Information Security News mailing list archives

More problems with SpamCop, go figure.


From: InfoSec News <isn () c4i org>
Date: Thu, 10 Apr 2003 02:22:50 -0500 (CDT)

Forwarded from: security curmudgeon <jericho () attrition org>
To: Declan McCullagh <declan () well com>
cc: InfoSec News <isn () attrition org>, <abuse () spamcop net>,
   <abuse () globalvision net>, <abuse () infosat net>

Once again, we have been flagged as spammers by the cluebags over at
spamcop.net, who we have had a run-in or two with before. This time,
they go even above and beyond their previous levels of stupidity.

For the past year, I have been agressive on reporting spam and
maintaining a custom list of blocked domains/relays that is used on
attrition.org. For every piece of spam that came in, I would blackhole
them on our system, then report them to abuse@(their isp). I would
send all Nigerian Scam mail to the appropriate address at treasury.gov
(419.fcd () usss treas gov). For domains that didn't maintain
abuse/postmaster contacts, I would report them to rfc-ignorant.org and
further blacklist their entire domain from mailing attrition. WHat did
this behavior get me? Listed on spamcop *again*.

http://spamcop.net/w3m?action=checkblock&ip=66.80.146.7

Notice the two pieces of mail they show currently. Both of them are my
reports of spam to other ISPs. In each case, I mailed their abuse@
contact, included full headers, and prefaced the subject with "SPAM:"
so they could clearly identify the mail. Given that I am reporting the
mail TO THEM via their abuse contact, the headers have THEIR IP space,
it should be trivial to understand what is happening here. Instead,
globalvision.net and infosat.net apparently felt the need to send my
mail in and complain of spamming.

Here is the mail I sent to the abuse address at globalvision.net
(still in my sent-mail). In turn for me reporting globalvision spam,
they send my complaint to spamcop reporting *me* for spamming. And as
we all know, spamcop will play the part of the blind sheep and
dutifully blackhole us w/o question, even though they KNOW (from
previous contact) we are as anti-spam as you can get. Their claims of
not being able to change their system are complete lies, as the most
trivial system can account for whitelisting domains.

Of course, what is SpamCop's stance on this?

http://spamcop.net/fom-serve/cache/298.html

In short, "too bad", I have no recourse for their stupidity. I'm still
amazed that anyone would support these ass clowns in any way.

Brian Martin
Attrition.org

ps: if anyone from spamcop bothers to reply, do so from a different
domain. you have been blacklisted on attrition.org since Oct 1, 2000
for your past antics, lack of cooperation in resolving this same type
of issue, and for *spamming us* (ironic eh?).


Date: Tue, 8 Apr 2003 23:59:29 -0400 (EDT)
From: security curmudgeon <jericho () attrition org>
To:  <abuse () globalvision net>
Subject: SPAM:  Need money for new car, pay off bills?
                                  8730mKyr0-098Fsbb13-18 (fwd)
Message-ID: <Pine.LNX.4.33.0304082359120.30814-100000 () forced attrition org>
X-NoSpam: You do not have consent to spam me.
X-Attrition: Attrition is only good when forced. http://www.attrition.org
X-Copyright: This e-mail copyright 2003 by jericho () attrition org where applicable
X-Encryption: rot26
MIME-Version: 1.0
Content-Type: TEXT/HTML; CHARSET=US-ASCII
Content-ID: <Pine.LNX.4.33.0304082359122.30814 () forced attrition org>



---------- Forwarded message ----------
Return-Path: <marykirtlandwbcp () hotmail com>
Received: from hotmail.com ([216.105.151.186])
        by forced.attrition.org (8.11.6/3.8.9) with SMTP id h390x7K21385;
        Tue, 8 Apr 2003 20:59:08 -0400
Message-ID: <000711b8ee15$bde21246$57288083 () ghikfch msf>
From: <marykirtlandwbcp () hotmail com>
To: <comega () attrition org>
Cc: <errata () attrition org>, <jericho () attrition org>, <mareth () attrition org>
Subject: Need money for new car,
     pay off bills?
    8730mKyr0-098Fsbb13-18
Date: Wed, 09 Apr 2003 10:41:45 -1000
MIME-Version: 1.0
Content-Type: multipart/mixed;
        boundary="----=_NextPart_000_00E8_08C67C6A.D5558B10"
X-Priority: 1
X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2910.0)
Importance: Normal


[actual spam deleted to avoid your filters flagging it incorrectly]



-
ISN is currently hosted by Attrition.org

To unsubscribe email majordomo () attrition org with 'unsubscribe isn'
in the BODY of the mail.


Current thread: