[SpamCop-List] Re: Why will not SC report http://uk.geocities.com/ ?

[Ant]

"JG" wrote:

> Don't feel like the lone ranger here, but Mike E. has often replied to
> my whines with the simple fact that SC is interested in reporting the
> /source/ only - not the spamverts.

I believe the main purpose is to detect spam source IPs to add to the
SCBL, so that people who use it can effectively tag or block the spew.
The reporting part is a courtesy to the ISP or whoever controls the IP
address. A different blocklist uses the URLs found by SC in spam.

> I cannot fathom why the non-resolution would be intentional.

If it's true that spamvertized URLs are considered of lesser
importance, then perhaps it's a resource saving measure. It could be
that the software recognises the URL has already been reported a
number of times, and limits any further effort to a certain percentage
of new sightings. Or it could be a bug; I don't know.

I have noticed for certain types of spam which are obviously from the
same bunch of crooks, contain the same or similar URLs, and of which I
get many items, that I know beforehand that the URL will be seen but
ignored. Indeed, I'm surprised when occasionally one is resolved. The
recent uk.geocities spam is such an example.

> I don't see the logic - nowadays
> most of the sources have been identified ad nausem (doubt thats in spell
> check).  I'd like to add my complaint to the thread FWIW and suggest
> that SC move on to exploring something a little more proactive.
> I mean, how many more times do we need to note that kornet, chinietong,
> cnnoc, rr, everything .br, etc are sources?

Yes, and some mail administrators just firewall huge swathes of known
bad IP address space. However, I do get a spam now and again from a
normally clean network, so it is worth notifying them because they
will take action. With regard to site hosting, if Yahoo geocities get
enough reports then perhaps they'll do something to make it hard for
spammers to use their web space effectively. If net-nanny software
starts blocking access to geocities because of their reputation for
hosting offensive spam sites, then Yahoo's income from page ads will
suffer.

> Since everyone out there /knows/ this, why isn't /anything/ happening?
> Actually, I know that answer to that last question but wanted to vent
> anyway...

Things are happening, but slowly. More consumer ISPs are blocking port
25, so users are forced to send mail through the ISP's server where
abuse can be more easily monitored and controlled. Steve Linford who
runs the Spamhaus blocklist (SBL) is reportedly working with Chinese
ISPs to help them clean up their act. Widely blocked developing
countries may notice their ability to trade overseas is affected if
they are unable to easily communicate by email.