On 08/22/03 10:00 AM, Simon Byrnand sat at the `puter and typed:
> > I've gotten a couple interesting spams lately.  Well, interesting
> > in the sense that I am perplexed by them.
> >
> > Here's a couple attached.  They are from two different domains,
> > watchmeandlearn.com and ofcourseitwill.com.  They have an opt out
> > page, but either it's a mockup, or they just use it to verify
> > addresses are valid.
> >
> > I've tried looking them up to report them to their service
> > provider for spamming, but I'm not sure that will work in this
> > case.  The IP owner is in Maylasia.  The DNS provider is 8xp.net,
> > which is based in India.
> >
> > Of course 8xp.net does have an administrative contact.  Maybe I
> > should just report them there.  If it doesn't stop, I can just set
> > up a forward in procmail to bounce all the mail from those domains
> > to him.
> 
> Bad idea, if the envelope sender address is being forged...you're
> more likely to hurt innocents... In general automatically forwarding
> something you think is spam to somewhere else or trying to bounce it
> back is a bad idea because theres usually collateral damage.

Yeah, I assume the mail headers are being forged, but I'm not going
after the sender, just the one paying for the spam.  Worked last time
- the hosting provider just shut the domain advertising through spam
off on their dns servers.  No more website to advertise through spam
means no more spam.

You can't chase all the little pissant spam senders, so maybe you can
hit some of the domains that pay for a good portion of the spam you
get.  If some of the domains admins that pay for spam advertising find
it more difficult to hold onto their service, maybe they will
eventually quit paying for spam advertising.

I actually started forwarding all the spam advertising a select group
of these domains back to webmaster@<domain>.  I doubt it will help,
but it will fill their mailbox up with their own garbage - unless they
use SA ;-(

> > Any ideas on the best way to get this guy to quit spamming me?
> 
> Umm,
> 
> You're kidding right ? A way to stop spammers spamming ? Hmm, now
> that could come in handy...pity its not practical ;)

I know.  I know very well, much to my chagrin.  I'm constantly
reminded of a 'Born Loser' comic where the main character sits looking
sadly at his computer and laments 'Somewhere, someone is sending me
spam email'.

> Seriously though, the ones you forwarded got 12.50 points in
> SpamAssassin 2.55 for me, so they're easily caught by SpamAssassin,
> so wheres the problem ?
> 
> I don't see whats special about those particular spams over and
> above the millions of others that are circulating around....


They got caught in mine too.  I always go after the ones that SA
doesn't catch, but I've been noticing a rather large number of spams
from a small group of domains for the same penis pills, and the
unsubscribe pages all redirect to the same domain.  I love SA, but I'm
starting to get sick of it.

<soapbox>
The biggest problem with spam is not that it ends up in an inbox
(except when they send filth to minors), but the wasted resources of
each ISP along the way - the cost for which gets passed on to the
users of the ISP.  And it's not the high cost of service, but the fact
that it's a dishonest, filthy way to make money - not much better than
a petty thief picking pennies out of everyones pocket.

I know full well that I am pretty much just ranting now, but not
reporting these when there's a chance and the time to do so is
essentially approval through indifference.  SA catches things fine,
but these people are working just as hard to write the perfect message
that will slip through SA as well as all the other commonly used spam
filters.
</soapbox>

Lou
-- 
Louis LeBlanc               [EMAIL PROTECTED]
Fully Funded Hobbyist, KeySlapper Extrordinaire :)
http://www.keyslapper.org                     ԿԬ

Death, when unnecessary, is a tragic thing.
    -- Flint, "Requiem for Methuselah", stardate 5843.7


-------------------------------------------------------
This SF.net email is sponsored by: VM Ware
With VMware you can run multiple operating systems on a single machine.
WITHOUT REBOOTING! Mix Linux / Windows / Novell virtual machines
at the same time. Free trial click here:http://www.vmware.com/wl/offer/358/0
_______________________________________________
Spamassassin-talk mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

Reply via email to