you're paying for spam with your Internet connection.

  23. Re:ATTBI.COM!!!!!! by drinkypoo · · Score: 2, Insightful

    Comcast is a joke, and not a funny one, hence many people have not been transitioned from attbi.com addresses to comcast.net ones.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  24. Re:Spam doesn't matter to me by Anonymous Coward · · Score: 3, Funny
    Background: 28/M/Bi-Sexual; Owner of a Linux company; MBA Harvard 2002; B.S. Comp Sci Dartmouth 1999

    <sarcasm>Thanks for sharing.</sarcasm>

    Do you believe that being boastful in your sig has anything to do with real credibility? You should check your vanity and leave your background to your user page where it belongs. And start using your sig for inane jokes, strange quotes and unusual observations like a typical slashdotter.

    "Plaque is a figment of the liberal media and the dental industry to scare you into buying useless appliances and pastes." --Master Shake

  25. Advertisements for bulk e-mailers by Gurezaemon · · Score: 5, Funny

    Oh the irony...

    I particularly enjoy the "Ads by Google" in the banner at right of the article, for
    Bulk Mailer
    Reach 500,000 opt-in recipients

    and Bulk Email List
    Low Cost Bulk Email Marketing Full Email Reports.

  26. Re:grasping for customers by clymere · · Score: 3, Informative

    I thought that UUnet was just a backbone? I know that my ISP is a small local cable company, and that in turn they get their connection from UUnet. I'm not sure that a regular home user can get an account there. And yes, it is by far the nation's largest ISP, this probably has something to do with the problem in more ways then one. It's the MS syndrome: if you are big enough, you're going to be the most-targeted for lots of malicious things. At the same time, being the biggest means not worrying as much about taking care of your customers: where else are they going to go?

    --
    once you go slack, you never go back
  27. hahaa, rooted spammer by ph43thon · · Score: 3, Interesting

    A domain of a spammer listed for level13 was rooted. OR did a spammer root all of this users domains and use them to spam?


    p

  28. Re:grasping for customers by Dezsr5 · · Score: 2, Informative

    This is just untrue. UUNET sets limits on the amount of email a customer sends out. If they want to send over that limit, they have to document why and confirm that the emails are actually wanted. If it is determined that someone is spamming they are warned once. Then thier service is cut off and they are told to take thier business elsewhere. The problem is open relays as I explained in my post lower down in the thread.

  29. Re:Spam doesn't matter to me by fembots · · Score: 5, Interesting

    Yeah, spammers are also using HTML tags, eg viagra, which in a HTML-enabled email client will just show viagra, but this kills a lot of filter. these guys are trying out another approach to deal with this though.

  30. how about blacklisting until they clean up by MoFoQ · · Score: 3, Interesting

    of course, I've used blacklists and whitelists on my acct (from softhome.net). They also have a thing called greylisting (some opensource guy came up with the idea; sry, don't have linkie) which is like the telezapper I have on my phone; it holds an email and doesn't tell the sender's server if it was successfull or not [timeout] then waits for the sender's server to try again and since most spammers use a mass-mailing program that uses a "take it or leave it" tactic, it catches most spam.

    Of course, I've added ppl I know to a whitelist so there's no delay and added IP ranges (typically uunet or above.net and some from the UK, china, korea, etc.) [Class B and Class C] to my perma-blacklist. Being able to blacklist IP ranges {or even mail that doesn't have a sender address regardless of IP) is very useful. I don't get spam that's mailed directly to me anymore (still get some spam that's sent to a mailing list like sourceforge's MLs, though).

    One odd thing I've noticed is that softhome's implementation of one of the blacklisting options has changed and effectively blocks all email that's not ok'd by me (the blank sender address filter that is). But it's ok, most ppl I know get placed on my whitelist or if I'm sending to some company, I make sure I add the companies domain(s) to my whitelist as well. Hey, it's a small price to pay for lack of spam.

    Also, if someone legit tries to email me and gets blocked, they get an error from their host that reports that "the server doesn't like them". Good for those pesky relatives...hehehe

    1. Re:how about blacklisting until they clean up by jonesvery · · Score: 2, Informative
      [...] it holds an email and doesn't tell the sender's server if it was successfull or not [timeout] then waits for the sender's server to try again and since most spammers use a mass-mailing program that uses a "take it or leave it" tactic, it catches most spam.

      Link to more information here, just to make sure that people don't get the wrong idea: a greylisting server will respond to all attempted deliveries from unknown sources with an RFC-compliant deferral, which should cause the sending MTA to queue the message for later delivery. The theory here is that most spam (as well as viruses) is sent by crap software which doesn't understand how to attempt a true "retry." No retry on a deferred message, no delivery for messages from the sending server.

      I don't recall having seen any data on effectiveness -- would be interested in hearing from anyone actually using this approach in the wild.

      --

      * * *
      It is a dada story -- it has no moral.

  31. Re:Spam doesn't matter to me by Anonymous Coward · · Score: 3, Funny
    Everybody loves this guy's sig. You're like the millionth person to bitch about it. I think it's cool, myself. What else are internet forums for, but boasts that cannot be disproven? Check out how badass *I* am:

    Background: 25/M/Asexual(spores); Ninja Master, Superspy, and Fry Cook; Diploma, Shaolin Class of '93; PhD in Ass-kicking, BMF Correspondance School, 2001

  32. Does anyone remember by Anonymous Coward · · Score: 2, Troll

    Does anyone remember when UUNet was black listed? Or when Rogers was blacklisted?

    Those were the days... but the age of activist sys admins is gone... we have been replaced with dot bomb drop outs who care about nothing more than a few $$$.

    We are finished.

    And think about it... what antispam technique can you think of that is more effective than filters and less intrusive (IE less clicking) to the users?

    Loads of things are effective but all make the user work harder than they would by just deleting the spam.

    Think of spam as an advert in your newspapaer or a commercial on TV. You're fucked and nothing can be done about it. Get a TIVO and suck it up.

    E.

  33. Re:Spam doesn't matter to me by ackthpt · · Score: 3, Interesting
    problem is when it catchs important mail and then you have to check for 1 good in hundreds of bad ones

    Sunday: 429 emails, 1 valid. It's not often like that, some days I get as many as 10 valid for about the same overall volume.

    --

    A feeling of having made the same mistake before: Deja Foobar
  34. I'm not seeing it... by chriskenrick · · Score: 4, Informative

    I run a report daily that tells me where my Bayesian-identified spam came from (IP address and host name via reverse lookup).

    Out of the approximately 16 daily reports in my inbox, only two addresses are uu.net. I'm seeing comcast.net (37 occurences) and adelphia.net (29 occurences) a lot more, by comparison.

    1. Re:I'm not seeing it... by humankind · · Score: 3, Interesting

      Comcast is my number one source of domestic spam as well. My largest source of foreign spam is coming from Wanadoo.fr. That's after I was forced to refuse connections from the plethora of Chinese IPs that seem to solely exist to promote penis-enlargement and home mortgage scams.

  35. UUNet the Home of Spam by csk_1975 · · Score: 5, Interesting

    My experience with UUNet:-

    1. In 2000 a spammer in Louisiana forges one of my domains in spam runs sent via UUNet - I get tens of thousands of bounces and hundreds of complaints.

    2. I complain to UUNet - no action.

    3. I phone UUNet security as the runs are being sent - no action.

    4. Every weekend for 2 months this happens and I get sick of it.

    5. I start to autobounce all this junk back to abuse@uunet.com.

    6. Spammer sends a run using a different ISP.

    7. UUNet gets really pissed that I bounce 1000 mails to abuse@uunet.com which didn't originate from their network (with some justification).

    8. UUNet block all access from my class C to their servers.

    9. The spam runs sent via UUNet continue....

    Forward to 2004, I still can't send mail to uunet.com!

    1. Re:UUNet the Home of Spam by platipusrc · · Score: 2, Interesting

      Speaking of online spam-only type accounts, have you received a bunch of email lately with no subject and no body? It seems weird to me. Is that some group testing out open relays or something? My Yahoo account had about 20 of those from the last 5 days, and they weren't flagged as spam.

      --
      And the muscular cyborg German dudes dance with sexy French Canadians
  36. Re:Spam doesn't matter to me by Pig+Hogger · · Score: 5, Insightful
    Spam doesn't matter to me
    Thanks to Mozilla + Bayesian filters.
    Are you sure? All your bayesian filters do is automatically "press delete" for you. But you **STILL** have to download the spam, and you **STILL** have to pay for the extra-bandwith you use to do so, and you **STILL** have to pay for the ISP's extra-bandwidth to carry all that spam for you in the first place, and you **STILL** have to pay for the disk space and your computer ressources that's are used to store the spam you don't see, as well as the ISP's ressources eaten-up by the spam.

    Filtering is **NOT** the solution. Blocking spamsources at the origin **IS**.

  37. Re:Spam doesn't matter to me by orkysoft · · Score: 5, Funny

    Hehheh, at the bottom of that page:

    This site is protected by The Do-Not-Slashdot ACT 1996

    --

    I suffer from attention surplus disorder.
  38. Re:Spam doesn't matter to me by koreth · · Score: 4, Insightful

    And without spam filtering, you'd still have to check for small numbers of good messages buried in a mountain of bad ones, only you'd have to do it every single day rather than just occasionally. This to me is a step forward, not a reason to avoid filtering.

  39. What a shame, maybe it is their open roots by donheff · · Score: 2, Interesting

    It is really to bad to hear such negative things about UUNET. They are one of the early pioneers of the Internet providing the east coast Unix to Unix (UU) network of universities. Maybe their early academic roots of open, unfettered access kept them from seeing the need to clamp down in later days.

    Don

  40. This is a problem with all top-tier providers by humankind · · Score: 5, Insightful

    I am a UUNet/Worldcom customer and have multiple pipes to my network from their backbone. I think they have one of the best-performing backbones on the Internet.

    Unfortunately, while I am happy with UUNet's performance and stability, I am even more unhappy with their apathy towards their network being clogged by spam traffic. And at least 40% of the bandwidth I pay for is consumed by unwanted UCE, so they actually profit from this crap. As a result, there's not much incentive for them to address it. And I have to grudgingly pass these expenses on to my customers.

    But UUNet is not any different from other top-tier ISPs. They hide behind the "common carrier" metaphor, using it as an excuse to justify a large portion of the bandwidth they sell to others which is unuseable due to spamming.

    I can't help but think if I ordered a telephone line, and 40-60% of the time I had "noise" interfereing with my ability to communicate, that the phone company would be obligated to resolve the situation. Unfortunately, with ISPs, there doesn't seem to be anyone at the top that really gives a damn, nor any incentive on their part to address the situation.

    1. Re:This is a problem with all top-tier providers by legomad · · Score: 2, Informative

      Sounds like you have a shared T1/T3. I suggest getting a dedicated one.

  41. Re:Spam doesn't matter to me by timothv · · Score: 5, Funny

    You **CAN** convey **EMPHASIS** with just bold or CAPITALS.

  42. I bought viagra online. by www.sorehands.com · · Score: 4, Funny

    I bought viagra online from a florida spammer. After I received the Viagra, I filed a lawsuit against the spammer, then settled for $7500.

  43. I just block domains by KalvinB · · Score: 5, Informative

    nearly all spams contain a link to somewhere. I just filter out the domains those links go to since no legitimate e-mail will contain a link to those domains. You also can't hide the destination of a link if you don't leave the harvesting solely up to an automated system.

    Takes care of most of the spam. And it costs spammers money every time they get a new domain so I can deal with what little spam gets through before the filter is updated. I've put hundreds of domains in my Mercury Mail filter which equals thousands of dollars worth of domains that are now useless for sending spam through my mail server. And it doesn't matter how distorted the header or body is. The domain can't be distorted or it won't work as a link.

    Ben

  44. I've used grey listing.. by msimm · · Score: 4, Informative
    Although I'm not sure its the project you've described: Tagged Message Delivery Agent (TMDA), from their site:
    TMDA is an open source software application designed to significantly reduce the amount of spam (Internet junk-mail) you receive. TMDA strives to be more effective, yet less time-consuming than traditional spam filters. TMDA can also be used as a general purpose local mail delivery agent to filter, sort, deliver and dispose of incoming mail.

    The technical countermeasures used by TMDA to thwart spam include:

    * whitelists: accept mail from known, trusted senders.

    * blacklists: refuse mail from undesired senders.

    * challenge/response: allows unknown senders which aren't on the whitelist or blacklist the chance to confirm that their message is legitimate (non-spam).

    * tagged addresses: special-purpose e-mail addresses such as time-dependent addresses, or addresses which only accept certain kinds of communication. These increase the transparency of TMDA for unknown senders by allowing them to safely circumvent the challenge/response system.
    I currently use bluebottle.com who just recently re-emerged after shutting their service down (siting DDOS attacks by spammers). Their service is basically what the TMDA site describes with a nice setup and a few extra features. Its a free service so if your thinking about trying something like this out, this is the one. I personally am not a fan of filter and to date this is my favorite option. Stuff that I need gets in.
    --
    Quack, quack.
  45. Re:Spam doesn't matter to me by cuban321 · · Score: 2, Informative

    My experience is that Thunderbird's spam filter is unfinished (as it is an alpha product). Spambayes catches 99% of all spam for me. It's proven better than even spamassassin. It will even work with Thunderbird.

    Daniel

  46. It's easier by KalvinB · · Score: 4, Interesting

    to just automatically move an account over to a spam IP if port 25 traffic gets too much than to pull the account entirely. Cox Communications supposedly already has an automated system to redistribute IPs (mine's never changed). So it's not something drastic that would need to be implemented.

    As other people have mentioned, relays are a big part of the problem. It's better to "punish" ignorant customers by moving them to a restricted port 25 IP than to cut them off entirely. By moving them there's no harm no foul since they weren't the ones directly spamming anyway and probably won't notice they were moved.

    If they do notice and call then the ISP can tell them to do something about their excessive e-mail sending and point them at the AUP. It's all very quick and painless to resolve the issue since it's the customer that has to take action to speak with people and not the company making the calls. People who have to call when they know they broke the rules are far less likely to do anything.

    Cox recently cut off incomming port 25. Probably because of myDoom. I'm not about to call and complain because I was trying to run a spam can on my home system. Outgoing port 25 has been blocked since I got the service. And it would be a waste of time and money for them to call me and yell at me. They quietly cut off my server and I just shut my mouth about it.

    By having a no harm no foul automated system you can punish a spammer as soon as say X MB of e-mails get sent in Y amount of time. Versus finding out about it later after it's too late and gigs of e-mails have been sent.

    Automatically kicking customers entirely is just asking for trouble because the ignorant (those who unknowingly relay) will be kicked which will result in bad PR where there should be none.

    You can still kick the spammer entirely. It's just a matter of starting with a little punishment and then escelating only as nesseccary.

    Kicking a customer should be the last resort when just limiting port 25 traffic is sufficient.

    Ben

  47. Re:Your sig by ceejayoz · · Score: 2, Informative

    In the couple weeks I've had this sig, I have yet to receive a single troll mod.

    So, no, not going to change my sig, as it quite nicely explains my feelings for both Bush and Kerry.

  48. I work at a Data Center. by readpunk · · Score: 4, Insightful

    The issue of spammers is fairly unrelated to the different major bandwidth suppliers. We have three different providers here and spammers rarely request or care which network we put them on. They just want to get their 1.5 day's of major spamming done before we shut them down. The issue is what is going on at data centers to stop spammers quickly and what is being done on the internet to make spamming unprofitable.

    --

    ./revolution
  49. Slashdotting spam domains ... by thrillseeker · · Score: 5, Insightful
    nearly all spams contain a link to somewhere

    Perhaps this would hurt spammers the only place that counts - in the pocketbook. When a message is confirmed as spam then have a filter extract all the urls from the message and place them in a file. Have an hourly cron job visit that list of urls and download using wget everything at that url and all of it's subfolders - and delete the files after downloading - and bypass the proxy if you have one - these are all wget options. Have the hourly cron job keep only the last 10,000 or so urls so that there is some semblance of only downloading current spam urls.

    This process, if followed by millions of spam haters (perhaps we could have a public spam url website that would let people fetch a hundred urls at a time to work on that we could upload our own spam urls to), would apply the slashdot-effect to all the spammers. Bandwidth costs money for them - it's the only way to make 'em stop.

    1. Re:Slashdotting spam domains ... by Jerf · · Score: 4, Informative

      Your post advocates a

      (X) technical ( ) legislative ( ) market-based (X) vigilante

      approach to fighting spam. Your idea will not work. Here is why it won't work. (One or more of the following may apply to your particular idea, and it may have other flaws which used to vary from state to state before a bad federal law was passed.)

      (X) Spammers can easily use it to harvest email addresses
      ( ) Mailing lists and other legitimate email uses would be affected
      ( ) No one will be able to find the guy or collect the money
      ( ) It is defenseless against brute force attacks
      ( ) It will stop spam for two weeks and then we'll be stuck with it
      (X) Users of email will not put up with it
      ( ) Microsoft will not put up with it
      (X) The police will not put up with it
      ( ) Requires too much cooperation from spammers
      ( ) Requires immediate total cooperation from everybody at once
      ( ) Many email users cannot afford to lose business or alienate potential employers
      ( ) Spammers don't care about invalid addresses in their lists
      (X) Anyone could anonymously destroy anyone else's career or business

      Specifically, your plan fails to account for

      (X) Laws expressly prohibiting it
      ( ) Lack of centrally controlling authority for email
      ( ) Open relays in foreign countries
      ( ) Ease of searching tiny alphanumeric address space of all email addresses
      (X) Asshats
      ( ) Jurisdictional problems
      ( ) Unpopularity of weird new taxes
      ( ) Public reluctance to accept weird new forms of money
      ( ) Huge existing software investment in SMTP
      ( ) Susceptibility of protocols other than SMTP to attack
      ( ) Willingness of users to install OS patches received by email
      (X) Armies of worm riddled broadband-connected Windows boxes
      ( ) Eternal arms race involved in all filtering approaches
      ( ) Extreme profitability of spam
      (X) Joe jobs and/or identity theft
      ( ) Technically illiterate politicians
      ( ) Extreme stupidity on the part of people who do business with spammers
      (X) Dishonesty on the part of spammers themselves
      (X) Bandwidth costs that are unaffected by client filtering
      ( ) Outlook

      and the following philosophical objections may also apply:

      (X) Ideas similar to yours are easy to come up with, yet none have ever
      been shown practical
      ( ) Any scheme based on opt-out is unacceptable
      ( ) SMTP headers should not be the subject of legislation
      ( ) Blacklists suck
      ( ) Whitelists suck
      ( ) We should be able to talk about Viagra without being censored
      ( ) Countermeasures should not involve wire fraud or credit card fraud
      (X) Countermeasures should not involve sabotage of public networks
      ( ) Countermeasures must work if phased in gradually
      ( ) Sending email should be free
      ( ) Why should we have to trust you and your servers?
      ( ) Incompatiblity with open source or open source licenses
      ( ) Feel-good measures do nothing to solve the problem
      ( ) Temporary/one-time email addresses are cumbersome
      ( ) I don't want the government reading my email
      ( ) Killing them that way is not slow and painful enough

      Furthermore, this is what I think about you:

      (X) Sorry dude, but I don't think it would work.
      ( ) This is a stupid idea, and you're a stupid person for suggesting it.
      ( ) Nice try, assh0le! I'm going to find out where you live and burn your
      house down!


      (Yes, it's pulled from here. The meta-point is, if we're going to progress in the war on spam we need to move past the solutions that have been proposed a million times with obvious holes in them. Either that, or face the possibility that the system we have now is already optimal.

      Primary justification of the above snarky copy&paste job is that this patently obvious scheme has a patently obvious DDoS scheme built into it, left as an exercise for the reader.)

    2. Re:Slashdotting spam domains ... by RyLaN · · Score: 2, Interesting

      No, no no and no. Fighting fire with mass wget will just further clog the network. Think of it, some spammer finds out that you started this scheme. Next thing you know, they put your domain in a spam email and you get ddos'd to high heaven.

      --
      At least the war on the environment is going well
  50. Re:Spam doesn't matter to me by RaymondRuptime · · Score: 5, Insightful

    I agree that blocking is preferable to filtering. Filtering is like solving gun violence by improving emergency room medicine.

    However, as an interim step, it's better than not to have Bayesian filters and well-staffed ERs.

  51. Re:grasping for customers by slash-tard · · Score: 2, Informative

    Just FYI, UUnet is now owned by MCI. UUnet/MCI also have a large amount of dial-up (modem) POPs, which is resold through other companies and used by end users. They also offer DSL in some markets.

    All of this is in addition to them being the largest backbone.

  52. Re:Spam doesn't matter to me by ssbljk · · Score: 4, Insightful

    all I want to say is that you can't trust filters 100%
    it does not matter much to people who use e-mail to forward chain letters if they miss some message - but there are also people who run business which depends on e-mail (hey I don't mean on spammers) :) and they can't let themselves to miss it.

    --
    /ss
  53. I NEVER get uu.net spam any more by sik+puppy · · Score: 3, Interesting

    I was getting deluged by uu.net originated spam, and of course abuse@uu.net is ignored.

    Finally I resorted to bouncing all uu.net originated spam to sales@uu.net and info@uu.net

    make the sales scum suffer the same problem they inflict on everyone else by selling their pink contracts.

    Some of the indignant replies from the sales staff were quite amusing. I guess they told their spammers to delete me from thier spam runs, as the volume quickly dropped and then finally stopped completely.

    --
    The first thing we do, let's kill all the lawyers. Shakespeare, Henry VI, Part 2, Act 4, Scene 2
    1. Re:I NEVER get uu.net spam any more by sik+puppy · · Score: 2, Interesting

      not really - I just sent it back to its source. If pink contracts become more trouble than they are worth, maybe they'll stop getting written.

      complaining to abuse@uu.net doesn't work. complaining to sales@uu.net and info@uu.net does work - the sales staff need the leads and inquiries generated, therefore they have to look through their inbox instead of just dumping it all.

      --
      The first thing we do, let's kill all the lawyers. Shakespeare, Henry VI, Part 2, Act 4, Scene 2
  54. Spam solutions by jonwil · · Score: 4, Interesting

    Firstly, all ISPs (and corperations, schools, unis and so on) should block port 25 by default.
    Those that want to run a mailserver for legitimate reasons can do so but anyone who hasnt speicificly said "I want to run a SMTP server on my connection" will be prevented from doing so (this would cut out 99% of the spam comming from spam zombie boxes)

    Second, close open relays (if you need to have an "open machine" run some kind of SMTP authentication)

    Thirdly, implement SPF for more hosts and more clients (if you want to run your own mail server with xxx@mydomain.com addresses but relay through mailservers at ISP, work etc, just add those SMTP servers to the SPF record)

    And forthly, be more proactive in blacklisting ISPs that are known spam havens (if enough people block the IP ranges of bulletproofspamhosting.com, spammers wont be able to get their messages through and bulletproofspamhosting.com will go out of business when the spammers leave)
    If its a regular ISP with non-spam customers as well, pressure from the non-spam customers (especially if those non-spam customers are big) might convince the ISP to dump the spamers.
    Eventually, if this happens enough, ISPs will realize that hosting spamers means that they will be blacklisted.

  55. Something really interesting... by KingRobot · · Score: 2, Interesting

    I've been running mimedefang alongside spamassassin and graphdefang to help catch my spam.

    Something really interesting happened the other day. I noticed that > 90% of my spam was coming from the IP 206.46.164.23 | 22

    So, I happily blacklisted the host.

    Whereupon, I began getting complaints that users were unable to send mail to us from Yahoo!

    I promptly made the discovery that Yahoo!'s servers are happily sending me over 90% of all my spam. It despicable.

  56. It's worth noting... by signe · · Score: 4, Informative


    I know they're not anyone's favorite company, but it's worth noting that AOL is not anywhere on the top 10 list. Not so many years ago (less than 5), they used to top that list most of the time, and the rest of the time they were in the top 3 (not necc. Spamhaus's list, but Spamcop's definitely, back when they meant something).

    Having been involved in the work, I can tell you that AOL was one of the first, if not the first, large ISP to implement tagging of outbound email with the true email address of the sender, regardless of whether or not they put it in there (the X-Apparently-From header that AOL inserted). Also close to the first, or the first, to implement outbound filtering of email for spam. When the second one was put into place, I watched the ranking and saw AOL drop from #1 to nowhere on the top 10.

    -Todd

    --
    "The details of my life are quite inconsequential..."
  57. Major Consideration in Choosing a Web Host by JeffHeatonDotCom · · Score: 5, Insightful

    The spammyness of your web hosting ISP can be a major factor. When you sign up with a host company, either dedicated or shared, you are assigned an IP address from their "pool". If you get an IP from a former spammer life is not good!

    I got an IP address that was blacked listed by SPEWS once. Much of my email would not work and the web host company would not change my IP. They suggested I contact SPEWS. I later learned that the host company was a spammer magnet and I was not alone. I switched companies and all is well.

    Jeff

  58. How ISPs make money from Spammers - Clarification by ZB+Mowrey · · Score: 5, Interesting

    The major ISPs charge in a metered fashion. That means all their customers pay by the MB, GB, etc. A spammer who uses bandwidth to send spam is going to pay for all that data - but so will the end user in the ISP's system. The ISP knows that spam is an issue, but it provides them with zero-maintenance traffic, constantly running up the user's 'meter'. In a capitalist society, profit is always the motive. The ISP doesn't just charge you what the bandwidth costs them... They add a percentage that equals profit. [Begin technically inaccurate but wholly educational example] XISP has a fixed cost of 10 cents per Gigabyte of traffic, upstream or down. They charge 12.5 cents per Gig. Spammer_X sends out 20GB of spam. He pays the ISP $2.50 for that privilege. Since cost was $2, they made 50 cents. Now, assume that the mail is primarily directed at ISPs who lease lines from XISP, and who pay that same 12.5 cents per Gig. If they get 60% of the downstream covered, they'll be able to make another $1.50 off the traffic they originated. So for transferring 20GB across their own network, they made $4 on something that cost them $2. THAT is why the "Common Carriers" take their time getting rid of spammers. The longer they can let the guy spew his mail, the more 'incidental revenue' they can scrape together.

    --

    Self-referential sigs are rarely entertaining.

  59. Two words: JOE JOB by Mal-2 · · Score: 5, Insightful

    How do you know that the company or site named had any thing to do with the spam? If putting an URL in a mass-mailing is enough to get the owners of that URL punished (financially or legally), then you will see joe-job spam used as yet another means to harrass uninvolved third parties.

    Mal-2

    --
    How is the Riemann zeta function like Trump rallies? Both have an endless number of trivial zeros.
  60. One has to wonder... by buss_error · · Score: 2, Insightful
    The Register point out that ISPs like UUnet and Abovenet continue to host spammers despite advertising anti-spam AUPs."

    Gee, isn't it deceptive trade to say one thing and do another? Is failure to enforce a published contract, saying that everyone has to abide by it fraudulant?

    On the email servers I manage, UUNet, Level3, Shaw, Cox, and Above.net are all almost completely blocked. The bounce message says "This site does not accept email by default from your current ISP. Please call xxx-xxx-xxxx to request whitelisting."

    I love it when spammers call and try to get whitelisted. Like I've never heard of SpamCop, SpamHaus, SPEWS or News.Admin.Net-Abuse.Sightings...

    --
    Necessity is the plea for every infringement of human freedom. It is the argument of tyrants; it is the creed of slaves.
  61. Re:Spam doesn't matter to me by gklinger · · Score: 4, Insightful
    Sometimes I wonder if we'd "feel" a big difference in net responsiveness (browsing, file transfer, latency in online gaming, etc) if all spam stopped suddenly.

    I was thinking about that the other day. Then I got to wondering how much CPU-time I was spending on spam filtering which led to my thinking about how much electricity I was using to filter spam. Then I started to think about all the electricity being used by computers moving the mail and routers between network points and so on. It didn't take long before my mind boggled.

    Spam is often touted as being better than physical junk mail as it doesn't use all that paper. There are however, other costs. All that electricity has to be generated and that can't be good for the enviroment.

    The next time someone says spam is a hassle but doesn't really cost them anything, remind them what went into getting that spam to them.

  62. Re:Spam doesn't matter to me by Czmyt · · Score: 2, Informative

    Yes, true, but I think it's possible to throw away the stuff that is most definitely spam (SpamAssassin score of 10+), leaving just the very likely spam messages (SpamAssassin score from 5 to 10) for you to check occasionally in your Spam folder. Personally, I throw away anything that's 6+ and move the 4-6 stuff into a Spam folder for end-of-the-day review.

  63. Already happening by TekGoNos · · Score: 2, Informative

    My ISP is blocking all outgoing port 25 connections.

    More and more ISP's force this onto their home users and render the Internet less usable.
    Granted, it gives them a little more control over the email traffic - it has to go through *their* mail-server, so they can set preciser rules (limit the number of emails per minute or so) - but it also limits my freedom to do with my connection what I want.

    And this only because some idiots catch some Windows malware and turn into zombies.

    Why am I pissed off? Sounds like a good idea?
    Yeah, except that their SysAdmins, that dont trust me, arent good enough to keep their own mailserver running. And if I have to wait 1 hour to get my mail send, just because they prevent me from delivering it myself, I'm pissed.
    And I really liked to read my error logs to find out instantly if there are problems with an email instead of waiting 2 days till my ISP sends me a : "I've tried several times and still wasnt able to deliver it"-message.

    Finally, I dont like the whole : "let's protect our stupid lusers from themself"-strategy.
    Educate them, instead of putting them in a cotton wool cage.

    --
    I have discovered a truly remarkable proof for my post which this sig is too small to contain.
  64. Re:Spam doesn't matter to me by misleb · · Score: 2, Insightful
    all I want to say is that you can't trust filters 100% it does not matter much to people who use e-mail to forward chain letters if they miss some message - but there are also people who run business which depends on e-mail (hey I don't mean on spammers) :) and they can't let themselves to miss it.

    I'd say I run about the same risk of accidentially deleting a non-spam message in a fenzy of spam deleting. You can't trust yourself 100% either. Alls I can say is that I love my Bayesian filter. :-P

    --
    "THERE IS NO JUSTICE, THERE IS ONLY ME." -Death
  65. Re:Looks like you CAN get /,'d from a comment link by Helen+O'Boyle · · Score: 2, Interesting
    Blockquoth the parent:
    You don't get slashdotted just because you're in somebody's comment, even a well-moderated one.
    9:35pm PST:
    The spamoo link in the grandparent comment works. However, when I tried to learn "About Spamoo" on the General Menu in the page, it only produced the required page SOME of the time for me. I had to try several times before it brought up the requested page.

    So, it may be that a link in a comment, in and of itself, won't get one /.'d, but apparently a link in a comment.... to a site whose functionality is partially implemented as aspx's ;-), is sufficient to earn one partial /.'ing. I wonder what their server's horsepower is, and if it's doing anything else this evening.....