[SpamCop.net - protecting the internet through technology]

[SC-Help] Re: methods used...

Mike Easter MikeE at ster.invalid
Fri Jun 10 20:13:44 EDT 2005


Jeff G. wrote:

> Its simple

>>>               Report the site to the host

Now that I've painted that other gloomy story;  I'll tell another story.

If you turn yourself into a sufficiently effective manual notifier;  in
which your notifies are succinct and to the point and accurate and valid
about what you are notifying about -- and include in those notifies
upstreams and parents for things like listed unresponsives and why, and
for no abuse.net reg'd abuse contacts, and include a fair number of
contacts at each of the providers, on the chance that there might be a
language barrier, say about 4 for each -- so that the blackhats are
seeing whoall you are notifying and why they are being notified -- and
you do this all unmunged and from the spammed address because your
attitude is that you don't have anything against listwashing, because
your principle function in life is to protect your inbox -- you may see
some results.

What may happen is that your spammed address may get branded as an
'anti-' -- an antispam 'troublemaker' who notifies pertinent addresses
which result in some feedback even to the blackhat providers that those
parents or upstreams are concerned about these little troubles and they
are tired of hearing about it, and is it really true that there isn't an
abuse address and why don't they do something about that and is it
really true that they are spews and spamhaus listed blah blah.  The
blackhat sometimes doesn't like for their providers' providers to be
getting notified.  Of course when upstreams are getting involved there
may be several, each of which has a few legitimate contact addresses.

The consequence of becoming 'anti-' listed can result in the address
getting itself listwashed and getting less spam.

Some spam reporters don't believe in 'inviting' listwashing -- other
reporters are afraid that unmungeing will result in retaliation.  Some
reporters write long or 'nasty' notifies.  I believe that a notify
should only contain the briefest of information, just enough so that
there won't be any confusion about why the entity was notified -- not a
lecture on why spam is bad or how many times someone has been notified
or anything like that.

It only takes one word to say 'unresponsive' well, maybe 3 if you say
'unresponsive to notifies' and a couple or three more to say 'spews &
spamhaus listed'.  Then, a few more words about 'no abuse.net reg'd
contact'.  You can get that stuff on a line or so and have a little
template that you just fill in.  There are some examples of good
notifies in the newsgroup nana-sightings.

-- 
Mike Easter
kibitzer, not SC admin




More information about the SpamCop-Help mailing list