On 2015-02-13 15:26, Franck Martin wrote:
On Feb 13, 2015, at 3:03 PM, Mike A <mi...@mikea.ath.cx
<mailto:mi...@mikea.ath.cx>> wrote:
On Fri, Feb 13, 2015 at 02:39:36PM -0800, Jay Hennigan wrote:
On 2/13/15 14:11, Geoff Mulligan wrote:
Thank you to everyone that provided ideas on how I should deal with
aol,
yahoo and such with my listserv.
I've modified my software to do some header munging and I'll see how
that works.
I'm still confused though on how I'm supposed to deal with SCOMP
messages from AOL.
Since I'm on and never have been more will ever be an AOL user I don't
know how these SCOMP messages are generated.
The SCOMP messages are part of your feedback loop from AOL. This is not
directly related to the DMARC brokenness that they and Y! introduced a
few months ago.
Whenever an AOL user clicks the "Report as spam" button on email, a copy
of the email is sent to the address that you configured for your
feedback loop, addressed from SCOMP@AOL.
The purpose of this is to give you an early warning of any spammers
inhabiting your IP space, so that you can take action.
However....
Either the AOL user interface is confusing and the "Delete" and "Report
as spam" buttons are easily confused, or the reading comprehension and
intelligence of AOL users as a group is miniscule, or both.
We see LOTS of reported spam from AOL users that is clearly
transactional and often rather personal in nature, clearly not spam.
I work for a state government; AOL users frequently flag as spam the
following from our various state agencies:
o drivers license expiration notices
o lottery wining number reports
o realtor^(TM) license expiration notices
o tax payment receipts
o pikepass account statements
o vendor application approval notices
o inspection reports
o phone lists
o notices of proposed rulemaking
o hunter education cards
and many other things which the recipient requested. Most of them,
especially
the notices and statements, are things that the recipient will have
wanted at
some time, and some are things that the recipient *definitely* will
want. We
see hundreds of these in a week, sometimes thousands.
I can only conclude that the "Delete" and "Report as spam" buttons
are close
together and tiny, or that they are easily confused, or that many AOL
users
are easily confused, or that many AOL users just see the "Report as spam"
button as a way to disappear the mail.
Ot that AOL users cannot make the difference between the emails you
send and the email you don't send?...
Also, are you sure they gave you their correct email address?... You
cannot imagine the real email I receive at my gmail address from
people trying to contact my homonyms...
It may also just be only a certain "type" of user still uses AOL at this
point.
I have one particular user on my server who generates more SCOMP
messages than every other user combined. One of these AOL users
regularly emails my client requests for quotes, then reports the
requested quote as spam. The AOL user is real customer, and regularly
accepts the quote and does business with my user, so there's nothing
nefarious or suspicious here, no one is trying to fly under the radar, etc.
For whatever reason my client seems to have a bunch of AOL using
friends, they regularly mark her personal mail as spam, often in obvious
mailbox cleanups (when I get dozens of SCOMPs at once for mail that is
weeks/months old) -- Haven't seen one of these in a few months though,
so maybe AOL finally stopped sending them for old junk?
Upon regular review of AOL's SCOMPs, nothing is really broken, except
for some combination of the AOL interface and userbase.
On the other hand, when I've had actual compromised accounts that start
spamming, AOL's SCOMPs have always been the first external report, so I
actually find them quite useful. Only once did they notice a problem
before I did (or my systems) found and plugged the hole, but still, it's
nice to have the feedback. Other feedback loops seem far less useful to
me, most sent more messages in the verification/signup phase than have
sent actual ARF reports. Maybe I just don't send enough spam to get
value out of the other FBLs out there?
--
Dave Warren
http://www.hireahit.com/
http://ca.linkedin.com/in/davejwarren
_______________________________________________
mailop mailing list
mailop@mailop.org
http://chilli.nosignal.org/mailman/listinfo/mailop
