[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: Bounces I am Recieving - STILL

David Abigt reply at dea42.net
Mon Mar 8 23:37:45 EST 2004


I keep hearing that they stop in a week or so but I've been dealing with
this since the 3rd of Jan. at bounce back rates of up to 10 per hour. I
finally wrote a program to pull and clean up the spam or headers returned
and forward them on to SpamCop. I even use rhino to decode the Javascript
some of them use to hide their links since SpamCop just aborts if it sees
Javascript. It even filters out virus attachments and spam missing
headers. Out of the thousands of emails so far I've noticed most have
links to just a few IPs. See www.dea42.net/scam.html for the list.
Unfortunately there are a lot of idiots out there. Many of these spammers
are still sending out spam for sites that have been already shutdown. I
keep seeing all the posts on here talking about admins should know better
than bounce back but I'm seeing them from all over including most of the
major IPs and companies like Dell. BTW Dell not only returns the spam but
drops the received lines so you can't trace it. Try to reply and it
bounces again. This happened to 4 out of 5 of the admins I tried to get
to either send the headers or throw the email away. Personally I'm glad
most either return the full headers or throw it away.

So when are we going back to requiring a login to send mail? That's what
I'd like to know. Maybe we need to start a white list of those that do or
set a date to start blacklisting those who don't. Until spammers can't
hide so easily all we can do is fight automation with automation to
shutdown cooped systems and the REALLY stupid ones that send from a
static IP. When I get some time to clean up my program and put it out for
non programmers to use.

Dave

Miss Betsy wrote:

> "Matt Carlson" <lordsaryon at hotmail.com> wrote in message
> news:c2io9r$9a6$1 at news.spamcop.net...
> > I have recently been made aware that a spammer has been using my
> email
> > address as the forged from header.  However, the REPLY to has MAYBE
> a valid
> > email address, but I am unsure.
> >
> > I have no clue what to do about this.  I dont want my email address
> to be
> > added to the blacklists around the internet, and have no clue what
> to do.
> >
> > If anyone has any suggestions as to what to do, besides change my
> email
> > account, I would really appreciate your help.
> >
> > Matt Carlson
> > lordsaryon at hotmail.com
>
> No one will add you to blacklists because those who run blacklists
> know that the spammers forge return paths and From addresses.
>
> Usually the bounces stop within a week.  You cannot report them via
> spamcop.
>
> However, if you want to report them to the admins who are bouncing
> them to you, you can do so on your own.  Many people do.  Admins
> should not be accepting email and then sending emails to forged
> addresses.
>
> Miss Betsy, an almost new internet user



More information about the SpamCop-List mailing list