nanog mailing list archives

Re: email spam


From: Crist Clark <cjc+nanog () pumpky net>
Date: Tue, 23 Aug 2022 23:04:24 -0700

From the timeline here,

https://wjla.com/news/local/timeline-darren-thornton-sex-crime-case-fairfax-county-public-schools-fcps-virginia-what-we-know-arrest-charges-conviction-chesterfield-county-police-hiring-firing-corrections

The outbound mail DID bounce. And the bounce message is what ended up in
the sender's spam folder which the sender never checked... until later when
they started the investigation. No mail was dropped on the floor by
anti-spam.

There is still a place for things to be formally delivered on a piece of
paper. Sure, send the email for quick notification, but also back it up
with a physical letter sent via certified mail.

And not that I feel sorry for the guy who was convicted, more than once, of
soliciting a minor, but it doesn't necessarily mean he's a pedophile.


On Tue, Aug 23, 2022 at 8:09 PM Jeremy Chequer <jeremy () resolvergroup com au>
wrote:

Or at the bare minimum, require a response. Just assuming the email went
through and then blaming that for a pedo keeping their job for another year
and a half is just bad on the officials side. With scams increasing,
measures need to be in place. Unfortunately, several agencies seem to think
that you should just trust anything that comes from their address but
that’s how we end up with email spoofing. The agencies need to ensure they
have the right setup in place to avoid ending up in spam and also ensure
they are following up in some form, especially when its to do with child
safety.



- Jeremy



*From:* NANOG <nanog-bounces+jeremy=resolvergroup.com.au () nanog org> *On
Behalf Of *Suresh Ramasubramanian
*Sent:* Wednesday, 24 August 2022 12:52 PM
*To:* Eric Tykwinski <eric-list () truenet com>
*Cc:* nanog () nanog org
*Subject:* Re: email spam



*[External Sender] Be cautious of any links or attachments within this
email as it has come from an External Sender.*

100%. Also - there’s no way to offer a delivery sla for email.  If you
have something business critical, let alone anything that affects child
safety, pick up a phone and call, or send an officer over to the school.



--srs
------------------------------

*From:* Eric Tykwinski <eric-list () truenet com>
*Sent:* Wednesday, August 24, 2022 8:14:16 AM
*To:* Suresh Ramasubramanian <ops.lists () gmail com>
*Cc:* nanog () nanog org <nanog () nanog org>
*Subject:* Re: email spam



Sorry about the bad examples, but I remember contacting both about issues
with SPF multiple times.  They both have seemed have to fixed things at
least searching my logs for the last week.  Most of my customers have had
to whitelist them though for past issues. It’s also ezpassnj.com for the
NJ collection.  Point still stands, assume incompetence over malice.



Sincerely,



Eric Tykwinski

TrueNet, Inc.

P: 610-429-8300



On Aug 23, 2022, at 10:20 PM, Eric Tykwinski <eric-list () truenet com>
wrote:



Bill,



Not only that, did they even follow their own rules, I’ve been fighting
with septa.org, the Pennsylvania train authority, and easypassnj.com, the
New Jersey transit toll collectors about invalid SPF records for years, and
they literally don’t give a shit.  If they say to put it in spam, well than
that is their own fault.



Sincerely,



Eric Tykwinski

TrueNet, Inc.

P: 610-429-8300



On Aug 23, 2022, at 10:00 PM, Suresh Ramasubramanian <ops.lists () gmail com>
wrote:



Without saying why the mail was blocked (dumb content filter looking for
porn? a spamhaus listing because the police server was hacked? something
else?) that’s not going to help too much.



I’ve been spam filtering stuff at large providers since the late 90s and
it never gets any easier to block 100% spam or let 100% legit mail through.



—srs



--srs
------------------------------

*From:* NANOG <nanog-bounces+ops.lists=gmail.com () nanog org> on behalf of
William Herrin <bill () herrin us>
*Sent:* Wednesday, August 24, 2022 7:03:52 AM
*To:* nanog () nanog org <nanog () nanog org>
*Subject:* email spam



Hello,

To folks at places like Google and Godaddy which have gotten, shall we
say, overzealous about preventing spam from entering their systems,
consider the risk:


https://www.washingtonpost.com/education/2022/08/23/fairfax-county-counselor-solicitation-minor/

"Chesterfield County police said emails notifying Fairfax County
Public Schools that an employee was arrested and charged with
soliciting prostitution from a minor were not delivered to the school
system."

Long story short, the pedo kept his school job another year and a half.

There was once a time when both the outbound emails and the bounce
messages when they failed... worked. It was a spammy place but the
important emails got through.

Regards,
Bill Herrin






Current thread: