Slashdot Mirror


Comcast Gets Tough on Spam

WeakGeek writes "The Washington Post is reporting that Comcast, the nation's largest broadband ISP, has started blocking port 25 to reduce Spam. Jeanne Russo said Comcast is not blocking port 25 for all its users because it does not want to remove the option for legitimate customers who process their own e-mail. So the company is monitoring traffic and picking out machines that look suspicious. By blocking port 25, they say they cut Spam by 20% last week." ZDnet has another article, with a nice statistic: Comcast generates 800 million email messages/day, but only about 100 million of those are sent through Comcast's SMTP servers.

405 comments

  1. Question... by Anonymous Coward · · Score: 2, Interesting

    How do you tell whether your machine is zombie spammer? Is running spybot enough?

    1. Re:Question... by TWX · · Score: 4, Informative

      "How do you tell whether your machine is zombie spammer? Is running spybot enough?"

      Just monitor traffic coming into and out of your computer. There are utilities that will let you do that. If you see stuff coming and going that you aren't generating then something is definitely wrong.

      --
      Do not look into laser with remaining eye.
    2. Re:Question... by Moonpie+Madness · · Score: 3, Informative

      In case that anser was not sufficient, alt control delete brings up the task manager in windows, from which you can monitor your internet activity... further you can look at your modem's activity lights.

    3. Re:Question... by Anonymous Coward · · Score: 0

      You'd need an antivirus program to find the worms that send this kind of stuff. A firewall, like ZoneAlarm (free), would work well too.

      Using a packet sniffer to monitor what's going into/out of your computer can also help. On Linux, I personally use ettercap. On Windows, you should use NetworkActiv PIACTFM. Both are free.

      If you run a mail server, there are also a number of sites that will do a check to see if your server is acting as an open relay.

    4. Re:Question... by Anonymous Coward · · Score: 0

      > In case that anser was not sufficient, alt control delete brings up the task manager in windows, from which you can monitor your internet activity...

      Only in WinXP/2003 Server. Win2K and earlier don't have this (very nice) feature.

    5. Re:Question... by aldoman · · Score: 2, Informative

      Totally insufficent.

      1. If you are using an ethernet connection (either to a router or straight to a modem) then you will have a 100mbit link. 30kbyte/sec uplink (because thats what we are looking at) will be less than 1% of utilization which is hard to see at least.

      2. Modem lights only work if you are straight wired but even if you are it's hard to spot it against a background of random network activity that windows gives you.

    6. Re:Question... by Anonymous Coward · · Score: 2, Informative

      Install Kerio Personal firewall. It's free - You need to register for the popup-blocker and other web-stuff to work for more than 30 days, but that's best left to your browser, IMO.

      Open the 'Network security' tab, and click the 'packet filter' button.

      Create two new rules.

      One that says 'Block outgoing mail', blocking all outgoing TCP connections on port 25 and pop up an alert whenever something tries to open a connection.

      The second rule should explicitly allow your mail client(s) to send outgoing mail. Make sure this one's processed first (click up/down arrows until it ends up above the block-all rule).

      Voila - Your computer is spam safe. ;)

    7. Re:Question... by reanjr · · Score: 1

      Win2K has it I believe. Just not installed by default.

    8. Re:Question... by notsoclever · · Score: 1

      Isn't the rate graph normalized to the peak value?

      --
      There are 10 kinds of people: ones who understand ternary, ones who don't, and ones who think this joke is about binary
    9. Re:Question... by LO0G · · Score: 1

      NT4 had it actually - its' the taskmgr, it's not always brought up by CAD, it's sometimes brought up by right clicking on the tray and selecting "task manager"

    10. Re:Question... by Lars+T. · · Score: 1

      How exactly does the task manager (of NT) let me monitor my internet activity? Or am I just supposed to look for SPAM.exe?

      --

      Lars T.

      To the guy who modded me down from perfect to terrible Karma - Apple haters still suck

    11. Re:Question... by LO0G · · Score: 1

      Check out the "Network" page.

      I'm not sure which release it was added (maybe it was W2K?). But the network page allows you to see your network traffic, which was what was being discussed above.

    12. Re:Question... by WuphonsReach · · Score: 1

      Question: How do you tell whether your machine is zombie spammer? Is running spybot enough?

      Answer: If it's a Windows machine, hooked up to the internet, without a hardware firewall between it and the internet, then odds are high that it's a zombie spammer. In short, you shouldn't assume that you're not infected, you should proceed from the assumption that you are already infected.

      Seriously, only fools believe that a Windows machine hooked straight to the net without firewall software will not be infected before sundown.

      --
      Wolde you bothe eate your cake, and have your cake?
  2. what about mistakes? by mp3LM · · Score: 5, Interesting

    And what if they make a mistake and block someone who just happens to send a lot of mail?

    Is there a place to appeal?...as good as this could be, I think it's going to inconvenience a lot of people.

    1. Re:what about mistakes? by drinkypoo · · Score: 4, Informative
      I don't know how they are about this email blocking thing but when they send you an abuse letter for bandwidth overusage :) you can just call support and they'll talk to you. If you want to find out how much bandwidth it's ok for you to use you basically have to call all over the country (hooray for cellular with no long distance fees) to find some guy in Florida (or such was my path, anyhow) who will tell you not to download more than 90GB/mo.

      Anyway I installed MRTG and did the math after I got the abuse letter and now I just watch to make sure I haven't downloaded more than about 250kbps averaged over the month (I'm at 181kbps right now) and bingo, problem is solved and I haven't got another abuse letter. Personally I find that to be a pretty pathetic amount of transfer per month but they have a monopoly on broadband here unless you are willing to count satellite as an option, which given the latency, I am not.

      Regardless, I'm sure calling technical support will actually be useful in the case where you're not sending spam. However, I have a feeling that they're actually scanning your outgoing messages for particular content. This is not particularly hard to do, and since it's done by an automated system it's not a breach of privacy unless they're holding logging information which contain parts of your emails longer than necessary.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:what about mistakes? by TWX · · Score: 1

      Well, if you are running a relatively legitimate mail server, odds are that it's going to be an MX in someone's DNS entries for a domain. If there is no forward resolve for 'mail.whatever' or 'smtp.whatever' or 'mx.whatever' then odds are good that something is wrong. If Comcast is allowing people to use their own mailservers, they just need to deny all by default and open your port 25 up if you call and ask, if they don't do more thorough checking like above.

      --
      Do not look into laser with remaining eye.
    3. Re:what about mistakes? by JWSmythe · · Score: 4, Insightful


      That's a good one to ask AOL..

      They've been blocking virtually anyone sending lots of mail towards them. You have to sign up for their feedback loop, then for their whitelist. In our case, we send a lot of mail to users, because they write to us asking questions. There's plenty of mail going back and forth, but none of it is spam. Most are written by humans, some are automated (You just completed this function, your tracking number is....). They've been doing hit and miss blocking just because they can. It's really annoying. They blocked my workstation because I sent out 4 messages to AOL users in the same day. {sigh}. For my workstation, it's not a big thing, I just changed the IP. But, it's more of a pain for servers.

      It doesn't make a lot of sense. I've known spammers. They'll get multiple lines from multiple providers, and keep switching IP's and networks to keep from being blocked. It's all a big act just to make it look like they're being all progressive, even though they're really just annoying legitimate people. Kinda like the TSA.

      One of our clients, with his own server and a completely opt in mailing list (like, you specifically have to ask to be on the list) was blocked. He spent hours on the phone with AOL, and got me in on a conference call with them. The support people I spoke with were completely dense. We gave up on any political approach, and just moved his mail server off to another network. He only has about 2000 people who receive his newsletter, and the people not getting it on AOL were actually complaining that they weren't getting them.

      Hopefully Comcast will be more professional about it. I know Roadrunner (now Bright House Networks) were absolute dicks about it. They once disconnected my service because I had a DNS server running. I tried to explain to them that their DNS servers sucked (about 5 to 10 seconds to resolve any name). Instead of fixing their problem, they were busy blocking users. {sigh}

      --
      Serious? Seriousness is well above my pay grade.
    4. Re:what about mistakes? by kryptkpr · · Score: 2, Interesting

      To put your 90 GB/mo into perspective, my local DSL provider gives 8 GB/mo.

      (Needless to say, I'm on cable .. with no bitcaps)

      --
      DJ kRYPT's Free MP3s!
    5. Re:what about mistakes? by bairy · · Score: 4, Informative
      I use bandwidth meter to keep track of how much I've down/uploaded during a week/month. And the log files for past months are just geeky genius.

      90gig/month is gonna be around 3gig/day.

      --


      Get paid to search..It's geniune and
    6. Re:what about mistakes? by Anonymous Coward · · Score: 0

      90GB/month?

      That's a helluva lot. Pathetic? Geez. The most that I've ever downloaded per month from Comcast was 4.0GB, and that was the month that I was testing out various Linux distros, downloading mucn more than my average.

      Unless you're running a NAT for your whole family, and you've got 3 people on that segment that warez till the sun goes down--and then some.... 90BG is way more than sufficient.

      If it's too little, then goddamnit, afford a pair of T1s.

    7. Re:what about mistakes? by drinkypoo · · Score: 3, Insightful

      How did they come to notice that you were running a DNS server anyway? Did they port scan you or something? And why didn't you just firewall it? It's not like requests from a caching nameserver look substantially different from requests from the local resolver.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    8. Re:what about mistakes? by jrockway · · Score: 1

      There _are_ other ISPs around. I get my internet from a guy who buys two T1s and space on top of a radio tower and has a WAP up there. With the right antenna, I have nice fast internet for $25 a month... and no dumb monopolies/bandwidth caps/etc.

      Also, 3G a day is a lot of downloading. I'm going to conjecture that people who download that much are probably pirating something, so I can see why Comcast and their friends at the MPAA/RIAA/BSA would want them to cap bandwidth.

      Anyway, people at my school say that the cap is "unreasonable". 1G per day is not unreasonable for a public institution to provide for educational purposes. 1G is plenty of illegal music, anyway :)

      --
      My other car is first.
    9. Re:what about mistakes? by Dachannien · · Score: 1

      No matter how much it inconveniences some people, the benefits will far outweigh that.

    10. Re:what about mistakes? by vxvxvxvx · · Score: 1

      Can people at your school opt out of the educational network? Are they able to purchase cable or dsl on their own?

    11. Re:what about mistakes? by rograndom · · Score: 3, Funny

      dude, that's a lot of pr0n.

    12. Re:what about mistakes? by Laivincolmo · · Score: 3, Interesting
      Enough with this blocking of spam!

      As we come up with newer ways to block spammers, they will undoubtedly come up with more brilliant spelling errors and other methods to bypass blocks.

      The time has come for real legislation to make this a crime, punishable by the law. Maybe some of it will stop from legal imprecations... My idea would be some sort of bounty hunting system... A system in which the government would set rewards for geeks who locate and inform the government of spamming distributors.

      And as for those spammers overseas in China... I haven't given that any thought, maybe a great wall of some sort?

    13. Re:what about mistakes? by Anonymous Coward · · Score: 2, Insightful

      What you're complaining about is a completely different situation. AOL is blocking inbound mail, while Comcast wants to block outgoing mail. The truth is, if you're on a residential cable modem you don't need to be able to send hundreds of emails a day directly from your computer. If you legitimately need to send that much mail (i.e., if you run a mailing list), you can get an account on a mail server, or you can arrange to relay through your ISP's.

    14. Re:what about mistakes? by drinkypoo · · Score: 3, Insightful

      They're not capping to prevent piracy, they're capping to reduce their costs. What do they care if you get busted for piracy?

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    15. Re:what about mistakes? by automatix · · Score: 1
      DSL in NZ...

      at full rate (8M/768K) for NZ$60(US$40) you get a whopping 600MB/month. Welcome to a crappy monopoly.

      Rob :)

    16. Re:what about mistakes? by yoshi_mon · · Score: 1

      I was wondering the same thing myself. I personally ran a cacheing NS on my gateway for over a year when I had RR and nary a peep from them about it. (If anything I always figured they would be more upset about the NAT than the NS but who knows.)

      I even at one point allowed a trusted server that I admined to use my DNS because the DNS that it was supposto use was being a bit flakey.

      So, I'm guessing here that they did scan him or he was a known "abuser" (And keep in mind they guy could be a saint for all I know, just saying what they might of thought.) and had it out to mess with him. I personally tried to stay far away from their support and or anything else that might draw attention to the fact that I was not just some clueless luser.

      --

      Really, I know what I'm doing...Ohhhh, look at the shiny buttons!
    17. Re:what about mistakes? by tabrisnet · · Score: 2, Insightful

      > Enough with this blocking of spam!

      The point of this action (and this article) is NOT the blocking of spam on the receiving side.

      This is an action, by an ISP, to prevent their networks (and their customer's computers) to be used as spambots/drones. This is a legitimate (if possibly "burn the village to save it") action.

      I'd even go so far as to say that it is quite likely that the use of their (Comcast's) networks for the sending of spam would be against the AUP/TOS. The only reason this is NOT dealt with by canceling service is b/c the customers are not doing it on purpose (As in, their computers were exploited by a trojan). Yet, such an action may very well be legitimate according to their contracts (tho obviously bad for their PR/CR image).

      Yes. blocking spam is kinda pointless, on the receiving side. even spamfiltering is pointless (in the long run). But, your suggestion of legislation is to address on the sending side. Which is what this is. Is this not the side we truly need to deal with?

    18. Re:what about mistakes? by iserlohn · · Score: 1

      If you are sending lots and lots of legitimate mail, you might want to take advantage of using your ISP's SMTP server anyways. You can set almost all MTAs to forward your mail to another MTA instead delivering them directly.

    19. Re:what about mistakes? by Anonymous Coward · · Score: 0

      90 Gig a month? That's a LOT of pr0n! ;-)

    20. Re:what about mistakes? by aldoman · · Score: 2, Interesting

      While that does suck, you must realize that NZ is very isolated in the world and links to Europe/USA where most data is stored is very expensive. But I'm confused why they give you 8mbit down. That would burn through your allowance it 10 minutes!

    21. Re:what about mistakes? by harlows_monkeys · · Score: 1
      And what if they make a mistake and block someone who just happens to send a lot of mail?

      That person switches to using Comcast's SMTP server until they can get the block removed? Or they tunnel their connection to their SMTP server over SSH so it's not seen by Comcast as using port 25?

      Most people using Comcast use Comcast's SMTP servers, so it is only a tiny fraction of their users that even have the potential to have legitimate mail affected.

    22. Re:what about mistakes? by MrLint · · Score: 1

      why exactly should you have to call. sending an abuse letter without telling you the terms up front sounds vaguely fraudulent.

    23. Re:what about mistakes? by Anonymous Coward · · Score: 0

      "They've been doing hit and miss blocking just because they can. It's really annoying. They blocked my workstation because I sent out 4 messages to AOL users in the same day."

      AOL is a successful business and they answer to the complaints of their clients and to the higher expenses due to spam.

      Losing few emails is a small price to pay to get less spam. Think of it as the option "accept email only from address book contacts".

      It is sad, but we need more people like AOL.

    24. Re:what about mistakes? by cheesy9999 · · Score: 1

      I wouldn't stand a chance...once I accidentally left BitTorrent running for the better half of a day and ended up transferring 40GB on my college network...

      --
      -tom
    25. Re:what about mistakes? by mcbridematt · · Score: 1

      Expensive?

      In Australia, sending traffic to the U.S is cheaper than sending traffic accross the road to Telstra, Optus, MCI or AAPT where you get billed per the MB since they refuse to peer with anyone else.

      Practically every leecher in Australia has an ISP who doesn't charge traffic to ISPs who peer in IX'es in the same state. (i.e PIPE Networks IX and WAIX)

      Just ask SprintLink.

    26. Re:what about mistakes? by drinkypoo · · Score: 1
      Comcast's AUP says that in their sole discretion you are a violator if you cause problems for other users, so I'm not sure if the AUP would stand up in court but I certainly am violating the AUP if I go over their limits, whether they tell me how much I can transfer or not. The "abuse" in question was just using too much transfer, not breaking a law or something, and the penalty was closing or capping my account, not reporting me to law enforcement.

      It is vaguely fraudulent, maybe not even vaguely, but it's nothing worth fighting, so I still pay my bill and they still give me cable and I don't go over 90GB/mo.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    27. Re:what about mistakes? by orangesquid · · Score: 1

      You think 1G is an ample cap, until you go to download the latest upgrade to Irix for the SGI box you have in your dorm (shhh, c'mon, this is _slashdot_), and it's a 1400meg file.

      Of course, there's always rate-limiting, or using a shell elsewhere to download the file and break it up into chunks.

      As for comcast blocking port 25, anyone know if this is all residential customers? If so, boy, I'm glad I just left them for speakeasy, because, damn, I like running my own mailserver.

      Also, is that port 25 incoming? That would do very little to stop spam... spammers just need port 25 outgoing, but, is it really fair to block outgoing ports like that? What if someone, just to be stealthy, runs sshd on some bizarre port, like 25? Or, to be more realistic, what if they start blocking other port ranges they deem unnecessary for normal users, and then you can't access a few of the websites that run on unusual ports, or can't connect to game servers, or connect to servers behind firewalls that have their ports tunnelled through? Also, is comcast blocking cheesecake?

      Just my 25,000 pesos.

      --
      --TheOrangeSquid Is it any wonder things seem so awry? We swim in a sea of confusion and don't have to think to survive
    28. Re:what about mistakes? by MrLint · · Score: 1

      Sole discretion? I dont think thats gonan cut it. As this AUP is in fact a contract, you cannot be expected to uphold clauses that dont exist except in the mind of the other party.

    29. Re:what about mistakes? by Troed · · Score: 2, Insightful

      ... and void the privacy you get when you know that your own mailserver and the receiving (known) mailserver are the only ones able to see the mail in clear text.

    30. Re:what about mistakes? by Phil+Karn · · Score: 1
      What about those who don't have the luxury of access to a server in a co-lo?

      And what if Comcast decides next that ordinary residential peons like you don't really need to use SSH, and unilaterally blocks port 22, even in the outbound direction? I mean, it's not like SSH is something Microsoft built into Windows XP, the only operating system in the universe that matters and people should be allowed to use. Unlike SSL, SSH isn't needed to buy stuff online from big companies, and we all know that's the only legitimate use of the Internet, right? Every other use of the net is potentially subversive, especially if it's encrypted, so what do you care if they block it?

      I hope you can see where this port-blocking crap is leading. It's a very dangerous slippery slope, and it must be stopped now. I have no problem with selective port blocks made after due process in response to direct end-user complaints, but "proactive" blocking will ultimately destroy the Internet architecture and its usefulness without really solving the problems it claims to solve.

    31. Re:what about mistakes? by Phil+Karn · · Score: 1
      What benefits are those?

      By your reasoning, I suppose that we should just shut down email entirely. This would be 100% effective in stopping all spam!

    32. Re:what about mistakes? by Phil+Karn · · Score: 1
      Why would I want to do that? The main reason people like me run our own mail servers is to avoid having to rely on our ISPs' perenially overloaded and unreliable mail servers. A secondary reason is to be able to monitor and manage our own delivery queues. And yet another reason is to take advantage of the STARTTLS command to transparently encrypt each SMTP transfer.

      Besides, direct end-to-end delivery is exactly how the Internet was designed to work. And no one has explained to me exactly how forcing everyone to relay their mail through their ISP's mail relay will somehow stop spam.

      I suppose it may slow it down simply because the ISP's mail relay will be a single point of failure, underpowered and overloaded, and this will throttle or drop a good fraction of all the outbound mail from that ISP, spam or not.

    33. Re:what about mistakes? by JWSmythe · · Score: 1


      At the time I had only one machine (Linux) and didn't bother to firewall it. This was back quite a while ago, before people were so agressively scanning the entire Internet for exploitable stuff. Later on, I built out a 486 from parts, and used that for my firewall. After that, they couldn't even ping me. :)

      They had started portscanning all the machines on their networks. If they had *ASKED* me to stop, that would have been one thing. My warning was the fact that I came home one day to find that I had no service.

      At the time, rather than wait for 5 to 10 seconds per resolution, it was easier for me to fire up named, and change resolve.conf to 127.0.0.1 . It worked really well, but broke some things. They only gave out the IP's for their SMTP and news servers to clients using their DNS servers, which didn't bother me a lot, I didn't use either one of those. They were pathetically slow too.

      RoadRunner in Tampa, Fla was funny. You could tell every time they changed network admins. The service would go to crap for a month, and then eventually come back to something resembling acceptable. I didn't know this til I was talking to one of the techs at Level3's colo in Tampa, who delt with them directly. He started telling me every time they changed admins. They had a fairly high turnover rate, at least back then.

      --
      Serious? Seriousness is well above my pay grade.
    34. Re:what about mistakes? by JWSmythe · · Score: 2, Insightful


      The management of it would be the same. AOL put a policy into place that is obnoxious, and expect people to jump through hoops to do perfectly legitimate things. Their solution is slow and backwards.

      If Comcast is responible about it, cool. I'd be happy to see more people taking his kind of aggressive stance, if they're responsible about it.

      After dealing with several different cablemodem companies, I'd be willing to bet it to get the access turned back on would take an hour on hold just to get a support person who's clueless to the issue and another week before it gets sent up to someone who knows what to do.

      --
      Serious? Seriousness is well above my pay grade.
    35. Re:what about mistakes? by JWSmythe · · Score: 1


      There are much better solutions.

      Hell, I protect my users from 99% of the incoming spam with free packages (MailScanner and SpamAssassin), and 100% of viruses (so far).. I'm one guy.. I have to think AOL has more than one admin running their mail servers.

      Sure, we aren't the scale of AOL. On high traffic days, we receive 100,000 pieces of email (including spam and viruses). My users never ask "Why don't I receive the mail I'm expecting?". Well, they do occasionally. They usually don't receive mail because of something else, like their network cable got unplugged. :)

      We still deliver the spam, with the subject modified so they can filter it automatically. The server quietly blocks "high score" messages. That was after a good period of testing.

      In my own box, I filter all the spam tagged messages off to a box marked "Spam". That lets me read through it, if I so choose. I never see it in my inbox, and I only keep it so I can make statistical data for my own box.

      --
      Serious? Seriousness is well above my pay grade.
    36. Re:what about mistakes? by whitis · · Score: 1

      Someone who sends a lot of mail can still do so, through the ISPs outgoing mail filters. They should be blocking all outbound SMTP except to the ISP outbound SMTP relays unless the user has specifically requested direct outbound SMTP (which should be free, easy to do online, and quick but you will be required to 1)read some stuff, 2) provide a justification (which will be accepted by default)). Doing half ass like this is just a ploy to cut down on tech support calls from people who didn't configure their email client. The relays can then monitor for evidence of spam/virus activity. Unfortunately, blocking these ports does deviate from the principles of TCP/IP but in the case of email there is a compelling public interest to make the default state be blocked. Blocking malicious traffic close to the source has significant societal benefits.

      Note that forcing email through your ISP actually helps you if someone files a false complaint against you. Because the ISP can calculate a hash on all messages you send and therefore distinguish forged abuse complaints from real ones.

      One thought as far as selectively blocking port 25, is that SPF could be used as a sanity check. If the IP address used (static ip) matches the SPF (sender policy framework) for the envelope from address, that is a good sign that the traffic should not be blocked. If you are sending a lot of email, you should have set up SPF anyway.

    37. Re:what about mistakes? by geminidomino · · Score: 1

      Compared to getting your mail bounced anyway, because a competently run mailserver denies mail from dynamic IP addresses anyway. Besides, ANY host/router/switch/gateway between your box and the receiving MX can read email in plaintext. SMTP is *NOT,* and never HAS been a secure protocol. If privacy is that imporant for your stupid little mailing list, use PGP and the ISPs MX.

    38. Re:what about mistakes? by geminidomino · · Score: 1

      Besides, direct end-to-end delivery is exactly how the Internet was designed to work. And no one has explained to me exactly how forcing everyone to relay their mail through their ISP's mail relay will somehow stop spam.

      A vast majority of spam, as well as worms and all sorts of other nastiness, are now sent through owned Winboxen (or occasionally, Linux/FreeBSD/etc... boxen). The internet was ORIGINALLY designed for end-to-end communication, but it was NOT designed for spam, Heavily graphical MMORPGs (FF XI, not multiplayer 'Roguealikes'), or wholesale filesharing either. It's technology evolves with time.

    39. Re:what about mistakes? by FireBook · · Score: 1

      8 gig a month??????? EEEK. makes me glad im in the uk where we don't actually have local dsl providers

      --
      My other OS is also FreeBSD
    40. Re:what about mistakes? by Phil+Karn · · Score: 1

      Okay, let's say the ISPs block outbound port 25. The spammers and virus authors will quickly adapt by routing their outbound traffic through the ISP's mail relay, and/or they will start trying port 587 in addition to port 25. (Port 587 is increasingly widely used for MUA->MTA SMTP traffic precisely to evade heavy-handed blocks on port 25, and many admins set it up to be functionally identical to port 25.)

      Before you claim that the ISPs' mail relays can magically block all outbound viruses and spam, presumably by some method other than simply dropping most of the mail presented to it because of the resulting extreme overload, consider that virus authors are already morphing their viruses and spam frequently enough to evade these filters; encrypted zip archives are just the beginning.

      So once again, how can this stop viruses and spam more effectively than receiver-side filtering? It can't. In fact, it makes things even worse because it deprives the remote targets of the ability to selectively blackhole the individual IP addresses of known spam sources. Since both spam and real mail all come from the same (or a small set) of IP addresses belonging to the ISP's mail relays, the targets are forced to either refuse all mail from that ISP, or accept it all and sort it out after receipt. Personally, I believe that spam and virus filtering can only be properly done by examining entire messages with something like a Bayesian filter, but I still wouldn't want to deny someone else the ability to blacklist the individual IP addresses of known major-league spammers.

      The basic problem with those who advocate draconian anti-spam measures like blanket port blocking for spammers and non-spammers alike is that they never seem to learn from history. They never seem to realize that any benefit will be temporary but the collateral damage is permanent. When the cycle repeats, things get even worse.

      It's a lot like the Bush Administration's approach to Iraq, now that I think about it.

    41. Re:what about mistakes? by gujo-odori · · Score: 1

      Another option, if you can afford it and it's available in your area (not you in particular, jrockway, but people in general who need speed and no cap) is to get Roadrunner Business class. I've had it for about a year, I pay $80 for 2 meg down, 512 kbps up, another 10 for a static IP, and no restrictions. I can do whatever I want, transfer whatever I want, with the usual caveat that it has to be legal (but I bet no one is watching, although I'm sure a person spamming would hear from them in short order).

      I've never had an outage, never experienced any speed fluctuation, it's been great. I can count on wire speed at any time of the day or night.

      The CPE is a Zyxel Prestige 944 router with a built-in four-port 10/100 switch. Of course, not trusting anything I don't control, I have a router of my own connected to the Zyxel, and that's the one that actually NATs my internal network.

      It's a nice setup, and if you have a question and need to talk to support, you get to talk to polite, courteous, and knowledgeable people.

      The only problem I've ever experienced was the first router they gave me died the day after it was installed (a Saturday, naturally), but they had someone out there with a new router Monday, and a week or two later I actually got a letter of apology from a vice-president who is the area manager around here. I practically fell off my chair at that!

      And no, I'm not a shill or an employee of Roadrunner Business Class :-) I am a really happy customer, though.

    42. Re:what about mistakes? by Troed · · Score: 1

      You really don't know much do you.

      I'm on DSL - with a static IP. Not in any blacklists.

      If I know who I'm mailing (I most oftenly do ..) I also know whether they run their own mailservers as well. I thus know whether I can trust the SMTP encryption itself or if I need to add another layer.

      Now go read a book, or something. Your advice stinks of ignorance.

    43. Re:what about mistakes? by drinkypoo · · Score: 1

      Barring some class action lawsuit in the future I'm not sure what anyone could do about it. I'd be happy to join one, though :)

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    44. Re:what about mistakes? by Professor+Bluebird · · Score: 1

      >And as for those spammers overseas in China... I haven't given that any thought, maybe a great wall of some sort?

      Well they do have the Great Firewall of China(TM), which if the Chinese government cared enough, could easily be configured to block spam. Such would certainly help their relations with the West.

    45. Re:what about mistakes? by NuclearDog · · Score: 0

      "Also, 3G a day is a lot of downloading. I'm going to conjecture that people who download that much are probably pirating something, so I can see why Comcast and their friends at the MPAA/RIAA/BSA would want them to cap bandwidth."

      I've sat and easily downloaded over 6GB a day for for or five days just in linux isos and other misc programs (none pirated). Although, I will condede that most people don't sit and download 6GB of linux isos in a day.

      I must also add, I host a website for a friend where he stores his gameplay videos, so factor in 5 or 10 200+ MB downloads a day, and you've got quite a large amount of bandwidth used completely legit.

      Luckily, my ISP is quite nice about it. As long as I am not going over 90GB a month on a regular basis, they will not cap my connection.

      I will concede that most people are not hosting their own websites on their broadband box, though.

      ND

      --
      This statement is forty-five characters long.
    46. Re:what about mistakes? by Anonymous Coward · · Score: 0

      nah, there are hundreds of legal, non-adult ways to download that much.

      as others have mentioned, legal file sharing, hosting servers, etc.

      Don't forget that more than one person could be using a connection. Just pick up a X-port router and hook it into your modem. A family of 4 with two teenage gamers can really download a lot. Then, factor in a mother doing some home-office work using the internet for file transfers, a dad downloading ripped re-runs of MASH, easily over 3Gb a day.

      I'm quite sure my family network has used more than 90Gb over our DSL, with my bro and I gaming and talking on voice servers, and myself downloading linux distros for testing, working on servers through ssh and sftp, and uploading videos I've made. even without my parents on the network (no, no MASH downloads here!)

    47. Re:what about mistakes? by geminidomino · · Score: 1

      Okay, let's say the ISPs block outbound port 25. The spammers and virus authors will quickly adapt by routing their outbound traffic through the ISP's mail relay, and/or they will start trying port 587 in addition to port 25. (Port 587 is increasingly widely used for MUA->MTA SMTP traffic precisely to evade heavy-handed blocks on port 25, and many admins set it up to be functionally identical to port 25.)

      That's a non-issue. It will just repeat the cycle. Comcast ignores abuse and doesn't block port 587. Admins blocklist Comcast to hell and back. Admin blocks port 587 on dynamic netblocks.

      It's a non-issue for me. All those dynamic blocks live in my /etc/mail/access with a nice "550 Use a real mailserver." Doesn't have to be their ISPs but it sure as hell won't be some idiot' cable modem.

    48. Re:what about mistakes? by geminidomino · · Score: 1

      You really don't know much do you.
      I know how to read, which seems to be more than one can say for you.

      I said: because a competently run mailserver denies mail from dynamic IP addresses anyway

      To which you responded: I'm on DSL - with a static IP. Not in any blacklists.

      Now, either you were replying to someone else and hit the wrong button, or you just don't know the difference between "static" and "dynamic" IPs, or you're just a functionally illiterate troll. Either way, you're not exactly one to be throwing stones about ignorance there, bunky.

    49. Re:what about mistakes? by Troed · · Score: 1

      You must be american.

      Your reply was to ME - you used the blocking of mail from dynamic IPs as a reason for why I shouldn't be able to send mail using SMTP (on port 25) from my own mailserver.

      Thus a reply explaining to you that not all home-run SMTP servers are on dynamic IPs was quite valid.

      I do hope someone is getting a good laugh out of all of this. My point stands - relaying mail from your own mailserver via the ISP mailservers is bad for your own security.

    50. Re:what about mistakes? by Anonymous Coward · · Score: 0

      I don't like the idea that your bandwidth provider should be able to restrict who you use as your email provider. Why in the hell would I want "myname@attbi.com" or "myname@tampabay.rr.com" or something equally as stupid? I should be able to use any email server/service I have a legal right to access that I want. Comcast limiting your email access to their server only is like the phone company restricting you to only calling businesses that they own or partner with.

    51. Re:what about mistakes? by Anonymous Coward · · Score: 0

      If you use a hub, these meters are usually innaccurate because they count bandwidth between local machines on your own home-network, too. Kind of scres up your math.

    52. Re:what about mistakes? by LittleLebowskiUrbanA · · Score: 1

      So what does being American have to do with it? Your prejudice against Americans is on the level of Neo-nazis hatred for Jews. Seriously, you hate Americans for the actions of their government. What's wrong with you?

    53. Re:what about mistakes? by Phil+Karn · · Score: 1
      Well, if you want to cut off your own inbound email and create problems for people that you might actually want to hear from, that's your personal choice. I won't object.

      What I do strenuously object to are ISPs who unilaterally make that choice for all their customers (or, in the case of an outbound port 25 block, for everyone else's customers) without giving the affected parties a choice in the matter. That is simply wrong.

      If an individual user wants his ISP to filter on his behalf, that's fine. As long as it only applies to that user, and he retains control.

      I also don't have a problem with blocking known spammers in response to recipient complaints, as long as there is due process, a chance to appeal, etc. That seems to be what Comcast is doing, but I fear it may change because this is just too rational and enlightened a policy for that outfit.

    54. Re:what about mistakes? by geminidomino · · Score: 1

      Yet again, I point out that I *SPECIFICALLY REFERENCED DYNAMIC IPS*. I did NOT say anything about "home-run" servers or Static IPs. I run my own mailserver on my static IP myself. I don't need YOU to point it out to me. And my point still stands as well: Using SMTP *AT ALL* without some sort of encryption is bad for your security. It's a cleartext protocol. Do you know what that means? If you don't,then please let me know what your domain is, because you're not qualified to run a mailserver to connect to mine.

    55. Re:what about mistakes? by Troed · · Score: 1

      You're even more of an idiot than I first thought :) Please go back and re-read the whole thread. You apparently think you've written things you haven't.

  3. E-mail Advertising? by Laivincolmo · · Score: 5, Funny

    I still don't understand how spam exists economically. I guess people are dumber than I thought:
    "Wow! I think I'll find out more about this Viiagraa! Thanks hf387hfjsd73@hotmail.com!"

    1. Re:E-mail Advertising? by vena · · Score: 4, Informative

      that's just it, economics. for a spammer to send out 1mil emails, the cost is trivial (for the spammer). if they get a response of just 1%, that's 10,000 customers, .1% gives 1,000 customers. that's not a bad haul for a fly-by-night pharmacy with likely very little overhead. they likely have no warehouse, no real store or property outside of the home of the person running it and postage is paid by the consumer.

    2. Re:E-mail Advertising? by NanoGator · · Score: 3, Insightful

      "I still don't understand how spam exists economically. I guess people are dumber than I thought:"

      Hehe.

      I know you're being funny here, but I think there is a general misconception that the people recieving spam actually have to buy stuff. The spammers are paid to get the messages out to x number of people. Their success is not dependent on the actual return rate on the advertising money. It will, however, affect reoccurring business.

      To put it another way, I doubt that lack of customers will make the spam go away. I mean, geez, there are still N-Gage commercials on TV.

      --
      "Derp de derp."
    3. Re:E-mail Advertising? by jrockway · · Score: 1

      I've always wondered where these people get the Viagra from. You can't just go buy it, right?

      --
      My other car is first.
    4. Re:E-mail Advertising? by Jugalator · · Score: 1
      I got this mail today:

      Dear Sir/Madam,
      We are pleased to inform you of the result of the Lottery Winners International programs held on the 11th June, 2004.
      Your e-mail address attached to ticket number 278511465896-6452 with serial number 3772-554 drew lucky numbers 7-14-17-23-31-44 which consequently won in the 1st category, you have therefore been approved for a lump sum pay out of US$ 1,000,000.00(One Million United States Dollars)

      CONGRATULATIONS!!!
      Due to mix up of some numbers and names, we ask that you keep your winning information confidential until your claims has been processed and your money Remitted to you. This is part of our security protocol to avoid double claiming and unwarranted abuse of this program by some participants.

      All participants were selected through a computer ballot system drawn from over 20,000 company and 30,000,000 individual email addresses and names from all over the world. This promotional program takes place every three year.
      This lottery was promoted and sponsored by eminent personalities like Mr. Bill Gates and the sultan of Brunei, we hope with part of your winning you will take part in our next three years USD50 million International Promotion lottery. To file for your claim, please contact our fiducially Agent:

      Dr. Desmond McPhillip
      TEL: +31-620-885-334.
      Email: CiscoNetWorld@Netscape.net


      Thank god my spam filter sorted it as spam, otherwise I might have applied!! I mean, the cooperation between Bill Gates and the sultan of Brunei sounded convincing!
      --
      Beware: In C++, your friends can see your privates!
    5. Re:E-mail Advertising? by Jeff+DeMaagd · · Score: 2, Interesting

      Basically some of the people probably do buy this stuff, they only need a miniscule number of customers to pay for this.

      That number of people is probably much less than 1% of the recipients, but they are probably people that don't want to discuss their inadequacies face to face with other people. It is also these people that won't report a fraud to the police because they are too embarased to say what they tried to buy and too embarased to say they've been swindled.

    6. Re:E-mail Advertising? by ArcadeNut · · Score: 2, Funny

      we ask that you keep your winning information confidential until your claims has been processed and your money Remitted to you.

      Looks like you just blew it! HAHA! Now the money is ALL MINE!

      Oh wait! Damn....

      --
      Visit the Arcade Restoration Workshop @ http://www.arcaderestoration.com
    7. Re:E-mail Advertising? by Anonymous Coward · · Score: 0

      Pick One:
      1. Imported from Mexico.
      2. It's actually repackaged asprin.
      3. You send them money, they laugh at you. No actuall product needed.

    8. Re:E-mail Advertising? by cdrudge · · Score: 1

      Technically no. Black markets, Mexico, India, etc all provide sources...if it's even really Viagra (or the chemical equivilent). For all you know, maybe they made a typo and they really meant Vigara, some new herbal suppliment for natual male enhancement.

    9. Re:E-mail Advertising? by baggins2002 · · Score: 1

      I was talking with a system admin who had gotten a bunch of replies on his server from spam. Not the original spam but the replies. The spam had the wrong return email address. He said he didn't know how many were sent out,but they did get quite a few serious replies. Something like one in ten appeared to be serious out of over 500.
      During a branch meeting which I attended there were about 50 attendees. Four of whom were complaining that they were getting spam and had actually replied negatively to some of it. One called the product company trying to get them to stop.
      I was stunned, all I could do was tell them to never reply, they argued, I said never. I couldn't believe how many of them would even reply for any reason. The most they accomplished was telling the spammers their email address was legitimate and that they read it.

    10. Re:E-mail Advertising? by ScrewMaster · · Score: 2, Funny

      I mean, geez, there are still N-Gage commercials on TV.

      You think that's bad, the Sci-Fi channel is now advertising "Enzyte - Natural Male Enhancement" tablets. So not only do I have to suffer through penis enlargement messages on my computer, but I have to see it during commercial breaks while watching my favorite Sliders episodes. Somebody should tell the (female) exec who runs that channel that penis enlargement pills don't work.

      --
      The higher the technology, the sharper that two-edged sword.
    11. Re:E-mail Advertising? by NanoGator · · Score: 1

      " Somebody should tell the (female) exec who runs that channel that penis enlargement pills don't work."

      Aye but she's looking at a check from that company with a lot of 0's on it.

      --
      "Derp de derp."
    12. Re:E-mail Advertising? by myov · · Score: 1

      The spammers are paid to get the messages out to x number of people. Their success is not dependent on the actual return rate on the advertising money.

      No kidding. I have received spams with forged headers, various tricks to get around filters, and after all that, absolutely no contact info (no email/web/phone/fax/etc). Why go through the effort?

      (I was just upset because I couldn't trace the mail)

      --
      I use Macs to up my productivity, so up yours Microsoft!
    13. Re:E-mail Advertising? by Anonymous Coward · · Score: 0

      I was actually shown some stats once. That particular spammer guaranteed 2% of those on the list would open the email with a client that loaded the images (which shows up on the web server stats). The crazy part is that they actually were missing that 2% (i.e. less than 1 in 50 emails sent were even opened, much less read, much less caused a purchase). Of course, their answer to that was to send out more emails to get to 2% of the original number bought.

      Actual purchases were below .001%. Thus, that 1 million emails might create *ten* orders. However, that actually is enough to cover the costs of sending the email. Presumably the numbers used to be better before the wave of junk mail boxes and blacklists.

      It's also worth noting that advertising returns are low in all media. 1% seems low, but is actually a good redemption rate with coupons delivered in the mail. Think about car ads. How many people actual buy each particular model advertised? How many times did they see the ad before buying?

    14. Re:E-mail Advertising? by truesaer · · Score: 1

      1% is a great return for legitimate direct mail through the US postal service...for SPAM, I would be shocked if even .1% is ever attained.

    15. Re:E-mail Advertising? by truesaer · · Score: 1
      On Law and Order the internet drug company just used shady doctors to write legit prescriptions. I'm guessing it goes like this:


      Please enter your shipping and billing details:
      (typical order form here)


      We can only provide viagra to people having trouble with their dick. Please fill out the following medical questionairre which will be carefully screened by our spiffy doctors:
      1) Are you having trouble with your dick? (yes/no)


      (submit button)

    16. Re:E-mail Advertising? by Grizzlysmit · · Score: 1
      I still don't understand how spam exists economically. I guess people are dumber than I thought: "Wow! I think I'll find out more about this Viiagraa! Thanks hf387hfjsd73@hotmail.com!"
      Cool you've solved it, we'll just push the IQ of everyone on the planet up by 50 points, and spammers will all go bankrupt, now how do we do that ... hmmm ... ummm :-P
      --
      in my life God comes first.... but Linux is pretty high after that :-D
      Francis Smit
    17. Re:E-mail Advertising? by geminidomino · · Score: 1

      Aye but she's looking at a check from that company with a lot of 0's on it.

      At least that company is PAYING for its advertisement, as opposed to spammers stealing it out of users' pockets.

    18. Re:E-mail Advertising? by NuclearDog · · Score: 0

      At least they know how to use a spelling and grammar checker, and don't have their caps lock on permenant on, unlike that nice Afghani widow that needs my help to get her dead husbands money out of the coutry.

      ND

      --
      This statement is forty-five characters long.
    19. Re:E-mail Advertising? by olman · · Score: 1

      Somebody should tell the (female) exec who runs that channel that penis enlargement pills don't work.

      Of course they do work! They generate healthy revenue for the snake-oil salesmen! Goes to the same pile as useless investment books and so forth.

  4. Seems reasonable, as long as... by Space+cowboy · · Score: 4, Informative

    ... there's a back-channel for people whose email is legitimately disproportionately high to have it reinstated. I'd be a mite annoyed (read: bloody furious) if I wasn't doing anything wrong, but my internet access was suddenly curtailed... I send email from home (though never in any quantity likely to raise suspicion) and I don't see why I should use NTL (whose news and mail servers are crap) over my linux gateway.

    What I find more chilling is the number of people in the article who are recommending general blocking of the smtp port. Just because it makes life easier for large corporations is no excuse for using a blunt instrument where an elegant solution could be found - in this case, I think the dynamic monitoring and blocking is far more preferable. If NTL decide to block port 25, I guess I'll just have to tunnel outgoing port-25 traffic over a different (say: 2525 :-) port to my co-lo machine and send from there...

    Aside: The phrase 'Microsoft is working with ....' always seems to send shivers down my spine these days because of the context I find it in. Sigh.

    Simon

    --
    Physicists get Hadrons!
    1. Re:Seems reasonable, as long as... by colonslashslash · · Score: 1
      I think this is a step in the right direction, but from my personal experience most spam I receive seems to come from hotmail / yahoo / other web based email providers.

      I have also had about fifteen 419's in the last month or so, which generally come from Spain, and a myriad of W32 mail worms, again, mostly coming from hotmail / yahoo accounts, so I am not sure how effective this will be in the grand scheme of things, seems like trying to derail a freight train by spitting at it to me.

      --
      She's built like a steak house, but she handles like a bistro....
    2. Re:Seems reasonable, as long as... by Trillan · · Score: 2, Informative

      The secondary SMTP port is 587.

    3. Re:Seems reasonable, as long as... by techno-vampire · · Score: 5, Interesting

      I used to work for an ISP. We blocked all outgoing Port 25 to keep our customers from relaying. We also blocked inbound at first, to keep out spammers. This ran into trouble quickly. Not only are there services that don't offer SMTP, there are some that insist you use an address at their domain on all outgoing. We had customers that either couldn't send at all, or not with our address because their broadband carrier wasn't accepting their messages. The way we fixed this, we put up an authenticating server. This way, if you ouldn't connect directly through us you still had one of our servers you could use. Worked just fine, and made a lot of people very happy. I doubt we had as many as 0.01% of our customers complain about this, mostly because they needed to send work mail from home and their company insisted that all mail with the company address went through their own servers.

      --
      Good, inexpensive web hosting
    4. Re:Seems reasonable, as long as... by sh0rtie · · Score: 1


      i use NTL and my own server to send/recieve email (i have a small mailing list and use IMDB's email interface plus having incoming disposable email addy's are great in stopping spam), and every so often they test my mail server and port scan for an open relay/sendmail exploits (looking at the logs) and every possible trick to try and get my server to authenticate and relay mail to them, of course iam locked down like a vicars ass so there is no problem (although aol and some domains reject and force me to use ntl's smtp)
      so far they have been great as an ISP for respecting responsible admins (they even have a dedicated linux newsgroup) so it would be bloody annoying (fsked off) if they locked it down as i dont have an NTL pop3 account or an external server to tunnel to

    5. Re:Seems reasonable, as long as... by Anonymous Coward · · Score: 1, Informative

      mostly because they needed to send work mail from home and their company insisted that all mail with the company address went through their own servers.

      That's what port 587 is for, the mail submission port. I haven't found an ISP that blocks outbound 587. Port 587 is for roaming users to authenticate to the email server, and then relay email.

      Since (normally) port 587 always requires authentication, no one blocks it.

    6. Re:Seems reasonable, as long as... by Tony+Hoyle · · Score: 2, Interesting

      My current ISP block all inbound port 25 to stop open relays. All it takes is an email and they'll unblock you, and put you on a list of servers that gets checked for open relays every couple of days (if you fail that check you have to have a damned good reason why they'll unblock you again).

      It works really well, and I've never heard any complaints about it. It's a lot easier for them than doing things like traffic monitoring etc. as well.

    7. Re:Seems reasonable, as long as... by Anonymous Coward · · Score: 0

      And how the hell WOULD you hear of any complaints about it, since the very people whose emails are being bounced can't communicate the issue?

      I had this problem with Roadrunner a year or so ago. More infuriating that not being able to communicate with your recipient, even more infuriating than getting a notice that your perfectly legitimate personal email message has been blocked as "spam", is that you couldn't contact RR to bitch about it, since even messages to postmaster were bounced.

      KeS

    8. Re:Seems reasonable, as long as... by mikeswi · · Score: 1

      My web host does this. Each one of his boxes accepts SMTP on ports 25 and 2525. About a month after he did this, his own home ISP started blocking 25.

    9. Re:Seems reasonable, as long as... by Grizzlysmit · · Score: 1
      What I find more chilling is the number of people in the article who are recommending general blocking of the smtp port. Just because it makes life easier for large corporations is no excuse for using a blunt instrument where an elegant solution could be found - in this case, I think the dynamic monitoring and blocking is far more preferable. If NTL decide to block port 25, I guess I'll just have to tunnel outgoing port-25 traffic over a different (say: 2525 :-) port to my co-lo machine and send from there...
      I agree totally with all your points but I feel the need to make one more, just because a person has port 25 open and is running there own mail server does not mean their running an open relay, that sleazy so called expert who implies that in the article needs some serious bitch slapping, the lying turd.
      --
      in my life God comes first.... but Linux is pretty high after that :-D
      Francis Smit
    10. Re:Seems reasonable, as long as... by geminidomino · · Score: 1

      but from my personal experience most spam I receive seems to come from hotmail / yahoo / other web based email providers. (Emphasis mine).

      You're looking at the "From:" lines. Don't. 99.9999999999999% of the time they are forged. Think about it logically. You cannot access Hotmail/Yahoo/etc SMTP servers to send mail OUT without using their web interface. So you would have to type EACH spam into that stupid web interface, then click "send." Forgetting for a moment that I think both of them throttle outgoing mail, to blast out 1M messages, you'd be sitting there for over a YEAR (assuming 30 sec/message). No, the ones that don't have their own mailservers use spamware that directly accesses MX records for the poor bastards receiving their crap. THAT'S why refusing mail from dynamic IPs is so common.

    11. Re:Seems reasonable, as long as... by geminidomino · · Score: 1

      just because a person has port 25 open and is running there own mail server

      Umm... When they agreed to an AUP that specifically says "Thou shalt not run servers", they really have no reason to bitch and moan. That's why I use the slower, more expensive Sprint DSL instead of Comcast. I can get a static IP and I'm allowed to run servers as long as I keep them clean of abuse.

    12. Re:Seems reasonable, as long as... by theCoder · · Score: 1

      Sorry, the Internet doesn't work like that. Every host is a peer; no host is inherently better than another. It may be more powerful, but they all (should) have the same "rights" for lack of a better word. They can all send and receive IP datagrams. If a peer sends another peer a specific IP packet, and the second peer responds, well, that's how the Internet works. Another basic design element of the Internet is that the middle is stupid. Routers route, they don't think about what they're routing. That is why the Internet works so well.

      The idiots who try to partition off the Internet into "servers" and "clients" or make the middle of the Internet smart (even if they think they're doing something good by blocking spammers) are trying to turn the Internet into TV. Fortunately, the freedom that the Internet provides cannot be easily taken away. People will work around the limitations, or a new Internet will be made. I just wish the idiots (including spammers) would stop making more work for the rest of us.

      --
      "Save the whales, feed the hungry, free the mallocs" -- author unknown
    13. Re:Seems reasonable, as long as... by geminidomino · · Score: 1

      Every host is a peer; no host is inherently better than another

      Err. No. What every host is is the private property of its owners. Anyone can reject any traffic from any other host that they please, as long as they own the server. The internet STOPPED being a "network of peers" when it became a consumer product. The people running 0wn3d winboxen are not my peers, and I see no reason why their computers should be treated as such by mine.

    14. Re:Seems reasonable, as long as... by theCoder · · Score: 1

      Anyone can reject any traffic from any other host that they please, as long as they own the server.

      True enough -- but your ISP shouldn't be deciding that for you. The edges of the Internet are smart and can make those decisions; the middle is stupid and can't.

      The people running the "0wn3d winboxen" are, unfortunately, all of our peers. We can try to ignore them, but those peers have the same "rights" on the Internet as any other host. Kind of like, no matter how stupid someone is, they still have the same rights as everyone else (in the U.S., at least). You may ignore what they're saying (or selling), but that doesn't mean that the government should step in and censor them.

      --
      "Save the whales, feed the hungry, free the mallocs" -- author unknown
  5. Fine by me by drinkypoo · · Score: 4, Interesting
    In fact it's A-Ok in my book if they block port 25 outgoing for all users. If you want to send mail to outside mailservers directly you are free to use a VPN connection or other types of tunnels.

    Now, if comcast would sell me a static IP address, I might care, but since they don't it's clearly not meant for servers. As long as I can come up with a way to get my mail out (presumably you could set up sendmail or another MTA to use smtp.comcast.net as a relay even though you need to authenticate to use it, but I've never looked into it) it doesn't seem like an issue to me.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    1. Re:Fine by me by bersl2 · · Score: 2, Informative

      Now, if comcast would sell me a static IP address, I might care, but since they don't it's clearly not meant for servers.

      Pssst: it's called "dynamic DNS."

    2. Re:Fine by me by drinkypoo · · Score: 1

      psst, I have a dynamic hostname, but that's not reliable enough to me. I know that a proper mta is supposed to resend later on a bounce and keep trying for a while, but they don't all do that.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    3. Re:Fine by me by deathazre · · Score: 1

      my school provides an email address for everyone. Suscom, which is the cable company there, blocks 25 entirely. Result: people can't send mail from their school address from home without using the webmail.

      --
      Karma: Negative (Mostly affected by dorm trolling)
    4. Re:Fine by me by vxvxvxvx · · Score: 1

      Comcast doesn't care what the from: is set to when you send mail through their smtp servers. If they did, I'd whine too.

      I'm not sure how comcast smtp servers work if you're not on their network, perhaps at an internet cafe or something. I should try it sometime.

    5. Re:Fine by me by Awptimus+Prime · · Score: 2, Insightful

      I'm not sure how comcast smtp servers work if you're not on their network, perhaps at an internet cafe or something. I should try it sometime.

      Why would you use their server from a cafe? You should use the cafe's ISP's smtp server.

      Every time this issue comes up, I just get depressed. People range from being upset about having to use the smtp server they agreed to use when they signed up for their account, they work fine, there is no reason a home user paying $39/mo should have the "right" to run smtp of their own, or be able to willy-nilly go connecting to other smtp servers on the net.

      Fact is, if every ISP did this, we'd see a huge reduction in spam. What is the cost of this? Just using the appropriate smtp server for your connection.

      Why (not the parent) must I see 300+ posts of griping? If you want to run an smtp server so bad, get a commercial class DSL account and pay for it. That, or just get a job as the mail admin for your local ISP.

    6. Re:Fine by me by vxvxvxvx · · Score: 1

      Because it requires changing the configuration of your mail client. Easier to set and forget, than to change the smtp when you go to other networks (such as work or an internet cafe.) To be honest, I imagine it probably works just fine off their networks, perhaps with pop authentication before hand? I agree with your complaint though, there's really no reason for people to run their own smtp server for sending email.

    7. Re:Fine by me by Anonymous Coward · · Score: 1, Insightful

      People range from being upset about having to use the smtp server they agreed to use when they signed up for their account

      Umm, you just above said you DIDN'T want them to use that server, you wanted them to use some internet cafe's ISP's server that they have no agreement with whatever.

      they work fine

      They *don't* work fine. Every third-party mail server, including my corporation's, had dropped, bounced, or otherwise broken perfectly legitimate personal communication from me. That's why I *started* running my own.

      or be able to willy-nilly go connecting to other smtp servers on the net

      Right. Heaven forbid people be permitted to do anything without appropriate supervision.

      Why (not the parent) must I see 300+ posts of griping? If you want to run an smtp server so bad, get a commercial class DSL account and pay for it.

      Poor baby. News flash: I HAVE a commercial class DSL account. I DO pay for it (for my hundred or so personal messages/month). It doesn't work now, sometimes, because OTHER ISPs are blocking INBOUND SMTP connections from "DSL ranges" of various providers.

      That's my particular ox. But there's no good reason why users on dynamic accounts should be blocked either, except that it makes life easier for mail admins.

      I love how Slashdot-ers get so enraged at any OTHER technology that infringes on people's freedoms in order to crudely address some problem. But when it's an IT issue - what the hell. BLOCK those ports!

      KeS

    8. Re:Fine by me by Telent · · Score: 2, Insightful
      Every time this issue comes up, I just get depressed. People range from being upset about having to use the smtp server they agreed to use when they signed up for their account, they work fine, there is no reason a home user paying $39/mo should have the "right" to run smtp of their own, or be able to willy-nilly go connecting to other smtp servers on the net.

      My God! How dare I "willy-nilly go connecting to other smtp servers on the internet"?

      I mean, wow! Why stop at SMTP? Let's take it one step farther! How dare people go willy-nilly connecting to other servers on the Internet?! It's disgusting! For the health of the Internet as a whole, people must stop this insane practice!

      What's that in the back? Hmmm? You mean the principle of the Internet is to be able to connect to other computers? But Awptimus Prime says that we shouldn't be able to go connecting willy-nilly to other systems!

      Please don't slip in the puddle of sarcasm.

      "[B]eing upset about having to use the smtp server [I] agreed to use when [I] signed up for [my] account"? I don't know about you, but I've read a lot of ISP contracts, and never has one said that I need to use my ISP's SMTP server. If it had, I would take my business elsewhere, or obey said restriction.

      "[T]hey work fine", you say? You call six-hour delays fine? You call randomly lost email fine? I don't know about you, but I use my email for more than getting advertisements for hot goatse. Clients contact me, friends talk to me, automated systems scream "Help!", and if I don't get those messages in a timely fashion, I'm fucked. Along with said servers. Oh, and some of us like to use personal domains, y'know? And have multiple accounts for sorting purposes and different usages; one for automated, one for clients, one for friends?

      You are of course entitled to your opinion, Awptimus Prime, just as I am mine. But personally? I am so glad that you aren't setting policy at my ISP or for the Internet, and if you ever start, I'll go elsewhere. Not that I think Speakeasy would ever listen to you as anything but a humor generator, but still, on principle.

    9. Re:Fine by me by Awptimus+Prime · · Score: 1

      Your pick-apart post did not make a lot of sense, but let me try to explain again:

      You should always use the smtp server of the network you are currently connected to. This is the point I was saying when I said that a user in a cafe should use the cafe's smtp server.

      The fact that you lose mail means you are probably sending binary attachments, and not just text. Fact is, it is rare to ever lose a small message, as they get priority over the larger messages. Personally, I've never sent a mail that was lost in the 12 years I have been online.

      I am irritated by the issue of whining about port 25 restrictions because I worked at an ISP for 7 years and customers would call in, clueless, screaming about wanting to run their own smtp, but not a single one gave a legit excuse for wanting to. I find it laughable that some dolt on a cable modem thinks he can do a better job at running a mail server than an ISP postmaster, who does it for his fucking job.

      Anyway, perhaps you should consider going with a better provider if you are having such trouble.

      There is also no "infringing on people's freedoms" in this matter. You forget that none of the Internet actually belongs to you. It belongs to the people who own the networks. You have no rights, you only have permission. What's next? You want the freedom to not pay your bill and still get online? How about demanding unlimited web storage? What? You still only want to spend $39/mo and get 3Mbit downstream? See how ludicrous it sounds when you add it all together?

      On a final note, I would suggest really thinking about the state of the industry before popping off more ignorant thoughts. I don't expect most folks to understand, it seems 90% of /. is college aged kids who have little grasp of the system. For that, I forgive most of these ramblings.

    10. Re:Fine by me by Anonymous Coward · · Score: 0

      Just block port 25 until someone asks for it to be openned up, fucking simple really. Nildram in the UK do it and it works

    11. Re:Fine by me by Awptimus+Prime · · Score: 2, Insightful

      You are of course entitled to your opinion, Awptimus Prime, just as I am mine. But personally? I am so glad that you aren't setting policy at my ISP or for the Internet, and if you ever start, I'll go elsewhere. Not that I think Speakeasy would ever listen to you as anything but a humor generator, but still, on principle.

      Funny you should mention this. I worked at Speakeasy for 2 years as an SA. The topic came up several times, it was not laughed at, but considered something that they will eventually be forced to do if ever targeted by spammers (or at least to the extent other ISPs have been hit). The only thing saving them is their comparatively small size compared to EarthLink, AOL, and Comcast, that is, for residential DSL service.

      Personally, if I were running a small ISP of my own, the default would be to deny the ability to do outbound tcp/25, then if a customer requested it, I would allow them to do so.

      You have to keep in mind I am thinking about the 4.3 million subscribers who will open some .exe from Outlook express and become an instant spam relay, as opposed to the ~150 people who would actually care to run their own.

      Mind you, I see you just complain about inadequate servers at the ISP. It's funny to see you tout Speakeasy as such a great ISP, but then say their mail servers have a 6 hour queue. Personally, I've never seen them get anywhere near that high, at least for messages under 3 megabytes. If their smtp is really that bad, then go ahead and generate some mail traffic and post message ids of the ones that take more than 30 minutes to deliver. I'll forward them to a cohort who still works there and get you an explanation.

      That is, if you aren't just another mindless troll. I assume you are because of the willy-nilly ports remark was just an over-the-top remark that blows everything well out of proportion here. Personally, I would like to see you suggest a solution to the spam problem today. Don't have one? Didn't think so. At least port blocking helps to an extent, and it keeps your ISP from getting on other ISP's mail-deny lists. If you think blocking port 25 is bad, imagine having a few million customers and then AOL and EarthLink start denying mail from your IP ranges. You'll have some serious PR issues and will be forced to change practices.

      Finally, I will state again that I have been online for 12 years. I have never had mail (to a non-freebie mailhost) get lost. I have seen delays up to 9 hours, but those are very rare. You also have to consider the mail queues at the destination, too. Just because a server is quick on one end, doesn't mean it's delivery will be any faster on the other.

    12. Re:Fine by me by Anonymous Coward · · Score: 0

      Comcast generates 800 million email messages/day, but only about 100 million of those are sent through Comcast's SMTP servers.

      I suppose they should ignore that, too?

    13. Re:Fine by me by Awptimus+Prime · · Score: 1

      Comcast Corp., the country's largest provider of high-speed Internet access, has begun blocking a channel frequently exploited by spammers to send out large volumes of e-mail, a move that many technologists say was long overdue and should be matched by other service providers.

      Just another note about you making my view sound as if it were a comedy routine.

      http://www.broadbandreports.com/shownews/38004
      another decent link.

      Don't be a flaming dolt. :)

    14. Re:Fine by me by Telent · · Score: 1
      Personally, if I were running a small ISP of my own, the default would be to deny the ability to do outbound tcp/25, then if a customer requested it, I would allow them to do so.

      Okay, that's very reasonable. So is what Comcast is doing, in fact. But you didn't originally say that. You said "use your ISP's relay No Matter What!" and I tried to explain the reasons that using one's ISP server No Matter What can be a problem.

      Just to reiterate: I have no problem with the view (using your numbers) "hey, okay, 4.3 million people don't need incoming SMTP, let's adopt a policy of "ask and ye shall receive"".

      Mind you, I see you just complain about inadequate servers at the ISP. It's funny to see you tout Speakeasy as such a great ISP, but then say their mail servers have a 6 hour queue.

      Actually, I've been very happy with Speakeasy's SMTP; I use it when I need to test something, and one of my consulting clients uses a business-class line and Speakeasy's outgoing mail server. They've never had a problem, and if they did, I would be on the phone to Speakeasy, saying "hey, guys, this is not normal, let's do something here, eh?"

      But, as I mentioned in an earlier post, when $TELCO was the only game in town for high-speed Internet... not so very long ago, I regularly had said delays and lost mail (and I'm glad that you've never had mail lost, but I have, and it sets my teeth on edge).

      That is, if you aren't just another mindless troll.

      Eh, only sometimes in Nethack.

      I assume you are because of the willy-nilly ports remark was just an over-the-top remark that blows everything well out of proportion here.

      Ever read this? You should.

      Personally, I would like to see you suggest a solution to the spam problem today. Don't have one? Didn't think so.

      Client-side filtering. Tracing the spammers and killing them with large sharp objects. And yes, blocking port 25 unless requested otherwise.

      But...

      There is a world of difference between "block port 25 unless requested otherwise", and "everyone should use their ISP's mail server". Something I read elsewhere in the discussion about an ISP's policy was quite insightful: they open upon request and add your mail server to a list of ones to be checked for open relays. If the check catches you, then you have to have a damned good reason for them to open it again.

      Once more to reiterate: I would have no problem with that, I have no problem with what Comcast is doing, and I have no issues with Speakeasy's SMTP service--and yet I still believe that people can have valid reasons for running their own mail server. Whatever the answer to spam is, it isn't to blindly state, "use your ISP's server no matter what", and that's what I was replying to in your original post.

    15. Re:Fine by me by WuphonsReach · · Score: 1


      Poor baby. News flash: I HAVE a commercial class DSL account. I DO pay for it (for my hundred or so personal messages/month). It doesn't work now, sometimes, because OTHER ISPs are blocking INBOUND SMTP connections from "DSL ranges" of various providers.

      That's my particular ox. But there's no good reason why users on dynamic accounts should be blocked either, except that it makes life easier for mail admins.


      I pay for a business class DSL as well, static IP and everything, and it's 4-6x more expensive then consumer DSL. Most server have that IP address blocked, because they think it's a dynamically assigned IP. So I feel your pain, and it occasionally annoys me. If I was really motivated, I'd go chase down the various block lists and get myself removed. (Instead, I pay a tiny bit of money to a 3rd party mail service, which reduces my work load.)

      The simple fact is that not filtering residential customers, who only pay $10-$30 per month for access, will drive an ISP out of business due to increased costs (and a rapidly eroding profit margin). That $20/mo is probably based on a cost model that assumes that less then $0.50/mo will need to be spent on support for that customer. Not to mention increased bandwidth due to worm/spam traffic and the loss of business when the ISP gets dropped from their peering arrangements like a rotten apple.

      Residential customers (99.9%) do not know how to secure their machines, and probably half of them don't give a darn until the machine no longer boots even if they do get infected. Worse, $0.50/mo of available support costs by the ISP will never pay for the hours that a tech would need to spend to walk an user through securing or cleaning up their machine.

      Think of it another way. Internet access is a service (not a right). Somewhat like taking a flight from point A to point B. People flying in coach class, who paid pennies for a ticket, don't get everything they want. OTOH, the first-class passengers, who paid more, get much better service. Which is why some folks learn to fly themselves, spending the cash and time needed in order to have the freedom to not be treated like cattle.

      Blocking ports is a combination of being a good net company and an economic decision so that the support costs don't eat them alive.

      --
      Wolde you bothe eate your cake, and have your cake?
  6. Why not work with the blacklists? by Anonymous Coward · · Score: 5, Insightful

    If they detect port 25 traffic over a certain threshold, do a quick dns blocklist check. If they're blacklisted, stop traffic on port 25 for that customer and contact them to let them know their machine may be infected.

    1. Re:Why not work with the blacklists? by bconway · · Score: 1

      Ummm, what blacklist are you referring to? All Comcast dynamic addresses are blacklisted in the MAPS DUL (theoretically, there's a few that aren't, as I just found out when moving from one area to another and having to start routing all my mail that was getting blocked by competent admins through Comcast's mail servers).

      --
      Interested in open source engine management for your Subaru?
    2. Re:Why not work with the blacklists? by Anonymous Coward · · Score: 0

      I was thinking something like sbl-xbl.spamhaus.org, which also uses data from cbl.abuseat.org and opm.blitzed.org among other places. I use it as a general purpose blacklist for mail/irc that doesn't just list people on dial-up/dsl/cable connections. It actually works fairly well.

    3. Re:Why not work with the blacklists? by AndroidCat · · Score: 1
      While checking blocklists is a good idea, it should only be used as a last resort. The proper thing to do is to catch problems before they go that far. Once they do, they'll also result in many private blocklistings which will never automatically age-off.

      I'm sure there are many admins who long ago tossed all of Comcast's IP blocks into block tables and (if they were nice) whitelisted the official mail servers.

      --
      One line blog. I hear that they're called Twitters now.
    4. Re:Why not work with the blacklists? by ender81b · · Score: 1

      5.7 million customers. DO you have any idea what a freaking nightmare that would be?

      I work at an isp with far less than that and we have to do 10-20 spam call's a week. Extrapolating the numbers they would have to do from 6,000-7,000 calls *a week* to get that stuff cleaned off. That's every week. You want to figure out that cost of doing that?

  7. Reverse That by Elecore · · Score: 5, Interesting

    I bet it would be a lot more effective to automatically open accounts with that port 25 blocked. If you want to use it, you give them a call and ask for it to be opened. I bet at least 95% of the spam being created is being created without the user knowing so closing port 25 won't affect them.

    1. Re:Reverse That by ttldkns · · Score: 1

      Give current port 25 users 2 or 3 weeks to apply before blocking it so you dont annoy them and your sorted, really.

      --
      How many computers are too many?
    2. Re:Reverse That by LostCluster · · Score: 2, Insightful

      But the Comcast execs would then realize that the unblocking process costs money in terms of staff time and phone expenses for the support call... and just axe that "feature".

    3. Re:Reverse That by gad_zuki! · · Score: 2, Insightful

      No way. How many people are using another SMTP other than comcasts? Half? 1/3rd? That would be tens (hundreds?) of thousands of support calls.

      This is the best move an ISP can make. As a rule they shouldnt block anything, but if a machine is suspected of being a spam shooter, they should step in and take care of it for the sake of their network and the internet community.

      Also, the second smartest move is to ask people if they ever bought anything from a spammer and if they say yes just punch them in the face. Now there's a deterrent we can all get behind!

    4. Re:Reverse That by Anonymous Coward · · Score: 0

      So very soon botnets are going to include code to negotiate with customer service. This will be good for AI development.

    5. Re:Reverse That by firewood · · Score: 2, Interesting
      But the Comcast execs would then realize that the unblocking process costs money in terms of staff time and phone expenses for the support call... and just axe that "feature".

      Or better yet, make them pay for the opening the port. Then it would be both a revenue generator and an indirect way of making heavy users of upload bandwidth pay for their share.

    6. Re:Reverse That by Anonymous Coward · · Score: 0

      Yes, this would be good, especially if enabling SMTP could be automated. Of course, the risk is generating too many tech support requests for legitimate users.

      I think a good way to do this would be sort of like the hotel or hotspot internet acess systems.. hijack the connection and give them the necessary information. So, when an SMTP request is made, it would hijack the TCP session, and return a useful error message saying "to enable SMTP, go to this URL" or something like that.

      Alternately, they could just use some threshhold for how many legitimate SMTP messages are allowed. I run a mail server on my DSL Linux box, and I send maybe 10 messages per day max. So, put the limit at 50 or 100, and lock out SMTP if it goes above that. My inbound traffic is quite a bit higher (in large part because of spam), but reasonable limits could be determined there too.

    7. Re:Reverse That by msobkow · · Score: 2, Interesting

      For the most part I'd agree, except that many large ISP's are notorious for making it virtually impossible to get a service back after they've blocked it.

      My ISP here has been pretty good about working with me on any technical issues that have come up, which has been rather refreshing compared to the useless "support" from Rogers or AT&T. There is a great deal to be said for smaller vendors who still understand service, even if it costs a bit more.

      --
      I do not fail; I succeed at finding out what does not work.
    8. Re:Reverse That by drinkypoo · · Score: 1
      Half to a third? Try less than one tenth of ten percent. The vast majority of comcast users are not geeks, they're just people who wanted faster internet access. You don't even need a NIC in your PC because they'll come install one for you as part of the installation process. Or, you can get comcast home networking, and use wifi, which you can reasonably do through USB if it's 802.11b, since 12Mbps > 11Mbps and USB is more likely to approach peak than WiFi.

      The days when only geeks had high speed internet connections are gone forever. They were great and they were fun but they're quite well and done. Hey, that rhymed...

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    9. Re:Reverse That by Anonymous Coward · · Score: 0

      Not everyone who runs a home server is a huge bandwidth user.

      You want me to pay more money to uncripple the internet so I can send 5 or 10 emails a day?

      Ridiculous.

    10. Re:Reverse That by thebes · · Score: 1, Insightful
      less than one tenth of ten percent.

      You mean one percent?

      since 12Mbps > 11Mbps

      Damn it! I've had it backwards all along!

    11. Re:Reverse That by drinkypoo · · Score: 1

      Er, no, I meant one tenth of one percent. It didn't quite come out that way, however.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  8. Thanks Comcast by Anonymous Coward · · Score: 3, Interesting

    I don't know about the rest of you here, but since I use them as an ISP and run my own mail server, (exim on debian woody, and yes it's secure) I'm very, very glad that Comcast isn't blocking 25 for everyone.

    Not only did they take effors to reduce spam, but for once, they actually listened to their own customers. Thanks Comcast.

    1. Re:Thanks Comcast by dema · · Score: 1

      I use TDS Meterocom in Wisconsin and out of the blue a few months ago they blocked port 25. I also run Debian+exim and I found it VERY easy to use Exim's "smarthost" features to use tds' mail servers. So if comcast ever did block you, exim will hopefully be able to help (:

    2. Re:Thanks Comcast by oneishy · · Score: 1

      Ditto that. Thanks for implementing a decent solution!

      I would also like to point out that my incoming spam (over the last week) has gone down significantly. MRTG graph here. This mail server is not using Comcast as an ISP, but I would still guess that their blocking mail abusers is a large part of the decrease in spam.

    3. Re:Thanks Comcast by SirGeek · · Score: 1

      BUT...

      Couldn't they just as easily notified their customers (in writing - in your bill ) and said that as of "July 1, 2004 12:00 AM, we will be blocking Port 25. If you have no idea what this means, you are fine.

      This would work I'd think, block all and unblock on request ( and then charge people operating servers on their public linw.

    4. Re:Thanks Comcast by nuintari · · Score: 1

      As an employee of an ISP, I can safely say that while you may be able to send outgoing mail from a comcast customer ip block, its not definately going to get to its end destination. The line:

      customers.comcast.com REJECT - excessive spam from comcast netblocks

      is very common in ISPs' sendmail configurations lately(and the other dns variations nessesary to blacklist comcast entirely). Most ISP's got sick of comcast long before they actually admitted their entire network is nothing more than a giant spammy dildo looking for its next asshole to fuck.

      If I had a point, it would be that running your own mail server can be cool, but your best off using a trusted smtp relay for outbound mail. Anything so your mail doesn't appear to come from spam city.... err 24.0.0.0/8

      --

      --Nuintari

      slashdot : where an opinion can be wrong.

  9. Well... by Anonymous Coward · · Score: 0

    At least they're aware some people run legit mail servers.

  10. All in the name of stopping spammers... by anakin357 · · Score: 5, Interesting

    Just put these dickhead spammers in jail for 5-10 years for causing so much disruption and cost to the world. I was reading a few days ago (and feel free to correct me/link to the URL) that spam causes ~$1,900 in lost productivity per employee, per year, in the US. THAT is absurd!

    On a side note, people with virus infected machines will now notice they can't send email to their external SMTP servers, and call Comcast, which they will reply that you have a mass mailing internet worm, and you've been spamming thousands of messages a day. Due to your incompetence, we have turned off your external access, forever.

    --
    http://www.fsckin.com/
    1. Re:All in the name of stopping spammers... by DAldredge · · Score: 2, Interesting

      Those $/Per Year numbers are made up. If you add up ALL of them the number comes out to be about 400,000 USD per worker per year.

      They just make up those numbers to sell a product and/or service.

    2. Re:All in the name of stopping spammers... by shadow255 · · Score: 2, Funny

      Just put these dickhead spammers in jail for 5-10 years for causing so much disruption and cost to the world.

      Sure. Just hand over the exact physical address where all these dickhead spammers are, along with admissable evidence of their illegal and disruptive activities, to the appropriate local authorities for arrest. While you're waiting for the warrants to issue you might consider finding ways to make bulk unsolicited emailing unprofitable. My guess is you'll have enough time to create and implement a solution before the bad guys are pulled off the streets ;-)

      --

      Logic is a wonderful thing but doesn't always beat actual thought. -Terry Pratchett

    3. Re:All in the name of stopping spammers... by JWSmythe · · Score: 1


      98% of all statistics are made up, inluding this one. :)

      For some reason, people like to see "hard" figures, even if someone did just yank it out of their ass.

      --
      Serious? Seriousness is well above my pay grade.
    4. Re:All in the name of stopping spammers... by Anonymous Coward · · Score: 0

      Just imagine how much /. costs :(

    5. Re:All in the name of stopping spammers... by JWSmythe · · Score: 4, Insightful
      Just put these dickhead spammers in jail for 5-10 years for causing so much disruption and cost to the world.


      You know that'll never happen.

      All things considered, spam isn't the only problem out there. The ratio of junk to legitimate mail is about the same in my postal mailbox. I may get one letter or bill in, and the rest is junk.. Why aren't people screaming "We need to make laws.." "they need to be in jail.." etc, etc.. That won't happen because the post office turns a profit on it.

      Most US bandwidth providers do a pretty decent job of trying to stop spam. Most have pretty strict standards, and will shut off a line for spam. I've been in on several of those actions, although not against me or my networks. It would be nice if all providers did that, but again, it probably won't happen. Many overseas companies make good money selling overpriced bandwidth to spammers. Think of it in business terms. If you're a [insert country here] provider, you can charge double or more for hosting and bandwidth to a spammer. You don't really have to answer to anyone but yourself, why not take the sale? Big spammers can use up some pretty substantial bandwidth, so it's worth it for them to sell to this customer. If I have the choice of barely paying my bills, or buying a new house and cars this year, I think the choice is obvious.

      One of the magic questions is, who do you go after? Just a couple days ago, a site hosted on a network belonging to a friend of mine was the "source" of spam. I know they didn't do it, it had absolutely no relationship to them or what they did. So I got on the machines, and found the source. They had a feedback program that was fairly well written, but someone exploited a bug in it, to send out to a few thousand people before I stopped it. Should they throw this perfectly legitimate businessman in jail because someone managed to exploit something. I had to look at it a few times to figure out how they exploited it, the script was fairly well written.

      Since plenty of the spam relates back to overseas sources, you'll never see them spending time in a US jail. Simply enough, you'd never see every government in the world agreeing on enforcement of any law, even an anti-spam law. In a lot of countries, it's rather difficult to even report the spam. What happens when you're trying to report it, and the support people don't speak English. And don't be so egotistical to say "they should all speak English", the universe or even the Internet doesn't revolve around America.

      --
      Serious? Seriousness is well above my pay grade.
    6. Re:All in the name of stopping spammers... by Anonymous Coward · · Score: 0

      That's easy to get. Just buy something and follow the money. It's pretty hard to hide and make a profit. Yes, I know, you'll just say, "Joe Job". I'm not scared. It's pretty easy for a good investigator to tell a Joe Job from a criminal.

    7. Re:All in the name of stopping spammers... by eeg3 · · Score: 1

      Put spammers in jail for 5-10 years? Wow. That's ridiculously excessive. Sure, you may not like spam, but it doesn't personally harm you.

      Five to 10 years in prison is what people whom commit manslaughter recieve. Although I don't particularly like spam, it's not equivalent to manslaughter. Moreover, it's not rocket science to run a spam filter.

    8. Re:All in the name of stopping spammers... by mp3LM · · Score: 1

      the universe or even the Internet doesn't revolve around America.

      Yes but the WWW does! ICANN.org

    9. Re:All in the name of stopping spammers... by The+Analog+Kid · · Score: 1

      Just put these dickhead spammers in jail for 5-10 years for causing so much disruption and cost to the world.

      Good you want them in jail, you can pay for them, but don't foot the bill on me. Jail is for dangerous criminals, that murder and rape people, all spammers need are heavy fines like perhaps 10 million USD when they get caught. Jails are overcrowed as is, I don't think adding spammers to them is helping the situation.

    10. Re:All in the name of stopping spammers... by gl4ss · · Score: 1

      with spam on certain addresses that happen to get mined on dozens of lists spammers use the problem is far worse than your real world mailbox could ever handle.

      yes it is not uncommon for some people to be getting 100+ spam mails per day.. imagine getting that as real letters - I'd bet you would notice and bitch.

      *Since plenty of the spam relates back to overseas sources, you'll never see them spending time in a US jail.* The mail that's aimed at people from usa originates from spammers who operate in usa most of the time, even if it is sent through china. they're not sending that mail just for the fun of it - they're in it for the money, it's easily traceable where the money goes when you buy something from a spam advertisement(it is quite easy to trace the people who benefit from the certain spam and are responsible ultimately for the spam being sent in the first place ).

      --
      world was created 5 seconds before this post as it is.
    11. Re:All in the name of stopping spammers... by anakin357 · · Score: 1

      Perhaps with all the property seized from said spammer, putting them in jail can pay for itself.

      Just an idea.

      --
      http://www.fsckin.com/
    12. Re:All in the name of stopping spammers... by Kphrak · · Score: 1

      Since plenty of the spam relates back to overseas sources, you'll never see them spending time in a US jail. Simply enough, you'd never see every government in the world agreeing on enforcement of any law, even an anti-spam law. In a lot of countries, it's rather difficult to even report the spam. What happens when you're trying to report it, and the support people don't speak English. And don't be so egotistical to say "they should all speak English", the universe or even the Internet doesn't revolve around America.

      As seen on a forum sig: "If it ain't English...it's gibberish." :)

      The real problem in that arena is not lack of English skills (most of the computer-literate world can speak at least pidgin English, even if their messages sound like quotes from Zero Wing), but lack of desire to block spam. There exists a hatred of spam in the US and most European countries, but in third-world countries, it's often only looked at as a business opportunity.

      That cultural difference is part of the problem...but foreign ISPs are just a drop in the bucket. The biggest source of spam is right here in America, in the form of computer users with too much broadband and no common sense. Hence Comcast's actions -- IMHO, a Good Thing judging from how much spam I get relayed through Comcast lusers.

      --

      There's no sig like this sig anywhere near this sig, so this must be the sig.
    13. Re:All in the name of stopping spammers... by TRACK-YOUR-POSITION · · Score: 1

      People in California have been given life sentences for shoplifting (Three strikes...). Even without insane laws, you can spend more than a decade in jail for theft if the theft is big enough--and we may be approaching the billions for a few spammers. Just because they manage to spread out their thievery over a huge number of people shouldn't mitigate their crimes any more than it should for a white collar criminal.

    14. Re:All in the name of stopping spammers... by FattMattP · · Score: 1
      Why aren't people screaming "We need to make laws.." "they need to be in jail.." etc, etc..
      Because most people don't get 500 items of junk snail mail per day, most of which might be sexualy explicit.
      --
      Prevent email address forgery. Publish SPF records for y
    15. Re:All in the name of stopping spammers... by zcat_NZ · · Score: 1

      Don't know about 'all' of theme, but the vast majority of spam comes from a relatively small list of documented, well-known 'hard-line spammers'.

      http://www.spamhaus.org/rokso/

      --
      455fe10422ca29c4933f95052b792ab2
    16. Re:All in the name of stopping spammers... by aldoman · · Score: 1

      You'll be suprised. 3 words: PayPal Debit Cards. They allow you to spend PayPal funds in real life stores. You can easily send it to a different address, goto the address, say the mailman sent it to the wrong place and pick it up. You have now broke the chain -- also this is just one tiny way I thought up right now. For the experienced scammer it will be far easier to do something like this and they will have many more options.

    17. Re:All in the name of stopping spammers... by eeg3 · · Score: 1

      Regarding the three strike policy, in my opinion, it is unbelievably ridiculous. It's easily cruel and unusual punishment. Not that much coming out of California isn't inane.

      Furthermore, I don't really consider spam equivalent to theft, unless the spamming is done through compromised systems. I just think the jailing of spammers is excessive. Appropriate fines would be more fitting, methinks.

    18. Re:All in the name of stopping spammers... by drinkypoo · · Score: 2, Insightful
      How about we give up on the "war on drugs", which will never bear any fruit beyond making drugs better cheaper smaller faster, and costs the american taxpayer billions of dollars every year (106,974 people have been incarcerated for drug offenses in the US so far this year) and use the empty space to store spammers?

      Maybe we could redirect some of that money to pensions and retraining for current poverty industry employees, and spend what's left (easily the majority) on the space program or education or something that will actually provide some benefit other than employing people in corrections.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    19. Re:All in the name of stopping spammers... by Anonymous Coward · · Score: 0

      It might be crule but it ain't unusual.

    20. Re:All in the name of stopping spammers... by Bob+Uhl · · Score: 2

      Jail's not good enough. We need to return to the Anglo-Saxon practise of outlawing. Outlawing refers to placing the criminal outside of the law: he is no longer protected thereby, and is at the mercy of anyone who should happen upon him. He can be robbed; he can be beaten; he can be killed--and none of those things are crimes, because he is outside the jurisdiction of the law. We need merely outlaw spammers, then publicise their names, addresses and visages--then let the psychos take care of the problem for us.

    21. Re:All in the name of stopping spammers... by mckyj57 · · Score: 1

      > All things considered, spam isn't the only problem out there. The ratio
      > of junk to legitimate mail is about the same in my postal mailbox. I
      > may get one letter or bill in, and the rest is junk.. Why aren't people
      > screaming "We need to make laws.." "they need to be in jail.." etc,
      > etc.. That won't happen because the post office turns a profit on it.

      You just don't get the point.

      Junk email is self-limiting because it actually costs money to send. In
      addition, it arrives once a day in a known place -- you don't get it 24x7
      masquerading as something else.

      I will admit the deceptive type pisses me off (DATED MATERIAL, OPEN
      IMMEDIATELY, CONFIDENTIAL etc.) but those tricks don't work when a bulk
      postage rate is on it. If it comes at less than $0.33 cents postage, I
      don't have to open it and I don't.

      Junk mail is a trivial annoyance compared to spam and telemarketing calls.
      It doesn't interrupt you while you are doing something else.

    22. Re:All in the name of stopping spammers... by Anonymous Coward · · Score: 0

      I got modded down for saying spammers shouldn't be sent to jail. Unbe-fucking-leivably.

    23. Re:All in the name of stopping spammers... by JWSmythe · · Score: 1

      Junk email is self-limiting because it actually costs money to send. In
      addition, it arrives once a day in a known place -- you don't get it 24x7
      masquerading as something else.


      So, check your Email once a day. :) Just kidding.

      Spam is self limiting for the same reason junk mail is. It costs money to have a server (or servers) and pay for bandwidth. Most of the spammers I've seen recently pay for colo space also. They're not hard to spot, Look through the cabinet doors (if they're plexi or wire mesh), and when you see a few dozen machines marked "mail", that's a clue.

      Spam is sent because it makes money. The solution to ending spam is for no one to buy from it. Spammers I've talked to tell me their sent to sales ratio. It's not good, but it's there. They know if they send xx,xxx messages, they'll get xxx sales. When the cost of sending spam exceeds the number of sales they get, then it will stop.

      The same is true for the 419 scams. If people didn't fall for them, then the 419 scammers wouldn't do them.

      I really enjoy working for a company that doesn't need to market in any way. Our biggest site survives due to word of mouth, which brings in over 1 million daily unique viewers. I've had offers from spamming companies to work for them, but refused them simply because I don't like the business.

      Don't look at the mail in your spam box as people intentionally trying to attack your server. Look at it as people marketing. They're trying to make a buck. Sure, their methods aren't good, but neither are the people who bulk mail burial plot advertisments to retirement communities. Anyone with an Email address *could* be a customer.

      I'm still enjoying seeing postal mail come in from the Scientologists, because I stopped to talk to them once (I wanted to play with their resistance meter toy).


      Junk mail is a trivial annoyance compared to spam and telemarketing calls.
      It doesn't interrupt you while you are doing something else.


      Oh, I could go on about telemarketers. Sometimes I'll get their calls on my cell, which is my "urgent" line. Anyone calling it gets priority over anything else, because I use it for work. If I get a 4am call, it means someone is having an urgent problem on the network somewhere, or someone died.

      I never changed my phone number when I moved, because lots of people have it, including our providers. If there's a serious issue, the bandwidth providers and/or the colo's will call me. Ok, it's rare, but they do.

      So with an East coast phone number, now being on the West coast, I occasionally get calls at 4am. No, I don't need aluminum siding, nor my septic tank cleaned, but thanks for offering at 4am. As soon as they start talking I usually say "It's 4am, I'm in California, this is a business line. Never call me again." Sometimes that actually works. :)

      I knew someone who worked in one of those boiler room operations. They sit there and get transfered calls by their wardialer. They have no real control over who they get. They come and go so fast that it rarely matters if they did exclude me from their list. Some other winner will start wardialing (???)???-????.

      I almost enjoy the ones telling me I should change my long distance service. Ummm, like, you called a cell phone with free long distance.
      --
      Serious? Seriousness is well above my pay grade.
  11. Now that the main irritation is over... by James+A.+S.+Joyce · · Score: 0, Troll

    ...how about they start block ports 1080 and 2280? I often see horrific trolls invading the IRC networks and channels we inhabit, triggering mass K-lines by inviting people to juped channels, flooding, mass-noticing and trying to piss people off in general. And everytime I check these trolls' hostmasks, oh! - it's Comcast.

    A lot of Comcast users seem to be running as SOCKS proxies for some reason. :-( Since SOCKS is also a generic relay protocol, it could be used for spamming too!

  12. Seems the right way to me... by nicolaiplum · · Score: 3, Insightful

    This seems like the right way to do it, as long as they've got a reasonable way for you to ask for it to be unblocked.
    Nice to see a large soulless corporation not just shaft its customers wholesale.

    --
    "For a successful technology, reality must take precedence over public relations, for Nature cannot be fooled"
    1. Re:Seems the right way to me... by NanoGator · · Score: 2, Insightful

      "Nice to see a large soulless corporation not just shaft its customers wholesale."

      This story is interesting timing for me. Today (as in like an hour ago) I had cable modem service from Comcast installed. "Large soul-less corporation" was the last thing on my mind. Not only were they pleasant on the phone when I called yesterday, but they also provided next day service *and* called when they got there so I could drive on over. (I'm staying at a friend's house until the stuff gets moved over.) Previously to this move, I've been a customer of theirs for... well I guess a year, I'm not sure when AT&T was purchased by them. I have YET to hear the phrase "it is our policy..." from them.

      So, yeah, I agree, they do seem to understand that making the customer happy is important. This is in stark contrast to Washington Mutual. I tried to open a checking account there, but since I was moving out of my 'permenant address' in two weeks, and I hadn't gotten my new apartment yet, they wouldn't give me an account. "Well it's not our policy to.." yeah yeah.

      I guess my point isn't really going anywhere. Your post just kind of reminded me that the phrase 'policy' has made me grit my teeth a number of times. I just hope this type of "we can be reasonable" service catches on with the bigger corps.

      --
      "Derp de derp."
  13. We'll see how effective this is by bigberk · · Score: 4, Insightful

    Sounds like a great plan to me! I don't like the idea of outright port blocking (customers are paying for IP access, right) but it's very easy to locate the suspicious hosts, which means that once the automated systems are in place they can easily add port restrictions.

    We can watch to see how effective this is by seeing how many of comcast's IPs show up in real time spam blocklists. Take CBL and WPBL for instance, two of my favourite lists...

    % grepcidr -c -e 68.80.0.0/13 1501

    % grepcidr -c -e 68.80.0.0/13 351

    Now we see if those numbers go down over time :) Easy.

    1. Re:We'll see how effective this is by bigberk · · Score: 3, Interesting

      Sorry, let me update those current number of comcast's IPs found in CBL and WPBL blocklists. There's a lot more than I thought. Comcast's netblocks are: 24.0.0.0/12, 67.160.0.0/12, 67.176.0.0/14, 67.180.0.0/15, 67.182.0.0/17, 67.182.128.0/18, 68.32.0.0/11, 68.80.0.0/13

      CBL: 19897 (2% of entire list)
      WPBL: 5199 (10% of entire list!)

      Wow, that does look like comcast is responsible for a ton of the world's spam!

  14. Getting close to the solution... by Caseylite · · Score: 4, Insightful

    I would have no problem with my ISP blocking port 25 unless I specifically request it to be open. And I would sleep much better at night knowing that my mother isn't unknowingly spamming me and my closest 25 million friends. The stipulation is that it not cost me extra to be able to use port 25. And that the ISP's support staff not be morons.

    1. Re:Getting close to the solution... by wrenhunt · · Score: 1

      > ISP's support staff not be morons.

      Isn't that an oxymoron?

      W.

  15. Largest in the nation? by azzy · · Score: 4, Funny

    I never knew Comcast was the largest ISP in the UK.

    Oh.. your nation.. not my nation?

    Sorry, I forgot there was no other part of the world.

    1. Re:Largest in the nation? by Anonymous Coward · · Score: 1, Funny

      Don't make us change the name of the language to American.

    2. Re:Largest in the nation? by Anonymous Coward · · Score: 0

      Sorry, I forgot there was no other part of the world.

      You know, this is an American site. What do you think they're going to mean? I don't go to slashdot.jp and bitch that they're not talking about the United States, or to a co.uk site and do the same.

      Now get your head out of your ass and pay attention to the story instead of making childish comments about nationality.

    3. Re:Largest in the nation? by Fishstick · · Score: 2, Insightful

      Well, when quoting a US publication...

      The Washington Post is reporting that Comcast, the nation's largest broadband ISP, has started blocking port 25 to reduce Spam. ... one might reasonably assume the nation they are talking about is the US. :-p

      --

      There is much cruelty in the universe, John.
      Yeah, we seem to have the tour map.

    4. Re:Largest in the nation? by azzy · · Score: 2, Insightful

      This is an international site on the internet. And as every other article seems to be pointing to a BBC News page it is certainly not dealing with US only articles/issues.

      Nor is it slashdot.us

      .com does not mean American

      I do not have an ass from which to take my head out of, I am sure that would be in breach of some law though, at least in the UK, perhaps it is common practice in the US - I can only hope not.

    5. Re:Largest in the nation? by Anonymous Coward · · Score: 0

      .com is primarily American. The internet started in the United States, and that's why it has use of .com, .net, .org, .gov., .mil, etc for the majority of its sites. The whole .us thing is an afterthought to make things appear "equivalent."

    6. Re:Largest in the nation? by Anonymous Coward · · Score: 0

      Yeah, because .org is exclusively american isn't it?

    7. Re:Largest in the nation? by Anonymous Coward · · Score: 0, Flamebait

      Just a small self esteem problem I take it. Don't worry, if you work really hard you may well be able to make it out of your third world status.

    8. Re:Largest in the nation? by azzy · · Score: 1

      Which is why all the big international companies now use com, next you'll be saying BT.com is American, or FT.com, etc etc..

    9. Re:Largest in the nation? by Anonymous Coward · · Score: 0

      I never said internation companies dont' use them, simply that they are primarily American. Slashdot being American is no big secret.

    10. Re:Largest in the nation? by NanoGator · · Score: 1

      "Largest in the nation? Oh.. your nation.. not my nation"

      Man I don't know whether to chuckle or be annoyed with that comment. Either you're making a rather funny parody of somebody trying to hard to make Americans appear self-centered, or you have a rather irrational complaint.

      Either way, it's an entertaining joke for both sides. Kudos. :)

      --
      "Derp de derp."
    11. Re:Largest in the nation? by Anonymous Coward · · Score: 0

      Here, you can borrow my ass.

      C'mon, laugh, you knew it was coming.

    12. Re:Largest in the nation? by jb.hl.com · · Score: 1

      Idiot.

      At least our head of state doesn't make it his mission to kick the shit out of foreign relations and the environment.

      Anyway, America really is likely to turn into a 3rd world country soon, as the US economy has been slowly deflating...see ya (or your job) in India :)

      --
      By summer it was all gone...now shesmovedon. --
    13. Re:Largest in the nation? by That's+Unpossible! · · Score: 2, Insightful

      Sorry, I forgot there was no other part of the world.

      No, you just forgot where Slashdot was located.

      If I'm reading a British website and they say "the nation," it doesn't take a rocket scientist to infer GB.

      --
      Ironically, the word ironically is often used incorrectly.
  16. Here is what I paste into spam complaints. by Serious+Simon · · Score: 4, Interesting
    I check out the Received: headers for the IP address that the spam is coming from, then use whois to find out who it belongs to. I then forward the spam, including full headers, and the following text:

    Hi, I received this spam from out of your network. I trust sending spam is in violation of your terms and conditions.
    Please take appropriate measures.
    I read recently that about 80% of spam is sent via hacked computers on broadband: http://www.sandvine.com/news/pr_detail.asp?ID=50
    You might consider closing port 25 per default and only open it for customers who explicitly want to run their own mail servers.

    Thanks,

    ...my name here...

    1. Re:Here is what I paste into spam complaints. by techno-vampire · · Score: 1
      I have a simpler fomat:

      The headers on this UCE show that it came from your service. Please deal with it:

      Followed by the complete message with all headers. Short, simple, polite and to the point.

      --
      Good, inexpensive web hosting
    2. Re:Here is what I paste into spam complaints. by Anonymous Coward · · Score: 0

      let's AC this one ...

      I am the netadmin for a 5000 user dialup ISP. I get about 300 spam abuse emails from people to my postmaster@isp.net address daily. Do you think I address each and every one of those? HA

      I delete that box about every 7 days cause that along with the bounces gets me up to 2 gigabytes and it starts crapping the machine out. Screw that. there's a ton of lame ass postmasters like me, but I cant do anything about it. it'd take 2 of me working full time to address them. some people feel like its their God given duty to report every spam, and those people should find something better to do. dont waste your time. people like me dont even see them.

      as horrible as that makes me, just think of the time you could be saving by realizing half of us dont even read the damned things. yes, we're lazy, horrible netadmins who should NOT have our jobs. maybe we're burned out. maybe we're idiots, or on power trips. DONT WASTE YOUR TIME. just report that crap to someone who cares, like spamcop. the only thing that makes me, a lazy postmaster, listen, is a blacklist threat. GO OVER ME TO THE PEOPLE WITH POWER.

    3. Re:Here is what I paste into spam complaints. by baylanger · · Score: 1

      If I forward you all the SPAM I receive (200 to ~350 peak per day) , would you be kind to forward them to the appropriate ISP? ;-)

  17. Bellsouth, on the other hand blocks all 25 by firewort · · Score: 4, Informative

    Bellsouth is now blocking all port 25 traffic, whether or not they sell the customer a static IP.

    I had a mail server running on static IP for over a year and they've just blocked it as of last night- Their third tier support claimed that it was because they were being threatened with being blocked by other ISPs.

    --

    1. Re:Bellsouth, on the other hand blocks all 25 by Chatmag · · Score: 1

      I'm on BellSouth at home, and had that problem sending email thru our domain. I set Exim to run a copy on Port 26, problem solved.

      --
      Pete Carr Owner Chatmag.com
    2. Re:Bellsouth, on the other hand blocks all 25 by Secrity · · Score: 2, Interesting

      Filtering port 25 on dynamic IPs is the Right Thing To Do, I think that filtering port 25 from static IPs is a bit too drastic.

    3. Re:Bellsouth, on the other hand blocks all 25 by Secrity · · Score: 1

      Moving your mail servers to port 26 is a good way to work around a filtered port 25 AND it will stop spam. The problem comes in when you need to send email to a mail server outside of your own network.

    4. Re:Bellsouth, on the other hand blocks all 25 by Chatmag · · Score: 1

      Its been set up like this for a few weeks, and no problem sending emails, they get to where they are supposed to go.

      --
      Pete Carr Owner Chatmag.com
    5. Re:Bellsouth, on the other hand blocks all 25 by Anonymous Coward · · Score: 0

      No no--port 26 is the email port used by all the mail servers in an alternate evil dimension where everyone has a beard. Get them to email photos to you, you'll see. (Check for photoshopping, they're evil remember?)

    6. Re:Bellsouth, on the other hand blocks all 25 by cybrchld · · Score: 1

      I have several customers running with Bellsouth DSL and static Ip's for their Email servers so far they're still up and running I don't think they are blocking business customers. maybe it's just home DSL accounts.

  18. Comcast is clueless by mrsam · · Score: 2, Interesting

    "By blocking port 25, they say they cut Spam by 20% last week."

    They're talking out of their asses. I have manually blacklisted their entire cablemodem space quite some time ago. Running a grep on the mail log files shows that this week I've already rejected approximately 20% more spam from Comcast than last week.

    And the week ain't over yet. The log files rotate on Sundays.

    I have concluded that Comcast is a lost cause. Damaged goods. The best thing to do is to blacklist their whole stinking sewer pit, and move on with your life.

    1. Re:Comcast is clueless by tricops · · Score: 1

      Well, no idea how effective they're being or not... but just to nit-pick, just because you received more spam doesn't mean the total hasn't dropped. Who knows, maybe someone took a dislike to you this week and signed you up a few places. :P

      --
      (\(\
      (^v^)
      (")")
      This is the cute vorpal bunny virus, copy to your sig or runaway, runaway in fear!
    2. Re:Comcast is clueless by crossconnects · · Score: 2, Interesting

      I use comcast as an ISP because it's the only way to get broadband around here. I use an external host provider and email service, so blocking port 25 indiscriminately would be a problem for me. I don't spam or even run a mailing list, so my outgoing traffic is minimal. I hope Comcast handles things the way the article says they do, and continues to do so. Other people complain about Comcast service but I have had very few problem, none critical, and always had good customer service, though I spend more with them on internet access than on cable tv service.

      --
      no big sig
    3. Re:Comcast is clueless by atarione · · Score: 0

      that's all fine and good, until 'valuable' customers wish to conduct actual business with you and are on comcast.. I imagine your comcast sux so I blacklisted you all plan will be a BIG hit with them?

      --
      actually I am happy to see you, however that is in fact a banana in my pocket.
    4. Re:Comcast is clueless by mdfst13 · · Score: 1

      "I use an external host provider and email service, so blocking port 25 indiscriminately would be a problem for me."

      It shouldn't be. That's what port 587 does (allows authenticated connections to external mail servers). 25 is for server to server connections. Client/server connections should be made across port 587 (and authenticated!) for sending.

  19. Just use SpamCop by Anonymous Coward · · Score: 5, Informative

    SpamCop will take care of figuring out the origin and reporting spam for you.

    1. Re:Just use SpamCop by Coneasfast · · Score: 1

      i tried spamcop, have a feeling it's not very effective. i continuously sent reports for the same spam emails that i received multiple times, it did not work. i continued receiving them and concluded that it was a waste of my time. i just use a junk filter now.

      --
      Marge, get me your address book, 4 beers, and my conversation hat.
  20. It's crap by maximilln · · Score: 1

    By blocking port 25, they say they cut Spam by 20% last week.
    And I say they're full of dog turds.

    Any spammer with half a clue will just move to a different port system. I bet the IT managers can work the numbers so that if one of the flatulates loudly they can reduce spam by 20%.

    --
    +++ATHZ 99:5:80
    1. Re:It's crap by shadow255 · · Score: 1

      Any spammer with half a clue will just move to a different port system.

      It's difficult to send to listening SMTP servers on ports they're not listening to. This is about preventing outbound connections to port 25 on servers foreign to Comcast's network.

      --

      Logic is a wonderful thing but doesn't always beat actual thought. -Terry Pratchett

    2. Re:It's crap by gad_zuki! · · Score: 2, Insightful

      They cant change if they are sending. If they are recieving they can do whatever they like.

      When sending to SMTP you only have 25, 587, and sometimes 2525. (and some others)

      So if I want to spam your company. I would have to connect to your company's smtp service. Most likely its running on port 25. Thus if 25 is filtered for me, I'm screwed.

      Mostly, everything but 25 requires authentication and even if this cuts a few percentage points of spam thats (in real life) millions of stopped spam.

      Fighting spam requires many fronts, I'm glad to see comcast join the fight. If they don't screw it up, that is.

    3. Re:It's crap by Richard_at_work · · Score: 1

      Unless they are blocking "outbound destination ports", then no matter what source port the spammers use, the traffic still gets filtered. Besides, outgoing smtp servers hardly ever send mail FROM port 25.

    4. Re:It's crap by maximilln · · Score: 1

      Dumbass. Spammers will send their spam to a relay on a zombie box or to an ISP in .ro, .pk, .cn, .uk, etc. Haven't you been reading stories lately?

      I'm glad to see Comcast joined the fight, too, but I really don't believe that this port 25 filtering is being done for the reasons they say it is.

      --
      +++ATHZ 99:5:80
    5. Re:It's crap by maximilln · · Score: 1

      Any spammer with the resources to make use of zombie boxes or international ISP relays will just bounce the mail out on port and use 25 someplace else. If a spammer were intelligent enough they'd hack together a script which would send the mail out in distributed form so as not to raise any threshold flags.

      The only real way to stop spam is to go after the companies which produce the products that they sell.

      --
      +++ATHZ 99:5:80
  21. Port 1080 by Tranzig · · Score: 1, Interesting

    Last year the company I'm working at experienced a massive DDoS attack mostly from Comcast hosts having open socks proxies. I think checking the customers for having such things could be effective also, not only against spam but hacking too. Having port 25 open does not mean that it's used for spam. Having a socks proxy world accessable, that's anything but acceptable IMO.

  22. I'm a comcast user.. by sinner0423 · · Score: 3, Interesting

    Before, I'd receive about a dozen spams a day, at least. I had started getting them right after i signed up for a PAYPAL account. In the past 2 days, i've received not one spam. Absolutely unreal.

    1. Re:I'm a comcast user.. by Anonymous Coward · · Score: 0

      I can't figure out how your comment relates to this story. Comcast is blocking outgoing spam, not incoming. Paypal? I've seen no sign they sell e-mail addresses.

    2. Re:I'm a comcast user.. by Anonymous Coward · · Score: 0
      Me too. I went on vacation for a week and had about 100 spam messages when I got back. It was getting to the point where I had at least 8-10 pieces of spam a day. (Granted this isn't a lot to some people, but I am careful about using that address.) This week, I maybe get 2-3 a day.


      I knew something was up. This is definitely a good idea.

  23. Why not pass through their mail servers? by LostCluster · · Score: 4, Interesting

    For those who do operate home mail servers, why can't such people just configure their outgoing SMTP server to pass all outgoing mail through the ISP's SMTP server to get around such blocks, and therefore have a more "trustwrothy" and less likely to be blocked IP address in the headers?

    1. Re:Why not pass through their mail servers? by bender647 · · Score: 1

      This is how I run the server on my LAN. It only forwards from clients on the LAN, and it relays all mail to Comcast's SMTP server.

    2. Re:Why not pass through their mail servers? by Telent · · Score: 5, Informative
      Um... because most of us who run "home" mail servers do it because our ISP's mail servers are slow, unreliable, and down half of the time? Because the rewriting rules often keep us from using our personal domains? Because if we wanted to use our ISP's mail servers, we wouldn't be running our own?

      Now, in my case, none of this applies, because I have a clueful ISP (Hi, Speakeasy!), but back in the Dark Ages of DSL through $TELCO, believe me, I had to. Or I didn't get mail. And believe me, I live for my mail.

    3. Re:Why not pass through their mail servers? by amigan940 · · Score: 2, Informative

      Many reasons. Firstly, my ISP's mailservers (Cox, who, by the way, already filters 25 both ways except to their servers) are slow as hell. Secondly, I like to be sure my mail doesn't go to more servers than intended.

      --
      dd if=/dev/zero of=`df / | awk '/^\/dev/ {print $1}' | sed 's/s[0-9][a-z]//'` count=1 bs=512 && shutdown -r now
    4. Re:Why not pass through their mail servers? by Anonymous Coward · · Score: 0

      If you worry about privacy, encrypt your mail. There's nothing else you can do. I could sit at work and read your mail with ethereal if there was a reason for me to do it. So can any sysadmin and gov't agent at your isp. If you care, encrypt, if you don't care enough, continue playing at security.

    5. Re:Why not pass through their mail servers? by drinkypoo · · Score: 1
      Even if the mailservers are slow as hell, this should not affect anyone who is not trying to use them for business purposes, for which you should have a business account in order to comply with the AUP. Most AUPs also prohibit running a mailing list on a home account, which pretty much rules out the other purpose of sending a lot of mail from home.

      I feel that avoiding your ISP's mailservers because you want to eliminate hops (why? does it matter?) is somewhat contrary, and unnecessarily so. Unless their server is holding mail for inordinately long periods of time, or dropping it, I don't see the issue...

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    6. Re:Why not pass through their mail servers? by Bishop · · Score: 2, Informative

      SMTP servers run by ISPs are not always reliable. My ISP had a bad habit of mysteriously holding mail in the queue for hours at a time. Some ISPs have odd restrictions such as a maximum number of recipients.

      I used to believe that restricting outgoing port 25 might limit the ammount of spam. Now I am not sure. I suspect that it is reasonably easy for spamware to find a user's SMTP server credentials and use the ISP's SMTP server. There is probably an easy to use API to send mail through Outlook (and the ISP's SMTP server) without the user knowing. Restricting outgoing port 25 does prevent access to open relays, but is that still a major source of spam?

      Users run their own SMTP servers as ISPs may be unreliable, or have odd restrictions. In the long run restricting outgoing port 25 probably won't limit spam sent from compromised computers as malware will use the ISP's SMTP server.

    7. Re:Why not pass through their mail servers? by Secrity · · Score: 1

      The current malware does not use the ISP's mail relays. If malware does start using ISPs' mail relays, the ISPs can easily throttle email and detect infected machines. Detecting and throttling spam is MUCH more difficult to do if port 25 is not filtered.

    8. Re:Why not pass through their mail servers? by amigan940 · · Score: 1

      Are you saying that if one does not gain profit, they do not deserve quality service? If so, I completely disagree....I am paying good money for said service, and I expect that to be returned in the form of quality service.

      --
      dd if=/dev/zero of=`df / | awk '/^\/dev/ {print $1}' | sed 's/s[0-9][a-z]//'` count=1 bs=512 && shutdown -r now
    9. Re:Why not pass through their mail servers? by Anonymous Coward · · Score: 0
      Comcast generates 800 million email messages/day, but only about 100 million of those are sent through Comcast's SMTP servers.

      If the load on Comcast's mail servers gets an increase of 700 million emails per day, it would (probably) cause a slowdown of mail delivery for all involved. In this case, it's in Comcast's best interest for those 700 million messages to be sent from their customer's mail servers. More powerfull servers for handling the increased load would cost money, and they don't want to spend money when they don't have to.
    10. Re:Why not pass through their mail servers? by NanoGator · · Score: 1

      "For those who do operate home mail servers, why can't such people just configure their outgoing SMTP server to pass all outgoing mail through the ISP's SMTP server to get around such blocks, and therefore have a more "trustwrothy" and less likely to be blocked IP address in the headers?"

      A.) It'd probably raise a red flag sooner. "Hey! This guy's mail account is passing hundreds of megs through!"

      B.) You'd lose your anonyminity (sp?). If I sent a complaint to Comcast, they'd know from your username who you are and would shut you down. I might even be able to file charges, though I admit I'm not sure what the laws are about that.

      --
      "Derp de derp."
    11. Re:Why not pass through their mail servers? by Anonymous Coward · · Score: 0

      That is misleading to the point of inaccuracy. There is at LEAST an order of magnitude cost/difficulty, probably two, between having to drink from the firehose in realtime, and being able to scan/log store-and-forward email messages.

      Encryption is one thing, real-time scanning is another, handing your ISP a copy of every email message is a third. Security isn't an all-or-nothing proposition.

      KeS

    12. Re:Why not pass through their mail servers? by SillyNickName4me · · Score: 1

      > Even if the mailservers are slow as hell, this should not affect anyone who is not trying to use them for business purposes, for which you should have a business account in order to comply with the AUP. Most AUPs also prohibit running a mailing list on a home account, which pretty much rules out the other purpose of sending a lot of mail from home.

      Why should quick delivery not matter to a home user? WHat kind of elitst arogance is that really?

      It has nothign to do with how much mail you send but with mail arriving within a reasonable time. I see no reason why I should have to wait 10 hours for a mail to get delivered because of the virus scanning of my ISP getting overloaded for example, and I don't see how you can argue that that should be acceptable either.

      Again, has nothing whatsoever to do with mailinglists. (besides the fact that the ISP I use allows me to run a private mailinglist, webserver, mailserver and such and gives a static ip)

      > I feel that avoiding your ISP's mailservers because you want to eliminate hops (why? does it matter?) is somewhat contrary, and unnecessarily so. Unless their server is holding mail for inordinately long periods of time, or dropping it, I don't see the issue...

      The problems people were mentioning were:

      Slow (as in, takes LOOOOOOOOONG to deliver mail)

      Unreliable, as in: doesn't deliver mail reliably, which kindof implies it drops it every now and then eh?

      So, those are the exact cases you mentioned I would say..

      I get the feeling you are not interested in the argument at all and just want to see control taken away from the end-user in the name of fighting spam.

    13. Re:Why not pass through their mail servers? by drinkypoo · · Score: 0, Redundant
      As I am the end user, I would prefer not to have control taken away. However, I don't see blocking mail coming directly from home users' systems as taking away control, your system is still your system, unless their email server is hosed, which it sounds like it is. You said it was slow, which is not very specific, which is the reason I qualified my statements in my previous comment to the point where your comment was unnecessary and this one is redundant.

      In the end, the ISP has control over every packet leaving your network anyway.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    14. Re:Why not pass through their mail servers? by adpowers · · Score: 1

      That is, unfortunately, what I have to do because otherwise none of my e-mail would get to AOL (AOL blocks dynamic IPs). Those fuckers.

    15. Re:Why not pass through their mail servers? by SillyNickName4me · · Score: 1

      > However, I don't see blocking mail coming directly from home users' systems as taking away control,

      I see it as taking away my control over how my mail gets delivered. Control over my own computer has nothing to do with it.

      > unless their email server is hosed, which it sounds like it is. You said it was slow, which is not very specific,

      I was not the original poster you replied to, I was just better at reading the parent post and can compare it to my own experiences and that of many other users of a whole variety of ISPs everywhere in the world. It is a relatively common complaint about smtp servers run by ISPs. Currently the smtp server of my ISP is doing quite well, but that hasn't always been the case.

      The 'pick another ISP' argument is not a good one here either, it only works if that option is actually available in your area.

      > In the end, the ISP has control over every packet leaving your network anyway.

      Yes, and I pay them to get a network connection. Within the terms of service, I have control over how I use that connection.

    16. Re:Why not pass through their mail servers? by Anonymous Coward · · Score: 0

      I have an ISP (located in California in a very hippy town) that decided it was against free speech to block any incoming email. It was frequently taking 24 to 48 hours for outgoing email to actually go out. They eventually got a clue, but are still always behind the curve for having sufficient hardware to meet the spam deluge.

      My own mail server has no such issues, and so I won't use theirs. I also have a static IP.

    17. Re:Why not pass through their mail servers? by Troed · · Score: 1

      You might want to read up on automatic SSL between capable SMTP-servers .. it's .. old news actually.

    18. Re:Why not pass through their mail servers? by Anonymous Coward · · Score: 0

      Some ISP's have restrictions on the kind of mail they process. Mexico's biggest ISP will not allow you to route any mail unless the return address is a prodigy.net.mx account. This effectively kills your posibilities of receiving mail on your own domain if your choose to use their servers.

    19. Re:Why not pass through their mail servers? by gr0nd · · Score: 1
      I do. As a reward for that behavior, comcast has decided to suspend my access (450 too many connects from (ip address), try again later). I've been blocked for 55 hours at this point. Support is worthless. Thay have no info on the error, can't tell me what limit I went over, can't explain why no warning was provided, and can't tell me when my outbound SMTP service will be restored.

      I decided to go the route of using their server because so many sites have blacklisted my netblock. I really can't send email any other way. I can still access a few servers directly (clients, mainly), so I can also tell that comcast isn't blocking port 25 access in the Philadelphia area.

      Comcast Sucks.

    20. Re:Why not pass through their mail servers? by Bloodshedder · · Score: 1

      Did you consider that probably 600 million of those messages are spam sent by zombified home users' machines or deliberate spammers? In this case, it's in Comcast's best interest for those messages to not be delivered at all.

    21. Re:Why not pass through their mail servers? by TiggsPanther · · Score: 1
      Even if the mailservers are slow as hell, this should not affect anyone who is not trying to use them for business purposes,

      Are you honestly trying to say that only business users are negatively affected by slow email service? Do you really believe that home users don't have legitimate reasons for wanting a message to get there ASAP?
      If I'm doing private (i.e. non-work) stuff at home on my own time (especially when on my own time) then I would take serious offense at having my mail held up for hours at a time.

      What if I'm trying to get some information to someone immediately? E-mail is still better than IM for many many uses - such as the ability to review information, reply, and comment inline.
      Luckily I have no time issues with using my ISP's own mailservers, but if I did I'd want to option to have an alternative. I don't have a lot of money, but if desperate to fix something I do have the time and resources to try and do things myself.

      Although I think that default-blocking of port 25 is a good thing, I do think it should always be possible to request (at little/no extra cost) the opening of the port. If your ISP's mailserver is too slow to trust, then I honestly think that it is a genuine reason for implementing a home mailserver if you have the knowhow.

      I feel that avoiding your ISP's mailservers because you want to eliminate hops (why? does it matter?) is somewhat contrary, and unnecessarily so.
      Unless their server is holding mail for inordinately long periods of time, or dropping it, I don't see the issue...

      Eliminating hops isn't a bad thing. There's nothing wrong with wanting to have as few potential points of failure as possible.
      And after reading several replies in these threads, the latter point (mail being held too long) is precisely why some people use their own servers rather than the ISP's ones.

      Tiggs
      --
      Tiggs
      "120 chars should be enough for everyone..."
  24. Well, what I'd like to know by Eric(b0mb)Dennis · · Score: 3, Interesting

    "So the company is monitoring traffic and picking out machines that look suspicious."

    Okay, isn't that what GMail is doing but to ADD a small advert, and everyone goes bonkers..

    Comcast does it to 'stop spam' and they're a hero...?

    --
    Excuse me, I don't mean to impose, but I am the ocean
    1. Re:Well, what I'd like to know by NanoGator · · Score: 1

      "Okay, isn't that what GMail is doing but to ADD a small advert, and everyone goes bonkers..

      Comcast does it to 'stop spam' and they're a hero...?"


      This doesn't make sense? Ads suck, they're intrusive, and it means Google is gathering personal data. Comcast is taking a step to make email more reliable in general, so they are a hero. I guess I just don't understand where you are seeing the wrong behaviour happening. I hope I'm not being dense, but can you please explain in a little more detail what the problem you see is? Please, don't forget, Comcast is giving them a chance to call and get re-activated if they are blocked.

      --
      "Derp de derp."
    2. Re:Well, what I'd like to know by Anonymous Coward · · Score: 1, Informative

      Google is gathering personal information? Yes, when you sign up.

      They cannot mine it from your email, because doing so implicates the Electronic Communications Privacy Act (18 USC 2701-11), and this also forbids them from disclosing anything about the contents of your email to the advertisers (e.g. they won't know why their ad was relevant to you; this is trivial because a simple redirection script will prevent them from knowing where you saw their ad).

      This is not the law passed by whoever it was in California, by the way, it's been in effect far longer than that.

      Anyhow, back to the original topic, it makes a hell of a lot of difference just how people are monitoring what. Especially when dealing with email, it is more reasonable to figure out exactly what they're doing and judge based on that.

      That's why I've spent plenty of time emailing Google (which, surprisingly, actually responds to queries to that privacy concerns email they put up) before deciding whether or not I'll join whenever they come out of beta (I will, they've answered all my concerns). And you had better believe that I would endeavor to do the same were I contemplating using Comcast's service.

      Having a bad ISP may not be obvious at first, but if you only find it out when you suddenly need their help with some service issue, it's far too late. Do some research, folks, it's what the Internet was originally intended for...

    3. Re:Well, what I'd like to know by z_gringo · · Score: 1

      They cannot mine it from your email, because doing so implicates the Electronic Communications Privacy Act (18 USC 2701-11)

      Implicates?? What?

      --
      -- -- Warning. Do not stare directly at the sun.
    4. Re:Well, what I'd like to know by mdfst13 · · Score: 1

      There is a big difference between monitoring *traffic* and monitoring content. It's much the same as the difference between a police officer pulling you over for speeding or searching your trunk. One is based on public behavior; the other is checking something that is private.

      I'm not one of those who complained about GMail though. As far as I am concerned, Google can offer whatever deal they would like. So long as they are up front and honest, I can then make an informed decision to accept or not.

    5. Re:Well, what I'd like to know by KitFox · · Score: 1

      Comcast is monitoring traffic.
      GMail is monitoring content.

      In real life terms, that is the difference between saying
      "Hey, you've sent out 5,000 envelopes at the post office this week. Is something going on?"
      and
      "Here's the mail in your mailbox. By the way, we opened it, scanned it with a computer, and found 'you should get a new house' in one of your letters, so we dropped a few advertisements for mortgage brokers and real estate agents in that letter."

      Disclaimer: I have nothing against GMail. They are doing computerized scanning for catch words and catch phrases to try to target their advertisements better so as to be able to make a profit off of advertising and thus be able to justify doing a service like this. Last time I checked, they aren't doing more than that, and nothing that would really invade your privacy, because the data doesn't get used for anything except the targeted marketing system.

      If you're worried about other privacy concerns, then worry more about Carnivore and such things.

      From a privacy standpoint, I honestly don't think that "gathering" or "having" information is as much a deal as "how you use it". Consider that all the information that is not point to point encrypted can easily be read by any transit system and be processed in any way.

      I don't mind them showing me an advertisement for Online Photo Printing if my mother sends me an email about how wonderful this picture she took was. I -DO- mind if they then proceed to start sending my mother advertisements for online photo printing, or decide to grab the photo my mother sent me, sign me up for a free trial with an online photo printing place, and send me the printed photo by post to show me how great their service is.

      The vast majority of users (Those who are not misbehaving somehow) shouldn't need to worry about what information as much as how it is used. The rest who are misbehaving have more to worry about than GMail.

      --

      @Whee

  25. As a Comcast User... by rbabb · · Score: 5, Insightful

    ... This is starting to worry me a little. I have been happily running my own mail server for over a year now. The reason being is that I want the ability to host all my own solutions and at the same time use the bandwidth i'm already paying for.

    With wonderful dynamic DNS services like no-ip.org I am able to do this on any dynamic IP and I have no reason to worry about needing one of those pesky static IP addresses.

    Hopefully if something were to happen where I'd start getting blocked I could just use my connections at work and contact their e-mail admins directly to resolve the issue. However this slash and burn tactic is just the wrong way to go about fighting spam. Hence one of the reasons I left Earthlink/Mindspring, who block e-mail from ALL Dynamic IP addresses and also block outbound port 25 on their networks.

    1. Re:As a Comcast User... by Anonymous Coward · · Score: 0

      Running servers violates your user agreement with Comcast anyways, so what difference does it make to them if you can't run your mail server on your cablemodem? If you want to run a server, pay for the *right* service. Don't just try to be a cheap bastard.

    2. Re:As a Comcast User... by Anonymous Coward · · Score: 0

      Yeah, that's brilliant. In fact, why don't they block all ports? That'll fix the spam problem for sure!

    3. Re:As a Comcast User... by rbabb · · Score: 1

      Those TOS documents are written by people who are notoriously uninformed about how the technology is supposed to be used. Access to the Internet is supposed to be unrestricted and unfiltered. Also another major concept is that it's supposed to be a community in which all parties are equally capable of contributing.

      Perhaps those concepts are too difficult for an AC, and perhaps you're willing to live in a world where the only way to serve content to others is via someone else's service, but for me I want the Internet the way it was originally designed and not the way some corporation(s) think it should be presented.

    4. Re:As a Comcast User... by Blakey+Rat · · Score: 0, Troll

      God. Then freakin' prioritize.

      Do you prefer having your own email server?

      Or do you prefer having twice as much spam?

      Seriously, shut up. The .001% of broadband subscribers who run their own mail servers seem to think that blocking port 25 is the same as armageddon. If port 25 causes you so much damn trouble, then switch ISPs when it gets blocked. Just let me and the other average users out there reduce our spam without you having a hissy about it.

    5. Re:As a Comcast User... by Anonymous Coward · · Score: 0

      Let's block *your* port 25. You might be a spammer.

      There might be a bug in your mail server that will allow current or future spammesr to relay through you.

      Or you might just be a selfish mean little snot who doesn't deserve to be on the same net with the rest of us.

      Comcast is doing exactly the right thign. You are trying to create a false dychotomy between spam and quality service. Both are possible.

      I applaud Comcast's effort to be a good net citizen while at the same time serving their customers well.

      You, sir, are an idiot.

      --Happy Comcast Customer running own mail server for years and *not* an open relay or virus'd spambot host.

    6. Re:As a Comcast User... by SillyNickName4me · · Score: 1

      > Running servers violates your user agreement with Comcast anyways, so what difference does it make to them if you can't run your mail server on your cablemodem? If you want to run a server, pay for the *right* service. Don't just try to be a cheap bastard.

      It seems that Comcast cares enough to not just close off port 25 alltogether. In their own words, they are aware of people running legitimate mail servers on such accounts. So.. what is your point exactly when Comcast itself seems to disagree with you in word and behavior?

    7. Re:As a Comcast User... by kiolbasa · · Score: 2, Insightful

      In the long run, Comcast's move could be better for you than you realise. Providing that Comcast is able to block the outbound spam only, and work with their customers who are responsible, then email admins may not be so quick to drop Comcast's entire dynamic IP range in their blocklists.

      --

      Beer wants to be free
    8. Re:As a Comcast User... by Anonymous Coward · · Score: 0

      Those TOS documents are written by people who are notoriously uninformed about how the technology is supposed to be used.

      Too friggin' bad--don't like the rules? Encourage them to change! Spend the money on a provider that will let you host servers! If you can't find one, start one. Don't expect people to bend their rules just for all-important you.

      Also another major concept is that it's supposed to be a community in which all parties are equally capable of contributing.

      By whose rules? Comcast's rules seem to state differently--ahh, but I forgot, you freeloading "free-speech-w4r3z" commies ignore rules when they're inconvenient, because "information wants to be free!" Too bad equipment and employees cost money in the real world, hippy.

      but for me I want the Internet the way it was originally designed and not the way some corporation(s) think it should be presented.

      Then don't use Comcast. Who put a gun to your head and made you choose an ISP with such restrictions?

      I didn't think so.

    9. Re:As a Comcast User... by mungtor · · Score: 1

      Those TOS documents are written by people who are notoriously uninformed about how the technology is supposed to be used. Access to the Internet is supposed to be unrestricted and unfiltered. Also another major concept is that it's supposed to be a community in which all parties are equally capable of contributing.

      In this case, the TOS can allow Comcast and others to force spammers off their networks for running "servers". This is a good thing.

      Second, your ideals that the internet should be unrestricted and unfiltered are directly conflicted since not all parties are capable of contributing. There are obviously tens of thousands of people out there (let's call them "spammers" for lack of a better term) who are not contributing. Don't you believe that these "spammers" should have the same unfiltered and unrestricted rights that you do? Or are you willing to set yourself up as arbiter of what makes a valid contribution?

    10. Re:As a Comcast User... by krray · · Score: 1

      Ah, to mod or to post. Too late. BLOCKED. ...and Comcast had the nerve to come knocking on my door, with the "No Soliciting" sign no less ... trying to sell me digital cable, internet services, etc.

      I laughed and closed the door.

    11. Re:As a Comcast User... by Blakey+Rat · · Score: 1

      Joke's on you! I use my ISP's mail relay! Like most NORMAL people do.

      Like I said, there's only like .001% who gives a crap about creating their own mail servers, and those people are all capable of adapting to a closed port 25, so I don't see why they're all whining about this.

  26. Lets see... by circusnews · · Score: 2, Interesting

    I send out on average about 15 emails/day. None of my email traffic goes through comcast's SMTP servers.

    Assuming that this is about average, it would only take 46666.67 customers using non-comcast servers to reach this number.

    The following is only antidotal, but...

    I have set up the cable modems of at least 18 friends and family members. In general I have found that parents tend to use work email addresses most, AOL accouts second most, Hotmail/other free providers, and comcast addresses least. Kids tend to use either AOL or a free email provider more often than using a comcast address.

    Thats comes to about 8 comcast addresses that are actualy used out of the 50 or so email accounts used by these friends and family.

    I am suprised the number is not much higher.

    1. Re:Lets see... by Anonymous Coward · · Score: 0

      antidotal

      Just for the record, you mean anecdotal.

      Just in case you care. If not, whatever, pretend you didn't read this.

    2. Re:Lets see... by ColaMan · · Score: 3, Funny


      The following is only antidotal, but...


      (cough) that's Anectdotal.

      Unless you think your following statement is countering some effect of a poison... wait, maybe it is. Er, carry on :-)

      --

      You are in a twisty maze of processor lines, all alike.
      There is a lot of hype here.
    3. Re:Lets see... by KnightStalker · · Score: 1

      Actually, it's "anecdotal". One good spelling flame deserves another... :-)

      --
      * And remember, it's spelled N-e-t-s-c-a-p-e, but it's pronounced "Mozilla."
    4. Re:Lets see... by ColaMan · · Score: 1

      I bow to your 'leet spelling skills and I am suitably humbled :-)
      But, anyway, I was going for the correct word usage there, not spelling. Though I have no idea how that "t" got in there, really! I'll blame my $5 keyboard and leave it at that.....

      --

      You are in a twisty maze of processor lines, all alike.
      There is a lot of hype here.
  27. Bellsouth Block by bljohnson0 · · Score: 2, Informative

    I have Bellsouth DSL and they're blocking port 25 incoming and outgoing for their DSL subscribers. I had a lengthy discussion with tech support about it and they said "thats just how it is". If you have Bellsouth DSL and you can still use port 25 - enjoy it now. The block is coming.

    1. Re:Bellsouth Block by Secrity · · Score: 1

      And I thought that I was a hard ass mail admin. BellSouth seems to be going WAY overboard. Filtering port 25 outgoing on dynamic IPs and blocking mail from dynamic IPs are Good Things. Blocking incoming port 25 seems to be going a bit far.

  28. Uh, SMTP is on port 25 by Anonymous Coward · · Score: 0

    They can't just change the port system. Yes, there are some extra mail ports (465, 587, etc), but those ports require authentication most of the time (if they're even set up). Spammers want to get the most people possible, and that means port 25 99% of the time.

    1. Re:Uh, SMTP is on port 25 by maximilln · · Score: 1

      It wouldn't be hard to write a script to have everything forwarded off through a web-mail account.

      Why are you people so addicted to port 25 as if it's cast in iron? Relays can be set up anywhere around the world. Have you been reading the news lately?

      --
      +++ATHZ 99:5:80
    2. Re:Uh, SMTP is on port 25 by Anonymous Coward · · Score: 0

      Port 25 is cast in iron. If they had relays elsewhere, spammers would use them already. They don't need machines to make spam or bake cookies or break encryption, they need machines to send spam. If they can't send spam, the machines become basically worthless.

    3. Re:Uh, SMTP is on port 25 by maximilln · · Score: 1

      f they had relays elsewhere, spammers would use them already
      You don't pay attention to your spam, do you?

      Spammers already use open relays. It's how they confound attempts to track down ISP is actually serving the spammer. The latest round of spam that has ended up in my inbox was sent through web-mail portals which don't keep track of the X-originating-IP.

      Here's a clue. For free. Blocking port 25 is not going to stop the real spammers. It may stop the wannabes who get sucked in by "Make money from home!" schemes but it's not going to stop spam.

      --
      +++ATHZ 99:5:80
  29. Won't the spammers simply change ports? by Anonymous Coward · · Score: 0

    I've never understood why bocking a port would work. Aren't there thousands of ports? And if one gets blocked, is it simply a matter of just switching to another port? Someone please explain this in "Ports for Dummies" terms.

  30. education is the solution by Anonymous Coward · · Score: 4, Funny

    penis enlargement is dangerous and ineffective.

    tell your small dicked friends!

    1. Re:education is the solution by Anonymous Coward · · Score: 0
      penis enlargement is dangerous and ineffective.
      tell your small dicked friends!

      Really? OK, then. Thanks for the heads up.


      Your pal,

      Microscopus Dickus

  31. I havent had a single spam in 6 years... by Anonymous Coward · · Score: 0

    All because I dont use Email....its hideous and such an "old" technology. What with IRC or IM why would someone need email? Maybe its cause I have no friends and no one would ever email me?

    1. Re:I havent had a single spam in 6 years... by Anonymous Coward · · Score: 0

      They have spam on IRC and IM these days. Actually, they've had it for quite a while.

  32. Traffic != Content by Anonymous Coward · · Score: 0

    People are upset that Google is "looking" at their email to find appropriate ads. Comcast is just monitoring traffic, not the actual content being transferred. It's the difference between seeing cars on the road, and identifying people in them. (Personally, I think people that don't want GMail to do ads based on their email shouldn't use GMail.)

  33. Doesn't work that way by Anonymous Coward · · Score: 1, Informative

    When a server is receiving traffic for SMTP (or HTTP or many other things), it listens on one standard port. For SMTP, the port is 25. The sender can pick any port to send FROM, but they can only send TO 25. If Comcast blocks outgoing connections to port 25, they stop anyone using a mail server from sending to almost all other mail servers.

    1. Re:Doesn't work that way by Anonymous Coward · · Score: 0

      Most customers of ISP's are already blocked from doing the kind of connection you were talking about, because of the older Open Relay problems. As a result most mail servers that you can/must contact are already within your ISP's netblock.

      Incoming port 25 traffic only can go to valid servers, so blocking that IMHO is a waste of time, but blocking OUTgoing SMTP traffic would greatly reduce the ammount of robots sitting there spamming all of us.

      Forcing outgoing port 25 through valid gateways/scanning points, would probably provide the nessessary protection people would want, similar to transparent http proxies. but would allow us all to limit the ammmount of spam we all recieve

    2. Re:Doesn't work that way by poohsuntzu · · Score: 1

      Of course, this questions the validity of why is a home user with an dynamic IP so concerned about hosting a mail server?

      --
      "We're breaking out the ramen noodles. . . "
      "Really? Is it someone's birthday?"
  34. There is no need to receive mail from dynamic IPs by Secrity · · Score: 4, Insightful

    If mail servers would start blocking all mail coming from dynamic IPs, they would block the vast majority of spam and block almost no legitimate mail. Yeah, I know that some folks running mail servers on dynamic IPs aren't going to like that, they can still send mail through their provider's mail servers. The arguments against blocking mail from dynamic IPs are pretty much the same as when people were arguing about open mail servers. This is just one mor ething that spammers have ruined.

  35. What does your average user need with 3 gigs/day? by Sancho · · Score: 4, Insightful

    What legal use could a person possibly have for needing 3 gigs per day of bandwidth, out of curiousity? I peak when I download or significantly update my systems, but even that rarely goes over a couple of gigs, and that's certainly not an every day thing.

  36. gets tough on spam. sure. by Anonymous Coward · · Score: 0

    When they're not #1 on senderbase.org, I'll believe it. Just outright block port 25 for end users and don't for businesses. Its not that tough to assign one cable modem a different config file than the others. People can use comcast's servers to send outgoing mail if they have to run their own SMTP or use a VPN tunnel instead. If you can't handle either one, perhaps you should get rid of your computer.

    1. Re:gets tough on spam. sure. by crossconnects · · Score: 1

      idiot!

      some of us use an external email server. VPN is not available. Comcast's servers are not a viable option. Simple answers to complex problems cause other problems. wholesale blocking is like using a 10kg sledge to pound in a finishing nail. It isn't the solution, but surgical strikes like the article says comcast is using can go a long way. Give them a chance.

      --
      no big sig
    2. Re:gets tough on spam. sure. by CaptainFrito · · Score: 1
      Your approach may be just a little to simplistic, unless your still in fourth grade. You probably think that everybody lives life like you do, and that you've thought of everything. "Kill 'em all and let God sort 'em out" attitude. I am sure that this isn't the only despotic opinion you hold; in fact, people like you are dangerous to society.

      Do you think that only 'end-users' send spam, and never 'business users'? Do you think that spammers can't change the config file in their cable modems? Your 'solution' is not even worthy of consideration; it's a childish response to a complex problem and shows zero insight. No wonder you posted anonymously, you coward.

  37. I'm on comcast at home by austad · · Score: 3, Interesting

    And even though they are not blocking port 25 for me, I've found that if I send from their network, a good portion of my email bounces because a lot of companies have all of comcast's network blacklisted.

    I now relay my mail through another server and have no problems.

    --
    Need Free Juniper/NetScreen Support? JuniperForum
    1. Re:I'm on comcast at home by mabu · · Score: 1

      And even though they are not blocking port 25 for me, I've found that if I send from their network, a good portion of my email bounces because a lot of companies have all of comcast's network blacklisted.

      I am one of those ISPs and until Comcast blocks all port 25 traffic for all non-commercial DUL/Broadband users, I will continue to block all their IP space. I feel sorry for legitimate Comcast customers, but then again, not that sorry because Comcast sucks.

  38. Finally ... now for all the other ISPs by Random+BedHead+Ed · · Score: 4, Interesting

    I generally don't like the idea of ISP's interfering with the network, but port 25 is the exception. I like the idea of them blocking 25 by default, but this plan of keeping an eye on their customers is the next best thing. Most people don't realize how much spam comes from broadband accounts. There is some legitimate mail, yes, but those people need to find a new way of life, because it's mostly spam. I use Sendmail at work, and realizing how things have changed on the spam front I updated my /etc/mail/access file so it now starts like this:

    # Reject cable and DSL users who are now Damned Zombie Spam Bastards - keep adding to this
    cable.mindspring.com ERROR:"550 Blocked"
    cq.shawcable.net ERROR:"550 Blocked"
    cg.shawcable.net ERROR:"550 Blocked"
    ed.shawcable.net ERROR:"550 Blocked"
    vc.shawcable.net ERROR:"550 Blocked"
    vf.shawcable.net ERROR:"550 Blocked"
    vs.shawcable.net ERROR:"550 Blocked"
    wp.shawcable.net ERROR:"550 Blocked"
    ss.shawcable.net ERROR:"550 Blocked"
    gv.shawcable.net ERROR:"550 Blocked"
    ls.shawcable.net ERROR:"550 Blocked"
    tb.shawcable.net ERROR:"550 Blocked"
    mj.shawcable.net ERROR:"550 Blocked"
    fm.shawcable.net ERROR:"550 Blocked"
    du.shawcable.net ERROR:"550 Blocked"
    ok.shawcable.net ERROR:"550 Blocked"
    rd.shawcable.net ERROR:"550 Blocked"
    va.shawcable.net ERROR:"550 Blocked"
    dsl.att.net ERROR:"550 Blocked"
    client.attbi.com ERROR:"550 Blocked"
    client2.attbi.com ERROR:"550 Blocked"
    client.comcast.net ERROR:"550 Blocked"
    client2.comcast.net ERROR:"550 Blocked"
    ks.comcast.net ERROR:"550 Blocked"
    fl.comcast.net ERROR:"550 Blocked"
    ny.comcast.net ERROR:"550 Blocked"
    ma.comcast.net ERROR:"550 Blocked"
    pa.comcast.net ERROR:"550 Blocked"
    mia.bellsouth.net ERROR:"550 Blocked"

    And it goes on, and on, and on, for well over a thousand lines. After implementing this I did some calculation and determined that I was blocking about 22% of our incoming mail. There have been some hiccups, but in general I'm really glad I did this. A few people have contacted me to complain that they can't send mail to my users, and I usually tell them to get a static IP address for their mail server or send through a designated relay. This inconvenience to cheap-o owners of SMTP servers with DHCP-assigned addresses has been a real shame, but my users have commented on how much less spam theiy've been getting recently. Blocking broadband users and using Spamcop have been a great combination. Perhaps one day if more ISPs follow Comcast we'll be able to trust those domains again.

    1. Re:Finally ... now for all the other ISPs by Odin's+Raven · · Score: 1

      I use Sendmail at work, and realizing how things have changed on the spam front I updated my /etc/mail/access file so it now starts like this:

      # Reject cable and DSL users who are now Damned Zombie Spam Bastards - keep adding to this
      cable.mindspring.com ERROR:"550 Blocked"
      cq.shawcable.net ERROR:"550 Blocked"
      cg.shawcable.net ERROR:"550 Blocked"
      ...
      rd.shawcable.net ERROR:"550 Blocked"
      va.shawcable.net ERROR:"550 Blocked"
      ...

      I had tried the same /etc/mail/access approach for a while on my home email server. My experience was that it works well for some ISPs, but not well for others. (Ex: it deals poorly with ISPs using customer hostnames like "cust-1-2-3-4.some-isp.com" and legitimate mailservers named "mx01.some-isp.com" -- if you block "some-isp.com" to deal with the spambots on customer machines, you end up blocking the legitimate mailservers for that domain as well.)

      It's also somewhat frustrating to have to type 51-odd nearly identical entries for, say, all the charter[state].com domains, or the various [province/city].shawcable.net subdomains.

      You might want to take a look at Sendmail's "milter" API, and use it with something like milter-regex to implement your site blocks. For those who haven't heard of it before, the milter API allows sendmail to hook into external programs to evaluate/classify incoming email connections, and these external programs can provide more flexible and/or more advanced tests than sendmail itself can easily implement.

      By using regular expressions, you can easily weed out "cust-1-2-3-4.some-isp.com" hostnames (just "^cust-.*\.some-isp\.com$") without running any risk of blocking legitimate servers for that domain.

      You can also avoid a lot of the cut'n'pasting for ISPs using state/province/etc abbreviations in their customer hostnames, and have a single ".*\.(cq|cg|ed|...vs)\.shawcable\.net" rule. Shaw Cable's sort of a bad example for this, since there's a pair of much simpler/shorter expressions that can block all their home-user machines without having to figure out the abbreviation for every province/city in Canada -- from what I've seen, Shaw customer hostnames all start with either "h" followed by their IP address with dashes between the octets, or "S" followed by a string of hex digits (probably based on the customer's MAC).

      My experience with milter-regex is that the vast majority of ISPs with spambot-infested customer machines can be handled with a single rule per ISP - most have an obvious, standardized pattern for customer hostnames. There's a couple of exceptions, like Charter and RoadRunner, but even those guys have less than a dozen different customer hostname schemes.

      The other feature I've liked about milter-regex is that it makes it reasonably easy to deal with mail coming from machines that lack verifiable hostnames (either there's no reverse-DNS info, or their DNS server is temporarily offline for some reason). I've adopted the approach of returning a temporary failure message for these cases. Spam software doesn't usually bother resending a message if it gets a tempfail message back from the target server. OTOH, most serious/legitimate mail servers will do the right thing, and retry the message several more times, usually for several days. I've only had a couple of cases where legitimate email was trying to come in from a server lacking reverse DNS info (one from a friend whose corporate IT department didn't know how to set up reverse DNS, and another from a product newsletter that was farmed out to a [totally legitimate] bulk email service). I handle these cases by monitoring the sendmail logs and watching for entries from servers that are retrying messages at regular intervals (usually once per hour for the first day), temporarily whitelisting the server

      --
      A marriage is always made up of two people who are prepared to swear that only the other one snores.
    2. Re:Finally ... now for all the other ISPs by Kernel+Kurtz · · Score: 1

      I happen to run my own mail server on a Shaw cable account, and I help others set up to do the same thing for their small offices/home offices on cable and DSL (and no, I don't support spammers).

      They are your mailservers, so you are certainly free to block whoever you want. It just means I won't be doing any business with your company or associates, and I'll be recommending to all my clients that they not do so either.

      If you don't want to talk to us, we don't want to talk to you.

    3. Re:Finally ... now for all the other ISPs by Random+BedHead+Ed · · Score: 1

      Understandable, but it's worth keeping in mind that it's really nothing personal - there is an overwhelming trend these days to block DHCP-assigned home cable and DSL clients, and it's not because postmasters don't like you, but rather because the vast majority of the mail coming from them is spam. In an ideal world, the way you set up mail servers would be perfectly reasonable, but in this spam climate your choices inadvertently associate you with the spam scum of the earth. Not a good place to be - and not your fault, either, but it calls into question your choice of providers.

      Of course if Shaw were to be more careful about who it allows to send mail, like Comcast says it will in the parent article, there will no longer be a need for me to block it. You might want to put some pressure on them. Whenever someone complains to me about this I advise them to use a designated SMTP relay for their ISP, and to complain to their ISP about allowing spam.

    4. Re:Finally ... now for all the other ISPs by Kernel+Kurtz · · Score: 1

      >"it calls into question your choice of providers."

      I can only speak for my local area, but the choice of providers is pretty limited as far as consumer broadband goes, and thats the whole point. Not everyone can afford a commercial grade connection, and for a SOHO network, ordinary cable works quite well.

      I am loathe to complain to Shaw about outgoing spam on their network for fear they will use the sledgehammer approach and block all outgoing port 25, as some others have done. That would be even worse than having just the occasional person such as yourself blocking mail. As it is now, it works well enough that a few bounces are no big deal.

      As for using the ISPs relays, that would be fine if they did not rewrite headers, but for anyone wanting to use their own domain, it is a less than desirable option. I ussually set this up as a secondary option for clients, so if they really, really have to get a mail to someone who is blocking direct traffic from them, they still can.

      I think Comcast's approach looks pretty reasonable. If all providers worked like that, then perhaps in the future DULs will not be necessary.

      Time will tell.

      Cheers

  39. Wait, comcast lets you run servers? by sith · · Score: 2, Interesting

    I'm a comcast user and I thought you wouldn't let you get away with running anything that accepts inbound connections. Does this mean I can get away with openning up for inbound ssh?

    1. Re:Wait, comcast lets you run servers? by TyrelHaveman · · Score: 2, Informative

      I am a comcast user and don't run servers, but as I understand it, you are allowed to run "server" programs as long as you agree that Comcast is not responsible for damage to your computer yada yada yada

    2. Re:Wait, comcast lets you run servers? by ELiTeUI · · Score: 1

      go ahead.. i've been running inbound ssh/mail/web/dns (as well as RDP on a windows box) on my comcast connection for 4 or so years, no problems at all.

  40. Static IPs only and NAT by gnuman99 · · Score: 1
    This might be a "radical" solution, but why not just use private IPs for users and have comcast use NATs for all of its users. one /16 should be enough that for. It would stop virtually *all* spam from comcast. The "no server" rule would be automatically enforced.

    Now, if people run servers, then let them sign up for a Static IP option. They pay $2 or $5/mo for an extra static IP, direct access to the internet. Then if there is spam from their IPs, their static IP gets disconnected and they would have to pay $50 or whatever to get it reinstated. If more spam comes from their IP afterwards, turned off their static again, and repeat.

    *Everyone* would always get the NATed IP so no one would loose their internet even if they become a spam relay. They just loose access to their static IP.

    This way comcast would not need that many nets, people that want static IP could get one, and spam and non-email viruses would be history. Hell, if they have a email virus scanner on their SMTP servers, almost all viruses are history.

    1. Re:Static IPs only and NAT by Anonymous Coward · · Score: 0

      God damn it, no!

      I paid for an internet connection. Not some crippled nonsense because MS sells bad software to ignorant people.

      How about we put *YOU* on a NAT and not let *YOU* run any servers? Unless of course you want to pay a small fee, say $5 a month for starters and in 6 months we'll call it the Advanced Business Package for $199/month.

      Why are so many geeks advocating crippling the net instead of solving the problem?

    2. Re:Static IPs only and NAT by The+Vulture · · Score: 1

      If Comcast were to NAT all of their customers, they'd lose a lot of customers. It's not just people who want to run servers who need a routeable IP address.

      There's a few programs out there that just won't work with NAT (or are a major pain). H.323 (Microsoft Netmeeting/GnomeMeeting, maybe the new MSN Messenger video chat?) won't work for one, most of the common Voice over IP implementations also won't work, among other things.

      So, no, this is not a solution.

      -- Joe

    3. Re:Static IPs only and NAT by bigberk · · Score: 1
      I paid for an internet connection. Not some crippled nonsense because MS sells bad software to ignorant people.
      Beautiful point... mod parent up.
    4. Re:Static IPs only and NAT by aldoman · · Score: 1

      Are you insane? I don't think NAT could work on that scale. How long before you start getting hash table collisions and routing totally fucks up with packets going all over the place. Considering Comcast probably use a more than 1TBit/sec of bandwidth, do you know the sort of routers they'd need for this?

      Also, Comcasts network is very ad-hoc. I don't think they have one central place where everything is routed through. They have instead central routers for each state/region they operate in, so this would be hard to implement...

      Also, comcast have a whole class A. It would be a shame to waste millions of those..

    5. Re:Static IPs only and NAT by Anonymous Coward · · Score: 0
      Hey moron. He said a /16 net. That's 65k possible nat addresses, not one. 10k ports used per "router"*65k=650M concurrent connections. You don't need a central place. lol. You connect /24 net (256 IP connections) to one NAT. That gives only what, 300M max bandwidth?! Most of the time it would be A LOT less than that.

      people that can't setup computers not be spam relays should not run on routable ip address.

  41. Curses, curses and more curses by Inf0phreak · · Score: 4, Interesting
    The Danish telco TDC has blocked both in- and outgoing connections on port 25 to all other servers than their own smtp.mail.dk for all PPPoE using ADSL customers. I have several issues with this:

    1) What if I want to create a mailing list for a project that I (hypothetically) am making and host the e-mail server myself?
    2) I have absolutely no idea what their virus filter du jour is. Nor do I have any influence on it. If it nukes a ZIP file that I was trying to send (or hoping to receive) then it's just bad luck I guess.
    3) The performerance of smtp.mail.dk has been known to be abysmal at times... I wouldn't call it smart to force all e-mail to go through your server if it couldn't even handle the load when only some percentage of what your customers sent went through it earlier...

    And I have to deal with this crud because some morons don't belong on the internet, aren't using a firewall and get infected with every single fscking e-mail "virus" [*] that is sent their way.

    Not to mention how frustrating it was when my e-mail suddenly one day just stopped working.

    [*]: Trojan of course. But noone ever seems to use the right terminology.

    --
    ________
    Entranced by anime since late summer 2001 and loving it ^_^
    1. Re:Curses, curses and more curses by secolactico · · Score: 3, Insightful

      Having worked at an ISP, I'm going to answer from the pov of an ISP (your mileage may vary):

      Did you try to get TDC to make an exception for you? Some ISPs actually go out of their way to please their customers. They might customize their filters to let your SMTP traffic thru. Seeing how you are the exception, rather than the rule (not many people with PPP/ADSL run their own servers), this is not unreasonable. Heck, they might even give you a separate network and set up reverse DNS for you (your SMTP server should have it).

      Does your TOS have enything to say about this? If your TOS say that you can't run a server (and given the nature of the internet and specially p2p traffic this might be semantic hair splitting), then you'll have to acomodate them. Maybe change to a service that will let you.

      Of course, I know by personal experience that telco's (specially if they are the dominant one) can be pretty unreasonable, but you won't know until you try.

      --
      No sig
  42. It's not like they haven't screwed people before.. by vsage3 · · Score: 1

    I'm going to blame Comcast for never getting my World of Warcraft beta e-mail :) There was a big stink about that awhile back where Comcast blocked all of Blizzard's e-mails to their customers.

  43. ... they're not the only ones by Samari711 · · Score: 3, Informative

    *LOGICAL FALACY ALERT* "i recieved more spam from them this week" does not translate into "they sent more spam". it is entirely possible for their spam numbers to go down and yours to go up, that just means someone else got 40% less spam from them this week.

    --

    I never said I was smart, I just said I was smarter than you

  44. Addendum by Bishop · · Score: 1

    One thing I did not consider is throttling.

    By forceing outgoing mail through an ISP's SMTP server the ISP could throttle the rate email is sent. The throttle could be based on messages over time instead of bits/second. Message throttling should be more effective at controlling spam then bandwidth throttling. However this type of throttling could also be done transparently without blocking outgoing port 25.

    There is/was a simple STMP server that shipped with OpenBSD. It is a STMP proxy that did not spool email. It was designed to protect the real SMTP server from certain attacks. If not already a feature, message based throttling probably could be added to this SMTP proxy without too much difficulty.

    The downside to STMP message throttling is that it limits a users ability to run a mailing list. I am sure I am not the only one who runs a mailing list to better keep in touch with my friends. Many of whom are now scattered about the globe.

  45. just for reference by Anonymous Coward · · Score: 0

    I started reading slashdot a long time ago. One of the first things I did was read the FAQ. This is on it, just as a "for what it's worth", nothing personal, I know what you are saying.
    It's primarily a US site, but anyone is free to participate and offer articles from anywhere, here is the reference:
    Is slashdot US centric?

  46. sorry, less spam > your private mailserver by Anonymous Coward · · Score: 0
    Their third tier support claimed that it was because they were being threatened with being blocked by other ISPs.

    Bellsouth's address space is a cesspool. Their abuse department really doesn't give a shit about spammers/owned machines on their networks, and its about damn time they crack down on it. Sorry that they've made it harder for you to run your own mailserver, it really *does* suck that the stupid masses have ruined the fun for you and the other clued-in folks out there; but if I have to choose between people being able to run their own mailservers and the users of the network i help to run getting less spam...well, you're outta luck.

  47. rubble ball come bouncing back by loid_void · · Score: 1

    I like treating spam as a game. We bounce it back, we live longer. I don't like my game being taken away.

    --
    Anyone seen my jagged little pill?
  48. Ditto that! by Anonymous Coward · · Score: 0

    I've been running sendmail on debian woody for years without a hitch. I am *so* glad that Comcast has made an extra effort to accomodate a minority user base. I'm as cynical about oversized corporate oligarchies as anyone, but that kind of concern indicates that someone upstairs 'gets it'. Thank you.

    (Oh, and I'm a net/sys admin at a largish institution who is often asked what the local home connection options are... ;)

  49. This is an american site by Anonymous Coward · · Score: 0

    This is an international site on the internet.

    run $whois slashdot.org - it'll be enlightening for you. :-P
    This is an American site. Having links to international webpages doesn't make it any less American. The BBC is a British website, and swissinfo.org is Swiss, and although I frequently read their content, I don't bitch about how they refer to their respective countries. Unless you want to pay to move the servers to your country (I'm sure the admins wouldn't mind sharing the load), quit your bitching.

  50. Destructive game by Anonymous Coward · · Score: 0

    Considering how much spam has forged information, you're hurting a lot of innocent people. The best thing to do is reject spam at the mailer level. That way, you don't send any bounces, and there's less risk of innocents getting involved.

  51. Thanks to Spamhaus, Spamcop, Njabl RBLs by mabu · · Score: 5, Insightful

    And do you think Comcast finally took this step because they decided to stop their spamming users?

    Hell no!

    The only reason they got off their asses is because admins started wholesale blacklisting of their IP space and their customers started complaining.

    Blacklisting WORKS! It's the only way to force these ISPs to be responsible.

    If you're running content-based filtering, you're part of the problem. If you refuse SMTP traffic from confirmed spam sites, you are part of the solution.

    1. Re:Thanks to Spamhaus, Spamcop, Njabl RBLs by smkndrkn · · Score: 1

      If you're running content-based filtering, you're part of the problem. If you refuse SMTP traffic from confirmed spam sites, you are part of the solution.

      Blacklists only go so far in protecting you from spam. Content based filtering works and it IS part of the solution for my mail customers.

      I would not open myself or my customers up to the increase in spam that removing content based filtering would cause just because it MIGHT cause more servers to be blacklisted and in turn that MIGHT cause people to bitch which in turn MIGHT cause a company to wake up.

      There are too many ifs there. The reality is most spam comes from Russia and China and it doesn't matter how much you blacklist those blocks...they keep sending it.

      Content based filtering IS a part of the solution. As well as blacklists and whitelisting.

      And do you _really_ know why comcast took this step or are you just guessing?

      --
      ======== In the future, everything will be artificial. ========
  52. Re:What does your average user need with 3 gigs/da by Daniel_Staal · · Score: 3, Insightful

    Serving their own (popular) web page? Hosting a busy mailing list for some obscure interest? Doing both at once?

    I'm sure Slashdot has put more than 3gigs load on some of the websites it has linked to. Many are hosted out of somebody's basement. (Ok, so that is a one-day load.)

    Do you really have to be a business to need to send stuff to other people?

    --
    'Sensible' is a curse word.
  53. AOL's blocking is utterly stupid by jafiwam · · Score: 2, Informative

    Here's how it works:

    AOL user has a button in their email "this is spam" or "I don't want this" or somesuch.

    When they hit the button, the message and headers are sent to some server.

    The server automatically blocks the IP of the SMTP server that sent the message so it can no longer send email to AOL.

    This works in theory, execpt many users treat this button as a way to muffle their annoying friends. So a "forwarded joke" can get flagged as spam even if it is from their cousin on a small local ISP. There is NO oversight in the process.

    Utterly stupid.

    I know this, because a local ISP that I help out sometimes coaxed the AOL people to foward the messages with headers so he could address the "problems" and get his mail server unblocked. The messages were personal emails, notes from friends, messages from people's own lawyers as well as normal span.

    I am not sure if they have given up caring if AOL-bound emails are blocked. But that's just about the only thing they can do.

    1. Re:AOL's blocking is utterly stupid by perlchild · · Score: 1

      If this is true(and considering what I've seen of Aol's due process, I have no reason to doubt it) this just shows the actual damage from SPAM:

      There is so much volume, it becomes uneconomical to have actual oversight of complaints, and with actual moving targets(spammers don't sit still) oversight is the only thing preventing collateral damage...

      Hence, SPAM is causing a lot of damage, and a large portion of it is collateral(innocent bystanders affected by false positives).

    2. Re:AOL's blocking is utterly stupid by mikeswi · · Score: 1

      It's ridiculous. It used to be just morons who either forgot they subscribed to something or think reporting something as spam was an easy way to unsubscribe. Now they're reporting emails as spam by accident because of AOL's bad design.

      I've solved it for me by blacklisting aol.com from my newsletter. Lost 400 readers at a stroke when I purged them from the database, but that's 400 less chances of my mail server being blacklisted. I direct anyone who complains over to aol's complaint address as it's their fault.

  54. No, this is great. by twitter · · Score: 1
    Comcast is doing this right. It lets you do what you want and punishes those who cause problems.

    They are only going to block your port 25 if they notice something wrong, like you suddenly made 5,000 new friends to sell penis enlargers too. You will still be able to run a legitimate mail server. If your mail server is compromised, you will learn about it. People who spam deliberately will be stopped cold.

    People who have their email blocked frequently will consider getting software that is not so easy to compromise. Windoze lusers who took the attitude, "If it does not interfer with my browsing, I don't care." are going to get what they deserve. Most of them are already using their ISP's SMTP server and will never notice anyway.

    You can contrast this to Cox and other shitty ISPs that blocked everyone's port 25. First they blocked inbound, which made it difficult to run a mail server. Then they blocked outbound, which forced me to use their shitty SMTP server. They have had frequent problems. Had my own mail server been as unreliable as Cox's is, I'd have given up running one.

    Comcast rocks.

    --

    Friends don't help friends install M$ junk.

    1. Re:No, this is great. by Anonymous Coward · · Score: 0
      Moderators: Please note that "twitter" is a known fanatical psycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      To get an idea of what I'm talking about, check this post out. I mean, this is an article about email disclaimers, right? The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx. WTF?

      Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      More? Just read though this post and the subsequent replies. I guess this stands on its own. Or this. Or this.

      More? Bad spelling in astounding conspiracy theories, more offtopic FUD and uninformed "I'm right, look at me" rants, promptly proven wrong. Worse even, twitter wants to be RMS, apparently (that first one is a winner). I mean, really. You think?

      FUD, FUD, FU

  55. Same for Cox. Microsoft behind it. by twitter · · Score: 0
    Cox did the same a while back and for the same reason. AOL and M$ threatened to blacklist them. I'm glad that Comcast has the balls to tell them off.

    What Microsoft told the Washington Post, based on what Cox told me, is clearly disingenuous:

    Webb said he thinks port 25 should be blocked by default, and customers should be required to apply for an exception.

    They don't want exceptions for anyone.

    Comcast's policy, the best for the user and the net as a whole, is really bad for the Soft. Customers are going to learn just how bad M$ junk is when their mail is blocked. Credit is being given where credit is due.

    I feel like dancing in the streets.

    --

    Friends don't help friends install M$ junk.

  56. Here's why by Tony-A · · Score: 2, Interesting

    Note the DO NOT REPLY TO THIS EMAIL ADDRESS.
    The fax address could also be faked.
    At 20 million addresses, that makes my eyeballs worth .005 cents.

    I am insulted!

    (some stuff deleted to avoid lameness filter)
    EMAIL BLAST CAMPAIGNS
    ARE YOU TOO BUSY TO SEND OUT YOUR EMAILS YOURSELF?
    WHY NOT LET US DO IT FOR YOU?
    HOW MANY WOULD YOU LIKE US TO BROADCAST FOR YOU?

    PLEASE CHOOSE FORM THE FOLLOWING:
    [ ] 5 Million ADDRESSES $400.00
    [ ] 10 Million ADDRESSES $600.00
    [ ] 20 Million ADDRESSES $1,000.00
    [ ] 30 Million ADDRESSES $1,500.00
    We use our own directory, so you do not need to pay one dime extra.

    "69 percent of U.S. e-mail users have made purchases online, 59 percent have
    Purchased in retail stores, 39 percent have purchased through catalogs,
    34 percent through call centers and 20 percent through postal mail."

    E-mail broadcasting is the simplest, fastest, and most effective way to
    Communicate. Reach media messages, which invite recipients to respond live.

    SEE HERE FOR DETAILS ON OUR CURRENT PROMOTIONS
    No Software to Buy - Nothing to download
    Lowest cost for broadcast - Guarantee!
    E-Mail is a key component in maintaining contact with your customers!
    Email Broadcasting

    ==DO NOT REPLY TO THIS EMAIL ADDRESS==
    ONLY COMMUNICATE WITH US BY FAX

    Fill out the Form below and fax it back to 1-240-371-0672

    PLEASE PRINT OR TYPE CLEARLY BY CAPITAL LETTERS:

    Name:

    Country: City:

    Telephone:

    Email Address:
    (REQUIRED)
    { } Information regarding the available forms of payment.
    { } If you need more information it is quicker for us and for you to Communicate through email:
    To be removed from the database please follow this link, http://notinuse.biz/takeoff/takeoff.html

    Headers:
    Return-Path: kgbwascaeper@fri.uni-lj.si
    Received: from 221.2.198.66 (221.2.198.66)
    by mail01h.rapidsite.net (RS ver 1.0.94vs) with SMTP id 0-0164468140
    for ; Sat, 12 Jun 2004 07:02:30 -0400 (EDT)
    Received: from 248.113.104.192 by 221.2.198.66; Sat, 12 Jun 2004 17:56:23 +0600
    Message-ID:
    From: "Scot Swain"
    Reply-To: "Scot Swain"
    To: CENSORED
    Subject: ARE YOU TOO BUSY TO SEND OUT YOUR EMAILS YOURSELF?
    Date: Sat, 12 Jun 2004 08:02:23 -0400
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    boundary="--263BC7F2E7F33859B"
    X-Priority: 3
    X-IP: 80.224.251.116
    X-Loop-Detect:1
    Status:

  57. Road Runner and Others have blocked 25 for awhile. by malakai · · Score: 3, Interesting

    I, and many of my family member in other cable providers (whoever does Atlanta does the same thing) have had port 25 blocked. Took me awhile to figure out at first. Actually had to have a family membet telenet to blah:25 before i beleived what was happening.

    The solution was to open up another port for SMTP access on our server.

    This happened years ago, I never thought twice about it.

  58. Re:What does your average user need with 3 gigs/da by topynate · · Score: 1

    Let me add novel applications like Freenet to the list. That shifts a lot of data around.

  59. Appeal? by Anonymous Coward · · Score: 0

    Either use their real email server, or stick your email up your ass. I have all of Spamcast's cable IP blocks locked out of my mailserver anyway. And from looking through the logs on the mailserver, I'm calling bullshit on their claim that they blocked port 25. There's still thousands of attempts per day from Spamcast IPs.

  60. Re:What does your average user need with 3 gigs/da by timmyf2371 · · Score: 2, Insightful

    On the other hand, serving ones own web page from a residential broadband connection is usually against the user policy of the ISP, hence making it not legal to do so.

    --

    Backup not found: (A)bort (R)etry (P)anic
  61. Re:What does your average user need with 3 gigs/da by Anonymous Coward · · Score: 1, Informative

    Let be exact here.

    Terms of service != Legal

  62. And while we're on the subject of Comcast email... by cshuttle · · Score: 4, Interesting
    Here's a question that I have contacted Comcast support for previously, and of course, I haven't been able to replicate the problem for them.

    Has anyone noticed that email which passes through Comcast's servers is delayed for an amazing amount of time? I had a customer that I consult for miss deadlines (and consequently sales) because of mail that was sent at 0800 and got recieved at 2200 the next day. I'm not exaggerating.

    Hearing this and playing around with it a bit, it became obvious that the mail was simply lounging around on Comcast's servers.

    Now, of course, I can talk to their tech support until I'm blue in the face and ask them what's going on, but I'd like to take this chance to appeal to the Slashdot community, who usually have a much better understanding of these matters than the droids at the Comcast call center.

    If you do a couple quick searches around dslreports and newsgroups and so on, you'll see that there are in fact many people who have the precise same issue, and have recieved no significant reply.

    Are there any Comcast insiders who know why these emails float around in limbo for 24 hour periods?

  63. What? by twitter · · Score: 1
    I have concluded that Comcast is a lost cause. Damaged goods. The best thing to do is to blacklist their whole stinking sewer pit, and move on with your life.

    This from a guy that has something to do with Courier, a MTA? Do you not want people to be able to use your nice GPL'd software from Comcast's network? I don't get it.

    I know that Microsoft would like to blacklist Comcast. What they have done will inconvenience people with who are running zombies, which are the real problem. Cox was threatened with a blacklist from them if they did not block, without recourse, all port 25. Comcast is brave to stand up to them.

    What am I missing here?

    --

    Friends don't help friends install M$ junk.

    1. Re:What? by Anonymous Coward · · Score: 0
      Moderators: Please note that "twitter" is a known fanatical psycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      To get an idea of what I'm talking about, check this post out. I mean, this is an article about email disclaimers, right? The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx. WTF?

      Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      More? Just read though this post and the subsequent replies. I guess this stands on its own. Or this. Or this.

      More? Bad spelling in astounding conspiracy theories, more offtopic FUD and uninformed "I'm right, look at me" rants, promptly proven wrong. Worse even, twitter wants to be RMS, apparently (that first one is a winner). I mean, really. You think?

      FUD, FUD, FU

  64. I hope so, too. by twitter · · Score: 2, Interesting
    Perhaps one day if more ISPs follow Comcast we'll be able to trust those domains again.

    I hope so. Before Cox blocked port 25, I started getting more and more bounces but Exim was still more reliable than Cox's SMTP server. Not being able to run a real mail server bothered me, but having to point my MTA at Cox's SMTP servers has been a real pain.

    This inconvenience to cheap-o owners of SMTP servers with DHCP-assigned addresses has been a real shame ...

    Do me a favor and tell Cox to get rid of their expensive and money losing DHCP infrastructure for their "always on" internet connection with a 1:1 IP to client ratio. I liked the static IP I got from AtHome and I paid for one from Cox when they started to charge for that "service". I dropped it when they wanted $70/month for service that was slower than DSL.

    --

    Friends don't help friends install M$ junk.

  65. Re:What does your average user need with 3 gigs/da by drinkypoo · · Score: 1

    The first thing I could come up with: XDMCP over a VPN (or not.) That would chew up bandwidth rapidly (it's dog-slow when I access my home system from work through ssh over 384kbps upstream, to the point of unusability, you really need a megabit or two to get anything done) and is entirely legitimate.

    --
    "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
  66. Re:And while we're on the subject of Comcast email by BCW2 · · Score: 1

    A couple of yeras ago Juno did that to my daughter. I would send an email and be luck if she got it withing 60 hours. She spent the money and got a "real" ISP. End of problem.

    Less expensive is nice, but you get what you pay for, most of the time,

    --
    Professional Politicians are not the solution, they ARE the problem.
  67. Poor, poor Novell... by mosel-saar-ruwer · · Score: 1

    I mean, geez, there are still N-Gage commercials on TV.

    Sometimes you just get the feeling that Novell marketing couldn't market their way out of a paper bag if you gave them a pair of scissors.

  68. English by harmonica · · Score: 1

    And don't be so egotistical to say "they should all speak English", the universe or even the Internet doesn't revolve around America.

    Well, they should. Not every customer, obviously, but those in charge of some network. They should have one person who can answer abuse reports in English. Most network people do at least have a rudimentary understanding of English anyway because docs are often English only. Besides there's automated translation which often gives at least a good impression of what a text is about.

    I say that as someone whose native language isn't English. The Net needs some lingua franca, and English seems to be a good choice.

    1. Re:English by JWSmythe · · Score: 1

      Slashdot is wonderfully American-centric. Imagine if this discussion was happening on say a Chinese tech site. "There's 1.3 billion of us, and only 290 million of them. The Internet should be all in English." :)

      Americans (myself being guilty of it too) predominantly only speak English. Our concept of learning second languages is very poor compared to other countries.

      If I'm writing to a small ISP in say Russia, why should I expect that the guy answering Emails reads and writes English.

      I work with a guy in Russia who reads and writes English almost flawlessly. I'll ask him to send his next trouble report in English, and see if he even gets a response.

      The hosting provider I worked at years ago got *LOTS* of support emails in various languages. I'm really good at recognizing languages by various clues, which was very helpful to feed it to online translation services, but not everyone is good at that.

      Can you tell the difference between Dutch, Finish, or German? How about Bulgarian and Russian? I was lost the first time someone gave me an Armenian document to read. I didn't even recognize the language. At least now I can spot it, but I can't read it, and I have no idea where I could translate it online. I've been trying to learn it, but it's difficult. It has a 38 character alphabet that doesn't even resemble anything in our character set. I was doing better learning Russian.

      --
      Serious? Seriousness is well above my pay grade.
    2. Re:English by harmonica · · Score: 1

      Slashdot is wonderfully American-centric. Imagine if this discussion was happening on say a Chinese tech site. "There's 1.3 billion of us, and only 290 million of them. The Internet should be all in English." :)

      The Internet comes from an English background. Therefore, a lot of software comes with English comments and docs only. Most tech people have an understanding of it because of that, not because they like the language so much.

      Any sort of admin will have to read certain mailing lists etc. They are in English only.

      Let me repeat that I'm not a native speaker when it comes to English. I speak three languages. I can differentiate German from Dutch from Finnish. But it doesn't matter. Nobody can deal with all those languages in popular use unless he's some sort of miracle philologist.

      The hosting provider I worked at years ago got *LOTS* of support emails in various languages. I'm really good at recognizing languages by various clues, which was very helpful to feed it to online translation services, but not everyone is good at that.

      Did you have foreign customers, or why did people send in support requests in other languages? There should be some sort of form / contact page which states what languages are being understood.

      If you do want to put in the effort of trying to identify languages, try TextCat and its fellow language id programs.

    3. Re:English by JWSmythe · · Score: 1
      The Internet comes from an English background. Therefore, a lot of software comes with English comments and docs only. Most tech people have an understanding of it because of that, not because they like the language so much.


      I agree with that. The Internet was "born" in the US, but it's grown dramatically. I think it's grown well beyond saying it's an English-only club. It's well beyond the point of trying to believe that every speaker on the Internet fluent in English.

      I did some work with a company in Amsterdam, and their workstations were all configured in Dutch. I was at a bit of a loss sometimes, being that I don't speak a word of Dutch. I stumbled through a lot of it, and had to ask for a lot of help.

      Did you have foreign customers, or why did people send in support requests in other languages? There should be some sort of form / contact page which states what languages are being understood.


      The company was a hosting company with hints of being a MLM company. It wasn't a scam, it was perfectly legit. Although based in Florida, it ended up with people marketing it all over the world. We had some pretty active people marketing in Italy, Germany, and Spain. In theory the people marketing were suppose to handle their customers support, and the marketing partners were suppose to communicate with us if there was a problem. It never worked like that though.
      --
      Serious? Seriousness is well above my pay grade.
  69. Port 25? We don't need no stinkin' port 25! by admiralfrijole · · Score: 1
    Here in the dorms at NC State, the ResNet admins decided that since there are so many unsecure windows machines that are getting virii are generating spam by the truckload, the only way to reduce that is to block port 25.

    Completely.

    For all users.

    luckily, I, along with some other students who enjoy being able to send out own mail and not use the webmail for sending, are also members of TriLUG, our local Linux User Group which operates a (secured) mail relay. Since it also runs on port 435 (or something like that, the *other* SMTP port), none of us have any trouble sending mail from our computers.

    but its still a shitty solution to a shittier problem. seriously, they just need to start shutting off people's connections if you're spamming...damn humanities majors...

    --
    e to the pi i plus one equals zero
    1. Re:Port 25? We don't need no stinkin' port 25! by CaptainSuperBoy · · Score: 1

      Why can't you use the school's smarthost? I can't think of a situation where you would need your own mail server.

    2. Re:Port 25? We don't need no stinkin' port 25! by admiralfrijole · · Score: 1
      Why can't you use the school's smarthost? I can't think of a situation where you would need your own mail server.

      let me answer in reverse order...

      (b) thats not the point. the point is they arbitrarily closed ALL port 25 traffic as a stop-gap antivirus measure.

      (a) *ALL* traffic over port 25 is blocked, so I can't even use a desktop mail program to send mail, because I cannot connect to the campus mail server on said port.

      --
      e to the pi i plus one equals zero
    3. Re:Port 25? We don't need no stinkin' port 25! by CaptainSuperBoy · · Score: 1

      So this page is wrong? That page says you can use smtp-resnet.ncsu.edu.

      There's nothing wrong with port 25 blocking, as long as the ISP runs its own mail server.

    4. Re:Port 25? We don't need no stinkin' port 25! by admiralfrijole · · Score: 1
      damn, i forgot about that

      we *did* have to use webmail (or the relay) for a few weeks though, before they got that up

      --
      e to the pi i plus one equals zero
  70. Re:There is no need to receive mail from dynamic I by dheltzel · · Score: 1
    If mail servers would start blocking all mail coming from dynamic IPs, they would block the vast majority of spam and block almost no legitimate mail.

    I'll grant that your premise is true, but how do you determine that an IP is actually dynamic. Several of the RBL's have blocked the entire Verizon netspace, including T1's that are definately not static. I know that from experience.

    I hate Verizon, but until we can switch our internet access to another ISP, I'm stuck explaining to our employees why their emails are bouncing (and the conversation includes several references to the collective stupidity of the Verizon employees and the RBL maintainers). Yes, Verizon could get it fixed, but they have chosen to ignore our requests since their company motto seems to be "We don't care, We don't have to, We're the phone company".

    Even if this post doesn't change anything, I suddenly feel better for having written it.

  71. Re:Same for Cox. Microsoft behind it. by Anonymous Coward · · Score: 0
    Moderators: Please note that "twitter" is a known fanatical psycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

    I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

    If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

    To get an idea of what I'm talking about, check this post out. I mean, this is an article about email disclaimers, right? The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx. WTF?

    Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

    More? Just read though this post and the subsequent replies. I guess this stands on its own. Or this. Or this.

    More? Bad spelling in astounding conspiracy theories, more offtopic FUD and uninformed "I'm right, look at me" rants, promptly proven wrong. Worse even, twitter wants to be RMS, apparently (that first one is a winner). I mean, really. You think?

    FUD, FUD, FU

  72. Re:It's an attack on email itself not a sales pitc by Anonymous Coward · · Score: 0
    Moderators: Please note that "twitter" is a known fanatical psycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

    I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

    If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

    To get an idea of what I'm talking about, check this post out. I mean, this is an article about email disclaimers, right? The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx. WTF?

    Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

    More? Just read though this post and the subsequent replies. I guess this stands on its own. Or this. Or this.

    More? Bad spelling in astounding conspiracy theories, more offtopic FUD and uninformed "I'm right, look at me" rants, promptly proven wrong. Worse even, twitter wants to be RMS, apparently (that first one is a winner). I mean, really. You think?

    FUD, FUD, FU

  73. Re:What does your average user need with 3 gigs/da by chez69 · · Score: 1

    you agree to the Terms of service when you signed up. If you don't agree with them, go somewhere else.

    --
    PHP is the solution of choice for relaying mysql errors to web users.
  74. A Pain, but Usually Circumventable by bcs_metacon.ca · · Score: 1

    When my ISP (Aliant) started blocking port 25, it really screwed me up for a day or so (before I realized what was going on), but luckily my DNS registrar (EasyDNS) allowed me to be flexible and set my MX record to send mail to a different (unblocked) port.

    As long as your registrar has a similar ability, you should be OK. They have a handy tutorial, which might prove helpful.

    --

    How appropriate. You fight like a cow.
  75. now if they could keep their own mail servers up by Trailer+Trash · · Score: 1

    I have to use my own mail server at my hosting company to process my outbound mail. My IP is in a "dialup" blacklist, so I can't send straight out of my cable modem connection. I used Comcast's own mail server for about a week, I was tired of their server being down so much and mail not going out in a timely manner.

    Maybe they've improved, but I just don't have the time or patience to find out...

  76. Re:There is no need to receive mail from dynamic I by watsondk · · Score: 1

    some ISP already do this, for example optusnet and use.net block all mail from dynamic IP (from my ISP anyway)

    when contacted they just say, use your ISP mail server, well yes, thats nice in theory, but in my case the ISP (tel$tra) mail server is totally fscked, and after 2 years my account is still broken

    when tel$tra finally gets around to blocking cable users port 25, I am totally screwed, with no access to outgoing email

  77. It's nothing like postal mail "spam" by Anonymous Coward · · Score: 0

    Even if your signal:noise ratio is as bad with postal mail as it is with email, "real" junk mail isn't nearly as bad as spam.

    If you somehow get on The Sharper Image's mailing list, they'll send you catalogues for a year or two. If you never order anything, they'll stop sending you catalogues eventually, because it actually costs money to print and ship physical "junk"!

    And at least you won't get completely burned by the likes of Capital One and MCI if you bite on their junk mail. They are, at least, somewhat reputable companies -- not wealthy Nigerian widows who want to help you make your dick grow three inches.

    1. Re:It's nothing like postal mail "spam" by JWSmythe · · Score: 1

      I got really annoyed by the Capital One junk mail after a while. I'd get two or three offers every day, so I started filling out every application and sending it back. Sure, it hit my credit score a bit, but for whatever reason, they slowed down with the offers. I got two extra Capital One credit cards out of it. ($200 limit each).

      What's worse, someone willing to sell me Viagra, or someone sending an offer for $4000 off a new car, when the small print clearly (under a microscope) says it doesn't apply. How about those "checks" that if you deposit automatically enroll you in a program? At least most of the spams are really selling something.

      I get plenty of junk postal mail that looks like official notices. More than once, I've cross-references my real accounts to make sure it was junk mail.

      --
      Serious? Seriousness is well above my pay grade.
  78. Cox.net == Rat bastards by John+Jorsett · · Score: 1

    One day a while back, my outgoing email suddenly stopped functioning. Came to find out that Cox decided to block port 25 access to any but its own SMTP servers, and that if you want to send anything, it's got to go thru them. They said they'd remove that restriction if I wanted to "upgrade" my service to business class. For more money of course. This on top of an earlier fiasco in which they falsely accused me and a few hundred other people of running Napster servers, and threated to shut us down if we didn't desist. (They implemented a scanning script which was miscoded and thought a firewall was evidence of Napster for some reason. Evidently they didn't test it, so it automatically generated hundreds of nasty emails to customers. The resulting meltdown of their inbox and subsequent groveling apology was a glorious thing.)

  79. Re:It's not like they haven't screwed people befor by Anonymous Coward · · Score: 0

    From a Comcast Help Desk person who was on duty that night: no, your email wasn't blocked, but when 400,000 people apply for a beta spot and only 5,000 get in, it sure seems that way, doesn't it?

    And to stay on topic - if you get wrongly blocked on port 25, just call in, we'll tell you how to get yourself off the blacklist. It's that easy.

  80. Re:And while we're on the subject of Comcast email by TomsFingerKeys · · Score: 1

    Just curious, are you (or your customer) paying for the "business class" service? Comcast doesn't advertise that it would eliminate that delay, but it might. Then again, if support didn't already redirect you to sales, they may know it won't make a difference.

    If it remains an issue, you could try smarthosting your mail through another ISP. It costs more, but if your business really depends upon email, you'd be crazy not to have a backup plan.

  81. non-geek users by Detritus · · Score: 1
    Any Macintosh owner who uses Apple's .Mac services for email needs outgoing port 25 unblocked. That's a large number of people, most of whom are not geeks.

    There are also plenty of people who need to use their employer's mail servers for work-related email.

    --
    Mea navis aericumbens anguillis abundat
  82. Re:What does your average user need with 3 gigs/da by Sancho · · Score: 1

    Sure. Again, though, what would you be hosting or downloading from Freenet that's legal? Sure, there are examples, but your average user won't be hosting/downloading Linux distros.

  83. Re:What does your average user need with 3 gigs/da by Sancho · · Score: 1

    Two points here:
    1) It's a valid use. Read the subject though. You are not the average user.

    2) Most ISPs have a clause against running servers. Debate about which is the server in this case aside, the ISP would almost certainly consider you to be running a server. If you turn it around and say you want to access your work machine from home, you run into the clause that several ISPs have against this sort of thing (it's considered business use, and they want to bump you up to a business class level of service).

    Now I'm generally of the opinion that the ISP should just give you an IP address and let you run with it (throttling everyone's bandwidth as appropriate--I'm not saying they should HAVE to offer you 6mbps or anythihng). But MOST users have no use for 3gigs of download a day if they aren't commercial or accessing remote desktops. ISPs sell their broadband based on people violating copyright, and I'd say most people get broadband for that very reason.
    (if you reply, remember I said MOST people. Obviously there are exceptions)

  84. Re:Road Runner and Others have blocked 25 for awhi by ticktockticktock · · Score: 1

    That has to be area specific. Roadrunner in my area does not block port 25 outgoing or incoming.

  85. Re:Road Runner and Others have blocked 25 for awhi by ticktockticktock · · Score: 1

    hmm...unless the blocking has something to do with whether you get cable service direct from them or pay for it through another ISP.

  86. I've noticed complaints by poohsuntzu · · Score: 1

    About users of comcast on their home servers (note, dynamic) are crying about no longer being able to host their mail servers.

    And?

    You are using the services of comcast as an ISP and thus are subject to their TOS. If comcast says "no, we don't want you to host a server" then quite simply, you can not host a server. However, as it may be, they have a yes/no look upon servers.

    As many comcast users who run a httpd, I'm sure we've all noticed the massive script checking logs that probe how well our servers are secured. No, it isn't a million script kiddies, because comcast higher-up's comfirmed their security scanning. (gave them a call and spent a few good hours cutting heads off). Their primary concern isn't about pissing off the companies, as Comcast is primarily a dynamic IP home userbase. This means that they are more worried about the security of the home user's network as well as Comcast's network, and thus why they run security scans on the users servers.

    If your server is secure, isn't spamming, or using an unusual amount of bandwidth, they won't lift a finger or say a word. If you are running an ancient server version, spamming, or using a ton of unusual bandwidth on incoming, they are going to notify you.

    It's that simple guys.

    --
    "We're breaking out the ramen noodles. . . "
    "Really? Is it someone's birthday?"
    1. Re:I've noticed complaints by awehttam · · Score: 1

      That's an awefully nice value-added service. It would be good to see other ISPs doing this as well.

  87. Let's give up on the "war on murder" by aussie_a · · Score: 1

    just too hard

  88. Re:Road Runner and Others have blocked 25 by kb8rln · · Score: 1

    Well if you run sendmail look in the sendmail.mc file with fedora and you will see this:

    dnl #
    dnl # The following causes sendmail to additionally listen to port 587 for
    dnl # mail from MUAs that authenticate. Roaming users who can't reach their
    dnl # preferred sendmail daemon due to port 25 being blocked or redirected find
    dnl # this useful.
    dnl #
    DAEMON_OPTIONS(`Port=submission, Name=MSA, M=Ea')dnl
  89. Re:What does your average user need with 3 gigs/da by Anonymous Coward · · Score: 1, Interesting

    Have you thought about those that legally trade large music and video files?

    I easily break 90gb a month on just unlicensed fansub anime. Not even counting listening to streaming mp3s.

  90. MOD PARENT DOWN, STRAW MAN ARGUMENT by Anonymous Coward · · Score: 0

    The difference is, murder actually has a victim.

  91. sympatico in .ca by SmartSsa · · Score: 2, Insightful

    bell sympatico in .ca has been blocking outbound port 25 for ages.

    it kind of bugged me at first to think "damn them for controlling my usage!"

    but then I realized how much spam actually comes directly from idiot systems out there I changed my mind. My server doesn't process all that much mail; maybe 50,000 messages a week. But ever since I stopped allowing mail from unauthorized dynamic hosts (using securitysage's rules and postfix) I've been able to monitor where it comes from. (4400 or so messages/week from comcast hosts)

    This type of thing shouldn't affect 'normal' users. For the clients I have that do use sympatico; I've setup an alternative method for them to still use my system as an outbound server -- with authentication, natrually.

    It's a lot easier to control spam if email is channeled through an ISPs server rather than a bunch of rogue systems sending directly to destinations... lets see if my numbers on comcast mail rejections drop...

  92. Re:What does your average user need with 3 gigs/da by ErikZ · · Score: 3, Interesting

    Don't forget:

    Gaming server
    IRC server
    multiple VNC server
    Internet radio
    PHPnuke boards
    Popular Blog
    Popular Webcomic comic
    Not so popular flavor of Linux you made yourself
    Internet phone
    Being a camgirl

    Seriously, is your imagination so limited that you can't think of another way you use up a lot of uploading bandwidth legally?

    --
    Democrats or Republicans. They are both taking us to the same place and they are not afraid of us anymore.
  93. Uh, Nokia by cmdrbuzz · · Score: 1

    Dude, N-Gage is Nokia not Novell.

  94. ild rather play ut2004 with that bandwidth by Fedmahn+Kassad · · Score: 1

    its about time they just put up a brick wall against tcp25... i for one have gotten sick and tired of the 125-250ms roundtrip times that you can experience on their network in the evening hours. the performance usually follows worm trends predictably. and surely it is a simple matter for someone who can administer an email server to begin with to set an outbound mta in their configuration. you just know the next set of worms is going to probe the mta info somehow. but for now it will be a nice reprieve.

  95. Re:There is no need to receive mail from dynamic I by cpghost · · Score: 1

    they can still send mail through their provider's mail servers.

    If you operate more than one domain, using your provider's mail server is not always an option. Especially if your ISP is one of those big providers, you won't be able to convince them to accept mail for N domains (N > 1). Unless you buy more account with them, or use one of those prepackaged 5, 10, whatever user domains per account.

    --
    cpghost at Cordula's Web.
  96. Re:And while we're on the subject of Comcast email by Anonymous Coward · · Score: 0

    Carnivore. The amount of Spam and client machines slows it way down. All major ISP's have it installed and it routes all e-mail through it. Any e-mail that goes to the companies' server gets lower priority (due to holding on server), while mail that is sent from client machines is given priority due to realtime constraint (msn, aol, etc, all have the same problem).

  97. Re:There is no need to receive mail from dynamic I by Secrity · · Score: 1

    Many of the more clued ISPs, mail filtering services, and corporate mail servers either block or mark incoming mail from dynamic IPs. I believe that more servers will block mail from dynamic IPs as time goes on unless all of the cable companies do something drastic to block spam from their users.

    I am sorry to hear that your monopoly ISP provides such poor service. Perhaps you could get smart host mail service from another provider (perhaps via SSH or VPN to bypass port 25).

  98. The war on drugs.... by ControlFreal · · Score: 1

    Amen! I'm from Holland. And before anyone starts shouting about the drug-policy in my country, please make sure you have read a bit about it.

    Basically, "soft drugs" (drugs that are mentally, but not physically, addicting) are allowed for personal use. Now what happens?

    The amount of adolescents (w.r.t. the population) that tries soft-drugs like Mariuana one or a couple of times is significantly higher than the US average. However, the amount of adolescents that actually uses soft-drugs regularly is much lower.

    Adolescents are adolescents: they will piss off the world around them by doing things that are not allowed. And guess what: If you allow soft-drugs, it's not exciting for them to use them anymore. So most won't.

    A second advantage of a liberal soft-drugs policy is that there actually is a certain quality-control out there. So if your kids will try Mariuana once, you as a parent can rest assured that it's a good quality, and doesn't contain any crap.

    I'm not saying that a liberal drug policy is "the answer", but I do say that the American dogmatic "o-my-god-it's-bad-so-we-should-wage-war-on-it" attitude doesn't work at all. Try to see beyond the dogma, and be pragmatic, it works!

    --
    Support a Europe-related section on Slashdot!
  99. A crap, wrong link, sorry by ControlFreal · · Score: 1

    I of course meant this link.

    --
    Support a Europe-related section on Slashdot!
  100. Re:There is no need to receive mail from dynamic I by Secrity · · Score: 1

    The rbl's that list dynamic IPs will correct their listings if the DNS information for the IPs is correct and they are informed by the ISP that the listing is incorrect. The rbl's that list dynamic IP space are not listing all of Verizon's IP space, only the dynamic space.

    The stament about some rbl's listing all of Verizon's IP space has nothing at all to do with the blocking of mail from dynamic space.

  101. Re:There is no need to receive mail from dynamic I by dheltzel · · Score: 1
    They are blocking what they *believe* to be dynamic, not what they know. If they were 100% accurate they would not need to have a mechanisn to inform them of errors, right?

    They are in fact blocking Verizon IP's that are not dynamic, I can prove that. The Verizon IP's they block are clearly wrong in some cases (checking the public WHOIS records would confirm that for them easily). Their correction mechanism is broken. They require the ISP to contct them to correct it, this works fine in most cases, but Verizon simply doesn't care, so the inaccuracies continue. This is a deficiancy on Verizon's part (see my rant in the previous post), but still it make for an inaccurate block list and no feasible way for the customer to correct it.

    The stament about some rbl's listing all of Verizon's IP space has nothing at all to do with the blocking of mail from dynamic space.

    Huh? It has everything to do with it. My point is that they are also blocking some static addresses. It's easy for you to say "well some collateral damage is acceptable", but if you can't receive some important email because the sender is a Verizon Business customer, then it does affect you. Of course, if your blocking that email, you won't know about any business you are missing, so I guess it's OK.

  102. Re:What does your average user need with 3 gigs/da by Anonymous Coward · · Score: 1, Interesting

    Let's get in the business of assuming people to be criminals when they're not like us. Surely that'll be fun.

  103. SPF Records? by keyslammer · · Score: 2, Interesting

    For a company that's "getting tough on spam", they don't seem too interested in implementing one of the more common measures to reduce it...

    One of the servers that I administer is on Comcast. I just set up SPF records for that domain, and I "include comcast.net" because we send most of our stuff through their SMTP server. Now if only Comcast would set up their SPF records, we could comply to this lovely standard.

    Sorry to take this opportunity to rant about one of my pet peeves...

  104. Re:There is no need to receive mail from dynamic I by Secrity · · Score: 1

    Show me any large database that is 100% accurate. The rbl's that list dynamic IPs accept corrections from ISPs (and sometimes from users), some will also accept entire lists of dynamic ports from ISPs. This means that an ISP can send a list of IP blocks for listing and the rbl will only list those blocks as being dynamic IPs (unless it is found that the ISPs are trying to scam them). If a provider provides shitty service, then the customers should either get their provider to change or the customer should change providers. Your original post indicated that there were rbl's that reported that all of Verizon's IP space was being reported as being dynamic. Now you are saying that there are ERRORS in the dynamic rbl lists, this is a big difference.

  105. Re:What does your average user need with 3 gigs/da by mikestro · · Score: 0

    Keep in mind that this is broadband and upstream traffic is throttled. He may get 40-60kb/s upstream. I just don't seem someone hosting a busy web-site on their comcast cable modem. He's going to be downloading, and that being said, what would someone download 90GB/month of?

  106. How about their own spam? by penguinbrat · · Score: 1

    It's not email but how about all of their advertising that they would rather their customers see instead of a usable program guide? Atleast with email you can somwehat filter it out...

  107. Re:There is no need to receive mail from dynamic I by dheltzel · · Score: 1
    Your original post indicated that there were rbl's that reported that all of Verizon's IP space was being reported as being dynamic. Now you are saying that there are ERRORS in the dynamic rbl lists, this is a big difference.

    I'm saying it is an ERROR to list all of Verizon's IP space as dynamic. Is that not clear enough? What do you see as the difference?

    Perhaps we should just drop this. At least we agree that moving off stupid ISP's like Verizon is the only solution. Unfortunately, my company won't be able to use an RBL because we have people using Verizon that want to send us email. Until they *all* migrate to other ISP's, and RBL that lists all of the Verizon IP space as synamic is usless to us.

    Fortunately, we use a better Spam filter (CanIt) that doesn't need an RBL to be effective.

  108. The internet is American by gatkinso · · Score: 1

    go invent your own network.

    --
    I am very small, utmostly microscopic.
    1. Re:The internet is American by azzy · · Score: 1
  109. Re:And while we're on the subject of Comcast email by cshuttle · · Score: 1

    Yup, it is, in fact, the business class email, and the way we've gotten around it is by having our site (connected to XO) relay the mail for him.

  110. Not quite by Anonymous Coward · · Score: 2, Informative

    We send a lot of email to AOL and are in AOL's feedback loop for spam reports.

    You are right, pushing the button leads to a spam report being sent to AOL, who then keep statistics on file for the spam's origin. If your IP gets "too many" reports compared to the volume of email you are sending, you will be blocked. But it's not normally a 1-for-1 type of deal. And if you're in the feedback loop, you get a copy of the spam report.

    We've had days where we've received as many as 20 spam reports, yet we haven't been blocked yet, presumably because our volume was high enough and our track record good enough to be left alone.

    We don't send spam. All our users subscribe (yes, on purpose) to receive our email. Yet you get people pushing the "Report Spam" button for many reasons:

    - In AOL 9.0, there is not even a warning or a window asking to confirm the button press. You push the button, and any email you have selected is instantly reported as spam.

    - They don't tell their users that spam reports are filed and that this may have adverse affects on the person sending the email. All they know is "I don't want email like this anymore." We go out of our way to remind our users in every email where they can go to cancel their account. Doesn't matter. (Keep in mind these people actually requested our email.)

    - The "Report Spam" button is DIRECTLY NEXT TO THE DELETE BUTTON. This is fucking retarded. Combined with no warning when a spam report is filed, half the people filing reports are aiming for the delete button. (We know because we've asked for info about these people.)

    Here's the best part.

    AOL sends these spam reports to you if you are in the feedback loop. The idea is that you will act on them since you are not supposed to send that person any more email once they report you. But they delete the person's email address so you're SOL in most cases! Luckily for us, we're using a good list server that lets us embed the member ID of the user so we can cancel their account. But lots of times we'll get reports on various automated emails from our website that have no other ID aside from the now-erased email address.

    All in all, AOL has their head up their ass.

  111. Dude, it was a joke... by mosel-saar-ruwer · · Score: 1

    Dude, N-Gage is Nokia [nokia.com] not Novell.

    Dude, it was a joke.

    Here, I'll explain it to you: Novell used to have this flagship product called NetWare Directory Services [NDS]. Then Novell Marketing renamed it to Novell Directory Services [still NDS]. Then Novell Marketing renamed it to eDirectory [no longer "NDS," and with no apparent acronym]. Then they renamed the whole shebang to "Ngage, exteNd, Nsure, and Nterprise". No one has a clue what any of those things mean. By the way, this is the home page for Ngage.

    So here's the joke: Novell, proud new owners of Ximian and SuSE, and brave, stalwart defenders of the System V trademark against the diabolical Santa Cruz Operation, is the object of Linux fanboy passion [albeit fleeting] the world over, and, as above, their flagship product has been renamed "Ngage" [in a move that nobody understands]. The great-grandparent post was about a product called "N-Gage," but of course none of the /. Linux fanboys thought of Novell when they heard the term "N-Gage" - instead they thought immediately of Nokia.

    Well, like I said, that's the joke. I guess you'd have to be an old MCNE/MCNI like me to have gotten it, but that's okay: Goodness knows there aren't many of us left any more, so you young whippersnappers are forgiven. Enjoy your blissful ignorance while you can, and then watch Novell Marketing drive yet another industry leading product into utter oblivion and irrelevance.

  112. Re:What does your average user need with 3 gigs/da by ScrewMaster · · Score: 1

    How about classic British television. Given that the British Broadcasting Corporation is releasing a large chunk of their video archives to freely-downloadable content I can see using up 90 Gb's easily. And that's only ONE large source of legitimate, free content on the Internet. So be careful with assuming that just because you have limited reasons for using the Internet that the rest of us are equally limited. The assumption you're making is the same one that Comcast is making, that all people can be put into one of two categories. To wit, they are a. good, law-abiding citizens who can be intimidated into barely using their expensive "high-speed, broadband, unlimited always-on" service for nothing more than email and light browsing, and b. Network-abusing bandwidth hogs, i.e. those that simply want to use their "high-speed, broadband, unlimited always-on" service in the manner which they were promised. Why someone wants to download big files is irrelevant: Comcast heavily markets the speed of their service and people buy it for that reason alone. Comcast is a business, I understand that, but if they cannot actually provide the services that they are selling (even if it is only to a relatively small percentage of their customer base) they need to re-think their business plan. But Comcast's management is surely aware that a large segment of the population bought broadband for one reason: fast transfer of large amounts of data. If they succeed in eliminating that benefit in order to save costs they will find themselves much less competitive. I'm sure that terms like "bandwidth caps" sound appealing in the boardroom, but in reality this is the age of the downloader, and any ISP that wants to survive in that world had better be very, very careful.

    --
    The higher the technology, the sharper that two-edged sword.
  113. Cox did too, Microsoft behind it. by twitter · · Score: 1
    Cox did the same a while back and for the same reason. Tech support told me that AOL and M$ threatened to blacklist them. I'm glad that Comcast has the balls to tell them off.

    What Microsoft told the Washington Post, based on what Cox told me, is clearly disingenuous:

    Webb said he thinks port 25 should be blocked by default, and customers should be required to apply for an exception.

    They don't want exceptions for anyone.

    Comcast's policy, the best for the user and the net as a whole, is really bad for the Soft. Customers are going to learn just how bad M$ junk is when their mail is blocked. Credit is being given where credit is due.

    I feel like dancing in the streets.

    --

    Friends don't help friends install M$ junk.

    1. Re:Cox did too, Microsoft behind it. by Anonymous Coward · · Score: 0
      Moderators: Please note that "twitter" is a known fanatical psycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      To get an idea of what I'm talking about, check this post out. I mean, this is an article about email disclaimers, right? The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx. WTF?

      Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      More? Just read though this post and the subsequent replies. I guess this stands on its own. Or these two. Or this one.

      More? Bad spelling in astounding conspiracy theories, more offtopic FUD and uninformed "I'm right, look at me" rants, promptly proven wrong. Worse even, twitter wants to be RMS, apparently (that first one is a winner). I mean, really. You think?

      FUD,

    2. Re:Cox did too, Microsoft behind it. by lorcha · · Score: 1
      I have cox and they block outgoing only, not incoming port 25. I was annoyed because they blocked without telling anyone they were doing it and my email just sat in the outgoing queue until I figured out what the hell was going on.

      But, whatever, it's a one-liner in smtproutes. But I wish I would have known ahead of time.

      --
      "Avoid employing unlucky people - throw half of the pile of CVs in the bin without reading them." -- David Brent
  114. Other uses for spam. by twitter · · Score: 1

    Spam is a weapon that's being used to destroy conventional email and competitive ISPs. Connect the dots and follow the money. Spam is being used for more than promoting dubious products. Spam is a cheap DoS and some people have plenty of money and reason to buy it.

    I imagine that Microsoft is a big spam purchaser but is not alone. Microsoft spent more than a billion dollars promoting XP and has been known to break competitor's service. It's easy to imagine them and other big ISPs paying spammers to bomb their competitor's mail. Microsoft also has a long record for astroturfing and disrespect of other people's property and business. Does anyone think they would shrink from using spam this way?

    If that's not enough reason, Microsoft has also announced that they want to make money from new kinds of "secure" email. Schemes have been advocated where every user of email would pay them and everyone would need their software. They also would sell advertising to the same "respectable" businesses who have polluted TV, radio and billboards, the sky itself and every other place you might glance. Sounds like they would like real email to die, no?

    The US Government agrees with Microsoft on that score. Their carnivore system will not work if people run their own mail servers and encrypt their mail. It's much easier for them to intercept and filter mail that has to go, unencrypted, through a few large ISP owned smpt servers.

    To top it all off, Microsoft and AOL threatened my ISP with blacklisting if they did not block all port 25. My ISP complied. Another poster here has the same story about their ISP.

    Comcast is fighting them. Good for them and everyone.

    --

    Friends don't help friends install M$ junk.

    1. Re:Other uses for spam. by Anonymous Coward · · Score: 0
      Moderators: Please note that "twitter" is a known fanatical psycophant whose obnoxious offtopic rants are legend here on Slashdot. It doesn't matter what the topic is, he'll find a way to scrape in some pointless Microsoft bashing. While nobody expects us to love Microsoft in any way, his particularly tepid style of calling anyone he replies to "troll" or "liar" or "fanboy" because he happens to disagree with whatever they're saying is well documented and should not be rewarded. If anything, twitter is the type of person that should not be part of the open source/free software community. He is an anathema to all that is good about free software.

      I'm posting this so that you (the moderator) have some context to consider twitter and not mod him up whenever he posts his filler preformatted rants about installing Knoppix or whatever that unfortunately get him karma every single time and allow him to continue posting his trademark toxic crap (read on) day in and day out. You may consider this a troll - I consider it community service. And I ain't kidding.

      If you're a /. subscriber, I invite you to look through some of his posting history. I guarantee that you'll be hard pressed to find someone that is more "out there" than twitter. You'll also probably notice he's got quite an AC following. Don't just read his posts, make sure you go through the replies.

      To get an idea of what I'm talking about, check this post out. I mean, this is an article about email disclaimers, right? The parent of the post is complaining about the ads in the linked page and so on, and twitter actually goes off on a rant to blame it on Microsoft and recommend Lynx. WTF?

      Here's another. In this post twitter not only calls the OP a troll but attempts to "tell it like it is" while making some vague argument about "GNU". Yes, if you're confused, you're not alone. The reply (modded +4) proceeds to simply destroy his bogus argument. You will notice he did not reply. This is what some people call "drive-by advocacy". A sort of I'll just leave you with my thoughts here and move on to the next flamebait kind of deal. In fact, he almost never replies because he knows that his fanatical arguments simply do not hold up to any sort of discussion. It's not that he's chosen the wrong cause - he's just going at it in a completely wrong way.

      More? Just read though this post and the subsequent replies. I guess this stands on its own. Or these two. Or this one.

      More? Bad spelling in astounding conspiracy theories, more offtopic FUD and uninformed "I'm right, look at me" rants, promptly proven wrong. Worse even, twitter wants to be RMS, apparently (that first one is a winner). I mean, really. You think?

      FUD,

    2. Re:Other uses for spam. by Anonymous Coward · · Score: 0

      Why did you post the same thing again? Are you pissed that it got moderated down? Maybe that troll of yours is actually working. Tut, tut.

  115. You can thank spam-viruses by vanyel · · Score: 3, Interesting

    I work at a small-to-middling isp, and we get almost daily reports from spamcop et al reporting one of our dsl customers. We're going to have to start blocking outgoing port 25 unless the customer requests it be unblocked simply in self-defense. It's a tiny, minute fraction that do actually run their own mail servers, and even they could still relay through our mail server. When SPF or something like it is widely deployed, then we'll be able to open things back up because few of these machines will be authorized mail servers.

  116. ha ha by Anonymous Coward · · Score: 0

    eat me, bitch

  117. easy answer by Anonymous Coward · · Score: 0
    you ask:

    Why did you post the same thing again? Are you pissed that it got moderated down?

    I'm wasting your time and mod points, bitch. I know both cost Bill Gates money.

  118. Re:And while we're on the subject of Comcast email by Raven42rac · · Score: 1

    24 hours? That is nothing. When my ISP implemented their SPAM tagging/deletion scheme and virus scanning functions I would routinely get my mail up to 8 days later. It did not bother me, if I relied on my home address for business, it would probably cheese me off, but that is why I have back-up addresses.

    --
    I hate sigs.
  119. Re:What does your average user need with 3 gigs/da by Anonymous Coward · · Score: 0

    Playing multiplayer videogames over the net. Downloading/streaming movies from subscription services. Streaming radio stations that you listen to, downloading porn from sites you've paid to access, backing up your remote colo server, serving bittorrents for popular open source projects.

    The point is, if you offer unlimited accounts, you shouldn't be limiting them. Offer metered accounts instead.

    I download a lot of high quality porn from subscription sites. Probably about 200 to 300gb per month. It's legal content I have paid to access through an ISP that I've paid to get bandwidth from, so why should there be a problem? My contract didn't say anything about "UNLIMITED 3.5mbps/256kbps for only $60/month... up to 90gb per month".

  120. Re:There is no need to receive mail from dynamic I by DA-MAN · · Score: 1

    Why not push your mail through the verizon mail server? Just set the smart host and not worry about being blocked.

    --
    Can I get an eye poke?
    Dog House Forum
  121. Re:What does your average user need with 3 gigs/da by Pandora's+Vox · · Score: 1

    little quibble... fansub anime is a copyvio. however, as ScrewMaster points out below, there are many places with free content on the intarweb. creativecommons.org links to many of them.

    -Leigh

  122. Re:There is no need to receive mail from dynamic I by NuclearDog · · Score: 0

    You know why? Because there is ALWAYS going to be someone complaining and fighting against it. How many users do you think a small local ISP needs threatening to cancel their service before they decide not to block ports, etc?

    If people would take up the philosophy "You can please some of the people all the time and all of the people some of the time, but you can't please all of the people all the time." and just block the ports, the complaining would die down soon enough.

    And I belive I am just rambling on here. I will go now.

    ND

    --
    This statement is forty-five characters long.
  123. When Cox did this to all its users by lorcha · · Score: 1

    It pissed me off because they didn't warn people they were doing it and my outgoing email just started getting blocked inexplicably (didn't find out for a while 'cuz qmail doesn't generate bounce messages immediately). I don't mind anymore 'cuz their SMTP servers let me send mail addressed from my domain instead of theirs so it's a one-liner in smtproutes, but I just wish I would have been alerted ahead of time!

    --
    "Avoid employing unlucky people - throw half of the pile of CVs in the bin without reading them." -- David Brent
  124. Re:What does your average user need with 3 gigs/da by WuphonsReach · · Score: 1

    Being a game server for your friends.

    Most games assume a 48kbps connection (which is a reasonable expectation for dial-up). Call it 4KB/s or 14MB/hr. If you have 8 people playing for 6 hours a day... that is 672 MB/day.

    Newer games support up to 64 players per server, assuming that it's more like 32 players on average and 18 hours per day... the number is 8064 MB/day (over 8GB).

    The numbers add up quick when you host multi-user games.

    --
    Wolde you bothe eate your cake, and have your cake?