From ric.gates at bigsleep.org Sat Jan 1 02:53:59 2005 From: ric.gates at bigsleep.org (Blammo) Date: Fri Dec 31 21:55:03 2004 Subject: [SpamCop-List] Re: dispute listing of ip 17.254.6.27 References: <8G4c$yztKCRS@eisner.encompasserve.org> Message-ID: On 31 Dec 2004 Ellen entered spamcop and left news:cr52e8$fsr$1@news.spamcop.net: > Did I mention that I also pay for a supernews account? Oh > and I don't send outbound mail thru them either. But the wires stay up > and functional about 364+ days of the year -- they do know how to do > wire just not how to do the other stuff :-) > That's funny you mention that because that's one reason I stick with my ISP. I get a Supernews feed that's worth maybe $10 / mo. -- | Ric | From ric.gates at bigsleep.org Sat Jan 1 03:09:37 2005 From: ric.gates at bigsleep.org (Blammo) Date: Fri Dec 31 22:10:02 2004 Subject: [SpamCop-List] Re: Does it really help? References: Message-ID: On 31 Dec 2004 Jeff entered spamcop and left news:cr431o$rav$1@news.spamcop.net: > People do this all the time to me in e-mails, they just > reply and not delete the text off the message they type to me. So I'm > NOT the only one who does this! Tell someone else besides just me. > Plenty of others on AOL and other places online who need to be chewed > out, not just me! I sometimes ask people (nicely) to change their bad habits, like to PLEASE remove all the CC addresses in forwarded messages, or put my address in a BCC so that it's not visiable. Sometimes it seems like a never ending almost futile task. I do have my newsreader set to display quoted text in different colors, and sigs in light gray, so it is much easier (and faster) to read messages when thay are formatted as requested. -- | Ric | From helen at iinet.net.au Sat Jan 1 11:12:56 2005 From: helen at iinet.net.au (Helen) Date: Fri Dec 31 22:15:02 2004 Subject: [SpamCop-List] Re: Spamcop detecting wrong thing? References: Message-ID: Thanks for your reply. I still cant see the boxes hmm. I'm using Mozilla Firefox - are you on Firefox as well? Sorry for not saying "Firefox" in the original post, I didnt think :( Helen "LioNiNoiL_a t_Y a h 0 0_d 0 t_c 0 m" wrote in message news:cr1q4d$ff4$1@news.spamcop.net... > Helen wrote: > >> it says "only tick the boxes you want to report" yet >> I cant see any boxes. Im guessing thats because im >> using Mozilla for web? > > Nope, I use Mozilla and I see the boxes just fine [and leave them ticked > most of the time]. > > -- > "[Spammers] are the mutant spawn of a bizarre reproductive act > involving a telemarketer, Larry Flynt, a tapeworm, and > an executive of the Third Class Mail industry." -- Dave Barry > From helen at iinet.net.au Sat Jan 1 11:14:00 2005 From: helen at iinet.net.au (Helen) Date: Fri Dec 31 22:15:03 2004 Subject: [SpamCop-List] Re: Spamcop detecting wrong thing? References: Message-ID: I did the Mailhosts and I think that's fixed it as I haven't had a misparse since! Thanks for your help Mike and also to Ellen who i've been emailing off list :) Happy New Year everyone. Helen "Mike Easter" wrote in message news:cqvs2f$bf4$1@news.spamcop.net... > Helen wrote: >> Received: from unknown (HELO per-qv1-irony1.iinet.net.au) >> (203.59.2.58) by mail.iinet.net.au with SMTP; 29 Dec 2004 22:04:54 >> -0000 > >> Spamcop keeps trying to report that as a source of the spam! > > Abbreviated Received lines *comment > from unknown (HELO per-qv1-irony1.iinet.net.au) (203.59.2.58) by > mail.iinet.net.au *serves you > from 201008030191.user.veloxzone.com.br (201.8.30.191) by > per-qv1-irony1.iinet.net.au *sourceline > from (abdal.com [66.33.119.168]) by 201008030191.user.veloxzone.com.br > *bogusline > > SC breaks the chain prematurely and calls 203 above because it can't get > from the top line's 'from' field to the 2nd line's 'by' field. > > Unless SC is using a mailhosts configuration, it must be able to > 'correlate' 203.59.2.58 with per-qv1-irony1.iinet.net.au -- which it > can't do because that IP is not the MX for iinet and it isn't 'close > enough' for any of the 3 MXes which are the MX. > > filter.iinet.net.au A (Address) 203.0.178.195 > mx1.iinet.net.au A (Address) 203.59.24.23 > mx2.iinet.net.au A (Address) 203.59.24.15 > >> Is it something im doing wrong here or does spamcop need to know that >> iiNet are using Ironport Systems and Sophos and also Ironport >> Systems and Symantec Brightmail. >> >> Otherwise, I cant always report my spam :( > > One way to fix it is to adopt and configure the mailhosts system. It is > designed to solve those kinds of problems. It makes SC 'smarter' about > interpreting the mailhost/s for the individual who configured for them > > -- > Mike Easter > kibitzer, not SC admin > From ric.gates at bigsleep.org Sat Jan 1 03:31:39 2005 From: ric.gates at bigsleep.org (Blammo) Date: Fri Dec 31 22:35:03 2004 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness References: Message-ID: On 31 Dec 2004 Pop entered spamcop and left news:cr4o05$a70$1@news.spamcop.net: > It flashed up a window and a few seconds later showed a > directory of many, many .tar, .tgz, .tga, etc etc etc compressed > files. I knew those weren't on MY machine, so I checked the > modem icon and sure enough, it had downloaded them! I put the > firewall on full block immediately and had one directory's worth > of input, all those compressed files I noted above. There were > four more directories that didn't get a chance to download. > It only downloaded the directory contents, not the files themselves. That is if it really is an FTP connection, like ftp://ftp.cdut.edu.cn, it won't download the files listed there until you click on a file. It probably would be safer to use Ws_Ftp to open FTP URLs rather than IE since IE can be easily fooled. Also Ws_Ftp will show you the connection information. How that got into your Network Places I haven't a clue. I was aware that you can add a site through "Windows File Sharing" or the "FTP Sites" in Office. But otherwise I thought you needed another program to do this (perhaps FTP Explorer or maybe even Samba). You might want to search for your "lmhosts" file and (open in Notepad or Text Viewer) and see if that entry is in there. -- | Ric | From ric.gates at bigsleep.org Sat Jan 1 03:37:27 2005 From: ric.gates at bigsleep.org (Blammo) Date: Fri Dec 31 22:40:03 2004 Subject: [SpamCop-List] Re: Spammers as procrastinators :-) References: Message-ID: On 31 Dec 2004 Larry Kilgallen entered spamcop and left news:i1+X$hgyNJta@eisner.encompasserve.org: > I actually dislike postings to show how clueless spammers are, > so I don't know if it is the holiday spirit or what, but here I > am posting one I received this morning: > > ... you probably have not made a decision on which event to attend ... At least that part is true, for me. 4:23 left to decide. -- | Ric | From ric.gates at bigsleep.org Sat Jan 1 03:59:47 2005 From: ric.gates at bigsleep.org (Blammo) Date: Fri Dec 31 23:00:03 2004 Subject: [SpamCop-List] Re: Spammers as procrastinators :-) References: Message-ID: On 31 Dec 2004 Blammo entered spamcop and left news:Xns95D0C7AA17618blammo@216.154.195.61: > On 31 Dec 2004 Larry Kilgallen entered spamcop and left > news:i1+X$hgyNJta@eisner.encompasserve.org: > >> I actually dislike postings to show how clueless spammers are, >> so I don't know if it is the holiday spirit or what, but here I >> am posting one I received this morning: >> >> ... you probably have not made a decision on which event to attend ... > > At least that part is true, for me. > 4:23 left to decide. > I can still make this one.... Subject: Laurence the party starts at 10 Wonder if I look anything like "Laurence" ;-) -- | Ric | From ric.gates at bigsleep.org Sat Jan 1 04:35:13 2005 From: ric.gates at bigsleep.org (Blammo) Date: Fri Dec 31 23:40:03 2004 Subject: [SpamCop-List] Re: Spammers as procrastinators :-) References: Message-ID: On 31 Dec 2004 Blammo entered spamcop and left news:Xns95D0CB732E0Cblammo@216.154.195.61: > On 31 Dec 2004 Blammo entered spamcop and left > news:Xns95D0C7AA17618blammo@216.154.195.61: > >> On 31 Dec 2004 Larry Kilgallen entered spamcop and left >> news:i1+X$hgyNJta@eisner.encompasserve.org: >> >>> I actually dislike postings to show how clueless spammers are, >>> so I don't know if it is the holiday spirit or what, but here I >>> am posting one I received this morning: >>> >>> ... you probably have not made a decision on which event to attend ... >> >> At least that part is true, for me. >> 4:23 left to decide. >> > > I can still make this one.... > Subject: Laurence the party starts at 10 > Before I head out I'll... Subject: Loose weight fast before the holidays, get Phentermine -- | Ric | From nobody at devnull.spamcop.net Sat Jan 1 00:20:01 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Sat Jan 1 01:20:03 2005 Subject: [SpamCop-List] Re: Spamcop detecting wrong thing? References: Message-ID: "Helen" wrote in message news:cr54hs$h8u$1@news.spamcop.net... > > I still cant see the boxes hmm. > > I'm using Mozilla Firefox - are you on Firefox as well? What are the odds that you have signed up as a "mole" reporter? From ivanleo at gmail.com Sat Jan 1 12:32:17 2005 From: ivanleo at gmail.com (Ivan Leo Puoti) Date: Sat Jan 1 06:35:21 2005 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness In-Reply-To: References: Message-ID: FYI that site is hosting what appears to be pirated software, so I've reported it to the copyright owner. Ivan. From TJLWBECGSGWU at spammotel.com Sat Jan 1 14:55:42 2005 From: TJLWBECGSGWU at spammotel.com (Mathew Hendry) Date: Sat Jan 1 10:00:04 2005 Subject: [SpamCop-List] Re: dispute listing of ip 17.254.6.27 References: <8G4c$yztKCRS@eisner.encompasserve.org> Message-ID: On Sat, 1 Jan 2005 02:53:59 +0000 (UTC), Blammo wrote: >On 31 Dec 2004 Ellen entered spamcop and left >news:cr52e8$fsr$1@news.spamcop.net: > >> Did I mention that I also pay for a supernews account? Oh >> and I don't send outbound mail thru them either. But the wires stay up >> and functional about 364+ days of the year -- they do know how to do >> wire just not how to do the other stuff :-) > >That's funny you mention that because that's one reason I stick with my >ISP. I get a Supernews feed that's worth maybe $10 / mo. Sounds very much like Blueyonder over here. Near-faultless connectivity - a localised DNS failure a couple of years ago is the only serious fault I can remember, and that lasted only a few hours - but they seem unable to run reliable news and mail services. Their terms and conditions treat these parts of the service as "free extras" so you have no leverage, short of cancelling your account, even if they're down 99% of the time. Dedicated services like SuperNews (I use GigaNews) obviously couldn't get away with that, though I have heard horror stories about some of the cheaper "premium" news providers... -- Mat. From nobody at spamcop.net Sat Jan 1 11:11:30 2005 From: nobody at spamcop.net (Pop) Date: Sat Jan 1 11:15:03 2005 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness References: Message-ID: >> How that got into your Network Places I haven't a clue. I was >> aware >> that you can add a site through "Windows File Sharing" or the >> "FTP >> Sites" in Office. But otherwise I thought you needed another >> program >> to do this (perhaps FTP Explorer or maybe even Samba). You >> might >> want to search for your "lmhosts" file and (open in Notepad or >> Text >> Viewer) and see if that entry is in there. >> >> -- >>> Ric Nope, not there nor anywhere else, in fact, other than that one entry. It's an interesting site, actually, but ... the curiousity will live on, I guess. Actually, I learned something; you can add sites like that to the Network Places - didn't know you could do that. Lots of good English lit pieces there though; some of it pretty good stuff. It's apparently a benign site; no cookies, no probes, nothing at all but information. Well, that I could find. I think I'll crawl the site later today and see what pops up, just for grins. Oh well, on to better things. Pop From dogs32 at hotmail.com Sat Jan 1 12:33:07 2005 From: dogs32 at hotmail.com (Jeff) Date: Sat Jan 1 12:35:02 2005 Subject: [SpamCop-List] Re: Does it really help? References: Message-ID: Yeah well you didn't have to FLAME me either. That isn't proper etiquette either. No other Newsgroup makes a big stink about this crap and neither should this one. Its just goody-goody rules that came out of nowhere. Its pathetically stupid and is only more of a hassle. Delete text then reply, delete more text and reply to that question, a big waste of time for me! From David1 at suescornerweb.com Sat Jan 1 12:46:40 2005 From: David1 at suescornerweb.com (David 1) Date: Sat Jan 1 12:50:03 2005 Subject: [SpamCop-List] Re: Does it really help? In-Reply-To: References: Message-ID: Jeff wrote: > Yeah well you didn't have to FLAME me either. That isn't proper etiquette > either. No other Newsgroup makes a big stink about this crap and neither > should this one. > > Its just goody-goody rules that came out of nowhere. Its pathetically > stupid and is only more of a hassle. Delete text then reply, delete more > text and reply to that question, a big waste of time for me! > > I agree with you about the snip rule but most of the others I have been told about I try to follow & after looking things over it does make since on the flow of things Again this is just a newbees opinion They have to read a lot of these & it just makes it easier in general. I'm waiting on Cat to make me a grammar check & send it to me as a virus so that I can't ever turn it off or get rid of it ( just a joke Cat) Ok I'm done for now -- David 1 bad addy spamtrap@suescornerweb.com From MikeE at ster.invalid Sat Jan 1 09:59:25 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sat Jan 1 13:00:05 2005 Subject: [SpamCop-List] Re: Does it really help? References: Message-ID: Jeff wrote: > Yeah well you didn't have to FLAME me either. That isn't proper > etiquette either. No other Newsgroup makes a big stink about this > crap and neither should this one. This is a very gentle and easy going group. There are plenty of flaming groups around, however; you'll need to stay out of those. If you hang out in groups where the posting style ignores the necessity to trim and contextualize, then it doesn't matter, except that it doesn't work very well. There are only a few of those. Even rarer is the group in which topposting or TOFU is preferred, in the corporate email style. If you are participating in groups in which the posting style needs to be trimmed and contextualized then it does matter, because improper posting interferes with the function of the group's conversation for everyone. -- Mike Easter kibitzer, not SC admin From rwmarbleAT at yahooDOT.com Sat Jan 1 17:21:24 2005 From: rwmarbleAT at yahooDOT.com (I'm_a_victim) Date: Sat Jan 1 17:25:06 2005 Subject: [SpamCop-List] How to get trace on virus spam? Message-ID: I am receiving 1 or 2 copies every day from the same ISP. Since this is virus mail how can I get a good trace on the sender so I can complain to the right people? I xxed out what I believe is my personal info. rest is as sent as far as the header. +++++ xxxxx@yahoo.com via xx.xxx.xx.xxx; Sat, 01 Jan 2005 10:55:14 -0800 X-YahooFilteredBulk: xxx .xxx.x..x..x Authentication-Results: mta108.mail.re2.yahoo.com from=sandiego.mine.nu; domainkeys=neutral (no sig) X-Originating-IP: [62.167.86.58] Return-Path: Received: from 62.167.86.58 (HELO xejtb.nu) (62.167.86.58) by mta108.mail.re2.yahoo.com with SMTP; Sat, 01 Jan 2005 10:55:12 -0800 From: webmaster@sandiego.mine.nu Add to Address Book To: mailer@yahoo.com Date: Sat, 01 Jan 2005 18:35:43 GMT Subject: Mail delivery_failed Importance: Normal X-Priority: 3 (Normal) X-MSMail-Priority: Normal Message-ID: <7fb2acba6b.9cdb0@sandiego.mine.nu> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="======5cd6fc.ae4c8dedac0" Content-Transfer-Encoding: 7bit This is a multi-part message in MIME format. Content-Length: 58321 begin 666 abook_add_1.gif M1TE&.#EA$ `0`.9:`-/3TS:--(51R____P98`WX_P)G,S/__F9R.\=;[]LCZ M^>;\\LR9_\SZ^'@OMMW\],?Z^7OP@!W()(KVCPAT!#\\V\9J-O[]O\\<[[^,R"YV7F:YF&[,;Z^\@%I:`80!@H>(AP$3,8:)B(5 1!04!(^"BQ$@12]+E@6@ M!8H13U0N*Q8$/0.L`Z*#A#P2!+0#)0DA#0H"@@(!$JE,#%)63EDLNP!:O@&T M'PM"*#(WN@+*`@<&VB(,##1#'E@0ULO9VC8^#T%'5291Y-@+"S@[#QL<+0TG M5QW7!S4CD" 8D&#*0 A&?OC+H&(@AAP#%<"H0,)?@@10!LQH,C!%D@HZKH%R 6X&" @ (E-2BY<$&9%@`P8\J4&0@`.P`` ` end begin 666 online_u=mailer&m=g&t=0.dat M1TE&.#EA# `,`)'_`/___[^_OW]_`,# P"'Y! $```,`+ `````,``P`0 (E GG"'S7.E# 25C:@AD0)X#KO^G@<:RI,`0`[ ` end begin 666 clip.gif M1TE&.#=A"P`0`)$``/____GUQ@```````"P`````"P`0```"(I2/%LNL_EX0 <;M)UI]6T;P^"W#=V8EARGJ9BU89)4A,G20$`.P`` ` end From rwmarbleAT at yahooDOT.com Sat Jan 1 17:28:38 2005 From: rwmarbleAT at yahooDOT.com (I'm_a_victim) Date: Sat Jan 1 17:30:02 2005 Subject: [SpamCop-List] Blocking address on YAHOO a waste of time Message-ID: A few weeks ago I started spending my time attempting to trace and then block the address of spammers. I currently have thousands of addresses blocked but lately I see that some spam I get is from a blocked address. It appears that YAHOO has a security hole of it's "blocking' is in fact false advertising. I have been reporting this problem on a daily basis to Yahoo but so far they have not been able to successfully block mail from Germany. From Merlyn at Spamcop.net Sat Jan 1 17:32:45 2005 From: Merlyn at Spamcop.net (Merlyn) Date: Sat Jan 1 17:35:02 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: "I'm_a_victim" wrote in message news:cr786m$ltt$1@news.spamcop.net... >A few weeks ago I started spending my time attempting to trace and then >block the address of spammers. > I currently have thousands of addresses blocked but lately I see that some > spam I get is from a blocked address. > > It appears that YAHOO has a security hole of it's "blocking' is in fact > false advertising. > > I have been reporting this problem on a daily basis to Yahoo but so far > they have not been able to successfully block mail from Germany. Blocking by addresses does not work. Most email addresses in spam are fake. Blocking by IP is the only way. -- Regards, Merlyn A Spamcop advocate No emails this account is for newsgroups only People demand freedom of speech to make up for the freedom of thought which they avoided From rwmarbleAT at yahooDOT.com Sat Jan 1 17:39:39 2005 From: rwmarbleAT at yahooDOT.com (I'm_a_victim) Date: Sat Jan 1 17:40:02 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: Thanks for reply, What I am entering as the address to block is the URL identified in the header. For example in the following spam +++ Thu, 23 Dec 2004 13:36:19 -0800 X-YahooFilteredBulk: 217.235.108.78 Authentication-Results: mta139.mail.sc5.yahoo.com from=zoomorphix.com.au; domainkeys=neutral (no sig) X-Originating-IP: [217.235.108.78] Return-Path: Received: from 217.235.108.78 (HELO cbjlm.au) (217.235.108.78) by mta139.mail.sc5.yahoo.com with SMTP; Thu, 23 Dec 2004 13:36:11 -0800 From: new_account@zoomorphix.com.au Add to Address Book Date: Thu, 23 Dec 2004 18:27:16 UTC Subject: FwD: Registration confirmation Importance: Normal X-Priority: 3 (Normal) X-MSMail-Priority: Normal Message-ID: MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="==36da81.e2bedb9aa1ad8a4e9ce7" Content-Transfer-Encoding: 7bit This is a multi-part message in MIME format. Content-Length: 58012 +++ I entered 217.235.108.78 as the address to block. ======================== "Merlyn" wrote in message news:cr78ed$m7i$1@news.spamcop.net... > "I'm_a_victim" wrote in message > news:cr786m$ltt$1@news.spamcop.net... >>A few weeks ago I started spending my time attempting to trace and then >>block the address of spammers. >> I currently have thousands of addresses blocked but lately I see that >> some >> spam I get is from a blocked address. >> >> It appears that YAHOO has a security hole of it's "blocking' is in fact >> false advertising. >> >> I have been reporting this problem on a daily basis to Yahoo but so far >> they have not been able to successfully block mail from Germany. > > > Blocking by addresses does not work. Most email addresses in spam are > fake. > > Blocking by IP is the only way. > > -- > > Regards, > Merlyn > > A Spamcop advocate > No emails this account is for newsgroups only > People demand freedom of speech to make up for the freedom of thought > which > they avoided > > begin 666 abook_add_1.gif M1TE&.#EA$ `0`.9:`-/3TS:--(51R____P98`WX_P)G,S/__F9R.\=;[]LCZ M^>;\\LR9_\SZ^'@OMMW\],?Z^7OP@!W()(KVCPAT!#\\V\9J-O[]O\\<[[^,R"YV7F:YF&[,;Z^\@%I:`80!@H>(AP$3,8:)B(5 1!04!(^"BQ$@12]+E@6@ M!8H13U0N*Q8$/0.L`Z*#A#P2!+0#)0DA#0H"@@(!$JE,#%)63EDLNP!:O@&T M'PM"*#(WN@+*`@<&VB(,##1#'E@0ULO9VC8^#T%'5291Y-@+"S@[#QL<+0TG M5QW7!S4CD" 8D&#*0 A&?OC+H&(@AAP#%<"H0,)?@@10!LQH,C!%D@HZKH%R 6X&" @ (E-2BY<$&9%@`P8\J4&0@`.P`` ` end begin 666 clip.gif M1TE&.#=A"P`0`)$``/____GUQ@```````"P`````"P`0```"(I2/%LNL_EX0 <;M)UI]6T;P^"W#=V8EARGJ9BU89)4A,G20$`.P`` ` end From MikeE at ster.invalid Sat Jan 1 15:10:03 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sat Jan 1 18:10:03 2005 Subject: [SpamCop-List] Re: How to get trace on virus spam? References: Message-ID: I'm_a_victim wrote: > I am receiving 1 or 2 copies every day from the same ISP. Since this > is virus mail how can I get a good trace on the sender so I can > complain to the right people? You can feed it to the online parcer. When you feed just the headers there is no offer to submit a report. If you feed the whole thing, as you might with the yahoo 'forward as attachment' you would obtain the notify address and cancel the reports. Here's what the result of submitting what you pasted here, after 'unbending' the spurious linewraps your newsagent introduced. http://www.spamcop.net/sc?id=z708409973z9281d652fca5bf6013fb4e0a66055ba3z or spamcop.net/sc?id=z708409973z9281d652fca5bf6013fb4e0a66055ba3z If reported today, reports would be sent to: Re: 62.167.86.58 (Administrator of network where email originates) postmaster@sunrise.net abuse@sunrise.net Also and incidentally, the way you are pasting into the newsmessage causes you to be sending the little .gif/s you copied from the page. Don't do that. That is a 'dumb' copy and pasting mechanism that was apparently introduced by XP. My Win98 clipboard doesn't work like that, so I don't have to go thru' gyrations to avoid doing it. Apparently you can't just paste from a clipboard copy directly into your newsreader; you'll have to do it another way when your drag or hi-lite accidentally catches graphics. > begin 666 abook_add_1.gif > M1TE&.#EA$ `0`.9:`-/3TS:--(51 > begin 666 online_u=mailer&m=g&t=0.dat > M1TE&.#EA# > begin 666 clip.gif > M1TE&.#=A"P`0`)$ -- Mike Easter kibitzer, not SC admin From mfkmek820 at yahoo.com Sat Jan 1 15:22:26 2005 From: mfkmek820 at yahoo.com (Fred K) Date: Sat Jan 1 19:25:04 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: "I'm_a_victim" wrote in message news:cr78rb$md1$1@news.spamcop.net... > Thanks for reply, > What I am entering as the address to block is the URL identified in the > header. > >That still does not work, because spammers use different infected computers >to forward spam. Spam will come from all different IPs, even if they are >from the same spammer. Blocking on content works about 90% + of the time. >Only accepting email from people in your address book works 100%, but then >you have to check your junk folder for email from sources that you want, >but are not in your allowed list. Fred k From mfkmek820 at yahoo.com Sat Jan 1 15:24:25 2005 From: mfkmek820 at yahoo.com (Fred K) Date: Sat Jan 1 19:25:07 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: "I'm_a_victim" wrote in message news:cr786m$ltt$1@news.spamcop.net... >A few weeks ago I started spending my time attempting to trace and then >block the address of spammers. > I currently have thousands of addresses blocked but lately I see that some > spam I get is from a blocked address. > Report each one to Yahoo as spam Fred k From agent01413 at my-deja.com Sun Jan 2 01:06:24 2005 From: agent01413 at my-deja.com (Socks) Date: Sat Jan 1 20:10:02 2005 Subject: [SpamCop-List] Re: dispute listing of ip 17.254.6.27 References: <8G4c$yztKCRS@eisner.encompasserve.org> Message-ID: geo_splash_12 wrote in news:cr40ot$ptj$1@news.spamcop.net: > >> For confirmed optin, I have to respond to the confirmation to be >> added to the list. Your description does not sound like confirmed >> optin. That means that spam will be received and spam will be >> reported. > > It is not a confirmed opt-in as you describe. > Then it is not a confirmed opt-in list, they are failing to follow industry best practices, spam will continue to be reported to spamcop, spamcop will continue to report them, and they have no basis for complaining, I should probably add them to my local list to save the bandwidth spent querying spamcop and others. what block are they on? Never mind. I know how to get them permanently added to rangers. From SCNews.5.myspamgobbler at spamgourmet.com Sat Jan 1 17:46:05 2005 From: SCNews.5.myspamgobbler at spamgourmet.com (Spam N Scams Reporter) Date: Sat Jan 1 20:50:02 2005 Subject: [SpamCop-List] Re: dispute listing of ip 17.254.6.27 In-Reply-To: References: <8G4c$yztKCRS@eisner.encompasserve.org> Message-ID: Mike Easter wrote: > Mike Easter wrote: > >>It also has a TRUSTe Privacy Seal - and Apple is 'advertising' that at >>their *STUPID* mailing list signup site. >> >>More on that later. > > > ...more on the stupid mailing list signup; never before encountered. > > http://applenews.lists.apple.com/subscribe > > Now tell me that this signup doesn't indicate some kind of cluelessness. > I suppose it would be considered a 'double opt-in' signup, because you > are supposed to enter your address *TWICE* - just to make sure. > I decided to test the signup. There is no double opt-in. From the web signup: Thank You We?re currently processing your subscription request and will shortly send a message confirming the address at which you subscribed. When you receive this message, please save it. It will contain your e-mail address, information about subscribing and unsubscribing to our publications, and web and e-mail addresses you can use if you need to contact us for assistance. Please note that Apple is committed to protecting your privacy. We will use your e-mail address only to send you our publications. We will not give it to any other organization or use it for any other purpose. To see our policy on e-mail privacy, visit: http://www.lists.apple.com/privacy.html You should receive your first issue of your subscription shortly. We hope you enjoy it. ------------------ From email: Subj: Welcome to QuickTime News (quicktime: message 1 of 5) Date: Sat, 1 Jan 2005 17:39:19 -0800 (PST) From: ++myspamgobbler+7b5fc9085f.quicktime_news#applenews.lists.apple.com@spamgourmet.com ---------------------------------------------------------------- Thank you for subscribing to QuickTime News, our free e-mail newsletter. You have subscribed as <.5.myspamgobbler@spamgourmet.com>. Every two weeks, we'll send you a newsletter that will keep you informed about QuickTime and related products and technologies. If you'd like to change either the email address at which you subscribe to QuickTime News or the format in which you receive it, you can do so at: http://www.apple.com/enews/change/ We hope you enjoy QuickTime News, but if you decide you don't wish to receive the newsletter any longer, you can cancel your subscription at any time. You'll find instructions explaining how to do so at the bottom of each issue. The easiest way to unsubscribe is to visit this web site: http://applenews.lists.apple.com/unsubscribe?email=.5.myspamgobbler@spamgourmet.com If, after visiting the website, you still have questions, you can send an email message to: postmaster@applenews.lists.apple.com Please note that Apple is committed to protecting your privacy. We will use your e-mail address only to send you QuickTime News. We will not give it to any other organization or use it for any other purpose. To learn how Apple collects, uses, and safeguards the personal information you provide, visit: http://www.apple.com/legal/privacy Thanks again. And we hope you enjoy QuickTime News. Frank Editor, QuickTime News From tdy at blackhole.invalid Sat Jan 1 18:12:51 2005 From: tdy at blackhole.invalid (N. Miller) Date: Sat Jan 1 21:15:03 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: In article , I'm_a_victim says... > Thu, 23 Dec 2004 13:36:19 -0800 > X-YahooFilteredBulk: 217.235.108.78 Was this message not in the Yahoo! Bulk Mail folder? That is as much spam blocking as Yahoo! will give you. -- Norman ~Win dain a lotica, En vai tu ri, Si lo ta ~Fin dein a loluca, En dragu a sei lain ~Vi fa-ru les shutai am, En riga-lint From tdy at blackhole.invalid Sat Jan 1 18:22:21 2005 From: tdy at blackhole.invalid (N. Miller) Date: Sat Jan 1 21:25:03 2005 Subject: [SpamCop-List] Re: Spamcop detecting wrong thing? References: Message-ID: In article , Helen says... > I still cant see the boxes hmm. > I'm using Mozilla Firefox - are you on Firefox as well? Odd. Mozilla Firefox (Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.7.5) Gecko/20041107 Firefox/1.0) works fine for me. -- Norman ~Win dain a lotica, En vai tu ri, Si lo ta ~Fin dein a loluca, En dragu a sei lain ~Vi fa-ru les shutai am, En riga-lint From nobody at devnvll.spamcop.net Sat Jan 1 22:26:10 2005 From: nobody at devnvll.spamcop.net (Heidi) Date: Sat Jan 1 22:30:04 2005 Subject: [SpamCop-List] Re: How to get trace on virus spam? References: Message-ID: "Ivan Leo Puoti" wrote in message news:cr7pdl$vvn$4@news.spamcop.net... > From nobody at devnvll.spamcop.net Sat Jan 1 22:37:11 2005 From: nobody at devnvll.spamcop.net (Heidi) Date: Sat Jan 1 22:40:03 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: "I'm_a_victim" wrote in message news:cr7p4p$vem$17@news.spamcop.net... > It seems someone's canceling your posts for you.... Path: news.spamcop.net!not-for-mail From: "I'm_a_victim" Newsgroups: spamcop Subject: Re: Blocking address on YAHOO a waste of time Control: cancel Date: Sun, 2 Jan 2005 03:17:47 +0000 (UTC) Organization: SpamCop Lines: 0 Message-ID: NNTP-Posting-Host: vl654.host66.netvision.net.il X-Trace: news.spamcop.net 1104635867 32214 199.203.54.66 (2 Jan 2005 03:17:47 GMT) X-Complaints-To: news@news.spamcop.net NNTP-Posting-Date: Sun, 2 Jan 2005 03:17:47 +0000 (UTC) Xref: news.spamcop.net control.cancel:4504 From nobody at devnvll.spamcop.net Sat Jan 1 22:52:57 2005 From: nobody at devnvll.spamcop.net (Heidi) Date: Sat Jan 1 22:55:03 2005 Subject: [SpamCop-List] FYI Message-ID: There seems to be a resident troll here now who has taken to canceling other people's posts, both in this group, .help and .social, now posting from NNTP-Posting-Host: vl654.host66.netvision.net.il, but also from NNTP-Posting-Host: adsl-19-177-174.jan.bellsouth.net and several other domains. Hopefully the admins can do something about blocking him. From ric.gates at bigsleep.org Sun Jan 2 04:00:50 2005 From: ric.gates at bigsleep.org (Blammo) Date: Sat Jan 1 23:05:03 2005 Subject: [SpamCop-List] Re: Does it really help? References: Message-ID: On 01 Jan 2005 Jeff entered spamcop and left news:cr6msf$bov$1@news.spamcop.net: > Yeah well you didn't have to FLAME me either. That isn't proper > etiquette either. No other Newsgroup makes a big stink about this > crap and neither should this one. > > Its just goody-goody rules that came out of nowhere. Its pathetically > stupid and is only more of a hassle. Delete text then reply, delete > more text and reply to that question, a big waste of time for me! > > What a selfish attitude. If you have the attitude that you're the only one that matters, than don't expect any help. Why should a newsgroup be any different than any other public place. I suppose you don't have the time to stop at red lights either. -- | Ric | From MikeE at ster.invalid Sat Jan 1 20:04:00 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sat Jan 1 23:05:06 2005 Subject: [SpamCop-List] Re: FYI References: Message-ID: Heidi wrote: > There seems to be a resident troll here now who has taken to > canceling other people's posts, both in this group, .help and > .social, now posting from NNTP-Posting-Host: > vl654.host66.netvision.net.il, 199.203.54.66 rDNS vl654.host66.netvision.net.il can be found on accessible proxy lists, transparent port 80, currently has a visible port 80. -- but, I don't know who that is. Ellen is a adsl bellsouth, but not that one. > adsl-19-177-174.jan.bellsouth.net > Hopefully the admins can do something about blocking him. -- Mike Easter kibitzer, not SC admin From nobody at devnull.spamcop.net Sat Jan 1 22:03:43 2005 From: nobody at devnull.spamcop.net (Cat) Date: Sat Jan 1 23:05:08 2005 Subject: [SpamCop-List] Re: FYI In-Reply-To: References: Message-ID: Heidi wrote: > There seems to be a resident troll here now who has taken to canceling other > people's posts, both in this group, .help and .social, now posting from > NNTP-Posting-Host: vl654.host66.netvision.net.il, but also from > NNTP-Posting-Host: adsl-19-177-174.jan.bellsouth.net and several other > domains. Hopefully the admins can do something about blocking him. Since Heidi is so rudely making false accusations about recent activities in .social, I'm posting her original post over there and my reply to it. For someone who likes to complain quite loudly about .social issues being dragged into the other newsgroups, Heidi is not only being hypocritical by dragging this out here but also for her false accusations toward attempts to do something about the troll since all requests from newsgroup members to the troll's ISP and JT have been ignored. Heidi wrote: > I'm forwarding back to the newsgroup all the messages that the fuckwit is > canceling, just so y'all can see where he's sending them from and send your > abuse reports. :) In case anyone's wondering, you might want to get your facts straight before you falsely accuse someone of being the troll attempting to cancel s/h/its posts. One would think you'd be appreciative of someone making the effort to rid the newsgroup of the troll instead of dishing out false accusations. I sat on this issue for a long time since people have gotten upset about post canceling in the past, but I find it hard to believe that anyone would complain about the troll's posts disappearing from the newsgroup. If you have a problem with a little troll removal, get over it and stop your childish attempt to trash me as the troll. Since you're apparently so ungrateful, I'll just leave the troll's posts alone now and let them sit...especially the anti-Heidi ones since you're such an ungrateful witch. From ric.gates at bigsleep.org Sun Jan 2 04:13:27 2005 From: ric.gates at bigsleep.org (Blammo) Date: Sat Jan 1 23:15:04 2005 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness References: Message-ID: On 01 Jan 2005 Pop entered spamcop and left news:cr6i3f$94d$1@news.spamcop.net: > Actually, I learned something; > you can add sites like that to the Network Places - didn't know > you could do that. Are you running XP? Either that's a feature I wasn't aware of, or some other app added that function. -- | Ric | From MikeE at ster.invalid Sat Jan 1 20:18:29 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sat Jan 1 23:20:03 2005 Subject: [SpamCop-List] Re: FYI References: Message-ID: Cat wrote: > people have gotten upset about post canceling in the past, People should only cancel their own posts, unless they are the admin for the newsgroup. Even then, admins of accounts, such as Steve Gielda of cotse have a pretty wide latitude toward the broad spectrum of newsgroup behavior. I realize this isn't the kind of newsgrouping where anonymous remailer boistrousness goes on, but the problem with cancelling posts is that it represents an escalation or newsgroup warfare that is very problematic. I didn't know there was any posting going on that was so problematic that it required administrative intervention. -- Mike Easter kibitzer, not SC admin From nobody at devnull.spamcop.net Sat Jan 1 22:48:00 2005 From: nobody at devnull.spamcop.net (Cat) Date: Sat Jan 1 23:50:03 2005 Subject: [SpamCop-List] Re: FYI In-Reply-To: References: Message-ID: Mike Easter wrote: > Cat wrote: > >>people have gotten upset about post canceling in the past, > > > People should only cancel their own posts, unless they are the admin for > the newsgroup. > > Even then, admins of accounts, such as Steve Gielda of cotse have a > pretty wide latitude toward the broad spectrum of newsgroup behavior. I > realize this isn't the kind of newsgrouping where anonymous remailer > boistrousness goes on, but the problem with cancelling posts is that it > represents an escalation or newsgroup warfare that is very problematic. > > I didn't know there was any posting going on that was so problematic > that it required administrative intervention. This is exactly why I have ignored the troll's posts in the past, but this particular troll infestation and morphing has gone on far too long with complaints just being ignored. Whether or not my canceling the troll's posts was the best thing to do, hanging out in .cancel to post random headers to falsely label them as cancels made by the actual troll is also wrong. Dragging a .social issue over into the main group to annoy everyone who already stays out of .social was also wrong. Heidi has very loudly complained about other people in the past who have posted .social issues over here, yet she's now guilty of the same behavior she usually complains about. Since some people have their panties in a bunch over this, I won't be doing that again, but those people also shouldn't complain about the troll posts in the future then. From agent01413 at my-deja.com Sun Jan 2 05:05:22 2005 From: agent01413 at my-deja.com (Socks) Date: Sun Jan 2 00:10:02 2005 Subject: [SpamCop-List] Re: dispute listing of ip 17.254.6.27 References: <8G4c$yztKCRS@eisner.encompasserve.org> Message-ID: Spam N Scams Reporter wrote in news:cr7jos$shi$1@news.spamcop.net: > > I decided to test the signup. There is no double opt-in. > uh - single optin is fine, as long as it is single confirmed optin. From theodorov at spamcop.ru Sun Jan 2 06:33:10 2005 From: theodorov at spamcop.ru (Alexi Theodorov) Date: Sun Jan 2 01:35:04 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: "Heidi" wrote: > It seems someone's canceling your posts for you.... It seems someone's canceling your brains for you.... ROFLMAO!!! -- Surveys show that 70-80% of all women are battered. And I'm still eating mine plain! From SCNews.5.myspamgobbler at spamgourmet.com Sat Jan 1 23:04:37 2005 From: SCNews.5.myspamgobbler at spamgourmet.com (Spam N Scams Reporter) Date: Sun Jan 2 02:05:04 2005 Subject: [SpamCop-List] Re: FYI In-Reply-To: References: Message-ID: Cat wrote: > Heidi wrote: > >> There seems to be a resident troll here now who has taken to canceling >> other >> people's posts, both in this group, .help and .social, now posting from >> NNTP-Posting-Host: vl654.host66.netvision.net.il, but also from >> NNTP-Posting-Host: adsl-19-177-174.jan.bellsouth.net and several other >> domains. Hopefully the admins can do something about blocking him. > > > Since Heidi is so rudely making false accusations about recent > activities in .social, I'm posting her original post over there and my > reply to it. For someone who likes to complain quite loudly about > .social issues being dragged into the other newsgroups, Heidi is not > only being hypocritical by dragging this out here but also for her false > accusations toward attempts to do something about the troll since all > requests from newsgroup members to the troll's ISP and JT have been > ignored. > > Heidi wrote: > > > I'm forwarding back to the newsgroup all the messages that the > fuckwit is > > canceling, just so y'all can see where he's sending them from and > send your > > abuse reports. :) > > > > In case anyone's wondering, you might want to get your facts straight > before you falsely accuse someone of being the troll attempting to > cancel s/h/its posts. One would think you'd be appreciative of someone > making the effort to rid the newsgroup of the troll instead of dishing > out false accusations. I sat on this issue for a long time since people > have gotten upset about post canceling in the past, but I find it hard > to believe that anyone would complain about the troll's posts > disappearing from the newsgroup. If you have a problem with a little > troll removal, get over it and stop your childish attempt to trash me as > the troll. Since you're apparently so ungrateful, I'll just leave the > troll's posts alone now and let them sit...especially the anti-Heidi > ones since you're such an ungrateful witch. There have been numerous posts from various sections of spamcop ng that have been canceled by this troll. Many different authors have been canceled. Also, if you look through the messages that are still in the groups, many have been expired prematurely. There are a few different ip addressess that the s/h/it has used both to post from as well as to cancel from. You can see many of the cancels in control.cancel. 68.19.177.174 199.203.54.66 63.164.60.12 220.134.241.65 There are quite a few pages of cancels. Wazoo was also complaining of a troll gone crazy in the forums. Most likely is the same. From some.one at else.where Sun Jan 2 07:04:43 2005 From: some.one at else.where (Some One Else) Date: Sun Jan 2 02:05:07 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: Alexi Theodorov wrote in message : >> "Heidi" wrote: >> >> It seems someone's canceling your posts for you.... > > It seems someone's canceling your brains for you.... > > ROFLMAO!!! LOL! SPNAK!!! From nobody at xyzzy.claranet.de Sun Jan 2 10:19:06 2005 From: nobody at xyzzy.claranet.de (Frank Ellermann) Date: Sun Jan 2 04:35:07 2005 Subject: [SpamCop-List] Re: FYI References: Message-ID: <41D7BC8A.2C6A@xyzzy.claranet.de> Cat wrote: [Heidi wrote:] >> NNTP-Posting-Host: vl654.host66.netvision.net.il, Yes, numerous dubious [1] 3rd party cancels from this system. >> also NNTP-Posting-Host: adsl-19-177-174.jan.bellsouth.net >> and several other domains. E.g. interbusiness.it and speedup.oxford.networks (or similar), apparently it started Dec 15 2004. > Heidi is so rudely making false accusations Nonsense. See , the criminal also cancelled with from NNTP-Posting-Host: vl654.host66.netvision.net.il > .social issues being dragged into the other newsgroups This is a cancel war. It affects threads here, it's a spammer with zombies in at least three networks. > all requests from newsgroup members to the troll's ISP Which ISP, networks.il, interbusiness.it, speedup.oxford, or what else ? BTW, quite useless, the articles here go through a news2mail gateway to SC's pipermail archive, the mails are also (re)imported by GMaNe to another archive with news, Web, and blog interfaces. Bye, Frank [1] for geeks, the cancels I've seen were "only" dubious. In a technical sense articles with invalid From addresses can be cancelled by anybody (claiming that it's his/her From address). It was certainly no "spam cancel" following the conventions in Rosalind's From nobody at spamcop.net Sun Jan 2 09:38:44 2005 From: nobody at spamcop.net (D€ja vu) Date: Sun Jan 2 04:40:02 2005 Subject: [SpamCop-List] Heidi gets SPNAKED! References: Message-ID: net effect wrote: > so how's it feel to know that several people around the world > are laughin' their phuckin asses off at you right now? > > lol! do you live in the cancel bin? do you sit in the test group > and just wait for posts to "magically" appear? do you always go > for the "obvious" without stopping to think first? > > in other words, DO YOU HAVE NO LIFE AT ALL??? > > BWAHAHAHAHA! st00pid question, we all know the answer to that > one... :-) > > Only one thing left to add... > > SPNAK! > > :-) > Bwahahahha, OWN€D, oink oink, and all that. And oh yeah, Happy New Year. :-) From nobody at xyzzy.claranet.de Sun Jan 2 11:17:15 2005 From: nobody at xyzzy.claranet.de (Frank Ellermann) Date: Sun Jan 2 05:25:22 2005 Subject: [SpamCop-List] Re: FYI References: Message-ID: <41D7CA2B.4C62@xyzzy.claranet.de> Cat wrote: > Whether or not my canceling the troll's posts was the best > thing to do Stop to cancel articles unless you either follow the rules in or you got the license to kill from her majesty Ellen. > she's now guilty of the same behavior she usually complains > about. I don't care about Heidi or spamcop.social, but I care about the reasons why I don't see a (= the first article in this thread) here, still available as: Apparently the spammer cancelled his / her own cancel, that's already phase two. The next phases are hipcrime and preemptive cancels. The last phase could be closing news.spamcop.net :-( > I won't be doing that again Good. An old rule about third party cancels is "you have ONE chance to get it right". > people also shouldn't complain about the troll posts in the > future then. I'll complain about illegal cancels in any way and form I like. Bye, Frank From nobody at devnull.spamcop.net Sun Jan 2 04:28:38 2005 From: nobody at devnull.spamcop.net (Cat) Date: Sun Jan 2 05:30:03 2005 Subject: [SpamCop-List] Re: FYI In-Reply-To: <41D7BC8A.2C6A@xyzzy.claranet.de> References: <41D7BC8A.2C6A@xyzzy.claranet.de> Message-ID: Frank Ellermann wrote: > Cat wrote: > > [Heidi wrote:] > >>>NNTP-Posting-Host: vl654.host66.netvision.net.il, > > > Yes, numerous dubious [1] 3rd party cancels from this system. That one was only after she apparently realized I had seen her posts labeling my newsgroup headers as posts from the troll. >>>also NNTP-Posting-Host: adsl-19-177-174.jan.bellsouth.net >>>and several other domains. This that you quote came from my own headers. You can look at the message source of this post and see that she listed my own and labeled them as cancel attempts by the troll while encouraging people to forward my cancel posts to my ISP's abuse address. > E.g. interbusiness.it and speedup.oxford.networks (or similar), > apparently it started Dec 15 2004. > > >>Heidi is so rudely making false accusations > > > Nonsense. See , the > criminal also cancelled with > from > NNTP-Posting-Host: vl654.host66.netvision.net.il You must have missed the posts in .social where she posted more than a few times listing my cancel headers specifically. Her posts of my headers accusing them of being the troll's posting headers were later canceled without comment or retraction on her part. She only posted the netvision.net.il headers after I called her out on labeling only my cancels as cancels made by the troll. You can also see in the post that Mike Easter quoted that she posted my ISP info from my headers and labeled them as the troll's headers. >>.social issues being dragged into the other newsgroups > > > This is a cancel war. It affects threads here, it's a spammer > with zombies in at least three networks. And now it's also escalated to impersonation of other newsgroup regulars since I've seen at least two posts where the troll forged a SpamCop regular's address in his own posts. >>all requests from newsgroup members to the troll's ISP > > > Which ISP, networks.il, interbusiness.it, speedup.oxford, or > what else ? BTW, quite useless, the articles here go through > a news2mail gateway to SC's pipermail archive, the mails are > also (re)imported by GMaNe to another archive with news, Web, > and blog interfaces. In the posts that have since gone missing, she went through .cancel and only grabbed my cancels and made approximately 16 different posts labeling my headers as the troll's headers encouraging people to report my posts to my ISP as the newsgroup troll. Three of her posts of my headers are still in .social. A direct quote from Heidi from the original post explaining her reasons for posting the headers before the post disappeared: "I'm forwarding back to the newsgroup all the messages that the fuckwit is canceling, just so y'all can see where he's sending them from and send your abuse reports. :)" This was after she posted a bunch of posts singling out my newsgroup headers from .cancel and no one else's until after I caught her posts and pointed out her error. Posting my headers and encouraging people to send abuse complaints to my ISP without any proof to back up her claims crossed a line into abuse and harassment. That's something I don't take lightly. Anyway, it's late, and I'm going to bed. I should have already been asleep by now. From ***** at btconnect.com Sun Jan 2 10:29:23 2005 From: ***** at btconnect.com (Archy) Date: Sun Jan 2 05:30:06 2005 Subject: [SpamCop-List] bounced reply. Message-ID: I am constantly get this bounced message when i send mail to the andrew@XXXX.co.za address. Does this mean btconnect is blocked by the receiving ISP?? This report relates to your message: Subject: SMS688, Message-ID: , To: "Andrew Kilmartin" of Mon, 13 Dec 2004 11:40:02 +0000 Your message was not delivered to: andrew@specialitym.co.za for the following reason: Diagnostic was Unable to transfer, -1 Information MTA 'specialitym.co.za' gives error message host is listed in bl.spamcop.net The Original Message follows: From nobody at xyzzy.claranet.de Sun Jan 2 11:41:42 2005 From: nobody at xyzzy.claranet.de (Frank Ellermann) Date: Sun Jan 2 05:45:02 2005 Subject: [SpamCop-List] Re: FYI References: <41D7BC8A.2C6A@xyzzy.claranet.de> Message-ID: <41D7CFE6.57C3@xyzzy.claranet.de> Cat wrote: > You must have missed the posts in .social True, I only read spamcop (= this group here), routing, and spam. Today I added control.cancel as fourth relevant group. > "I'm forwarding back to the newsgroup all the messages that > the fuckwit is canceling, just so y'all can see where he's > sending them from and send your abuse reports. :)" Reposting articles cancelled by a 3rd party is a "good thing" in theory. It's less convincing here, because any lost stuff is still available in SC's pipermail archive. Bye, Frank From spamcop at oitc.com Sun Jan 2 06:19:50 2005 From: spamcop at oitc.com (spamcop) Date: Sun Jan 2 06:20:02 2005 Subject: [SpamCop-List] Missed url Message-ID: In http://www.spamcop.net/sc?id=z708527094z806bf1a95fef1b42ca37342e3ce91758z From nobody at spamcop.net Sun Jan 2 06:18:08 2005 From: nobody at spamcop.net (Ellen) Date: Sun Jan 2 06:35:02 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Frank Ellermann" wrote in message news:41D7CA2B.4C62@xyzzy.claranet.de... > Cat wrote: > > > Whether or not my canceling the troll's posts was the best > > thing to do > > Stop to cancel articles unless you either follow the rules in > or you got the > license to kill from her majesty Ellen. I neither cancel posts nor have I or can I give anyone the license to cancel posts. Ellen From helen at iinet.net.au Sun Jan 2 19:42:25 2005 From: helen at iinet.net.au (Helen) Date: Sun Jan 2 06:45:03 2005 Subject: [SpamCop-List] Re: Spamcop detecting wrong thing? References: Message-ID: Bingo :) I have changed to a mole reporter recently! I didnt think of that - it just says "tick the box" and I couldnt see it :) Thank you Wazo Helen "WazoO" wrote in message news:cr5feg$n0b$1@news.spamcop.net... > "Helen" wrote in message > news:cr54hs$h8u$1@news.spamcop.net... >> >> I still cant see the boxes hmm. >> >> I'm using Mozilla Firefox - are you on Firefox as well? > > What are the odds that you have signed up as a "mole" reporter? > > From helen at iinet.net.au Sun Jan 2 19:43:26 2005 From: helen at iinet.net.au (Helen) Date: Sun Jan 2 06:45:09 2005 Subject: [SpamCop-List] Re: Spamcop detecting wrong thing? References: Message-ID: The reply above your has the answer - ive changed to mole reporting :) Thanks for checking for me Norman. Helen "N. Miller" wrote in message news:MPG.1c40fab794d2047b98978c@news.spamcop.net... > In article , Helen says... > >> I still cant see the boxes hmm. > >> I'm using Mozilla Firefox - are you on Firefox as well? > > Odd. Mozilla Firefox (Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; > rv:1.7.5) > Gecko/20041107 Firefox/1.0) works fine for me. > > -- > Norman > ~Win dain a lotica, En vai tu ri, Si lo ta > ~Fin dein a loluca, En dragu a sei lain > ~Vi fa-ru les shutai am, En riga-lint From nobody at spamcop.net Sun Jan 2 08:46:45 2005 From: nobody at spamcop.net (Pop) Date: Sun Jan 2 08:50:03 2005 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness now OT References: Message-ID: Blammo wrote: >> On 01 Jan 2005 Pop entered spamcop and left >> news:cr6i3f$94d$1@news.spamcop.net: >> >>> Actually, I learned something; >>> you can add sites like that to the Network Places - didn't >>> know >>> you could do that. >> >> Are you running XP? Either that's a feature I wasn't aware of, >> or >> some other app added that function. >> >> -- >>> Ric Yes, XP Pro. Dunno about earlier versions, but you can put anything, inter/intra in the Network Places and you'll go there. A surprise to me, but it sort of makes sense! I'll see what I can find out & check back. Pop Pop From TJLWBECGSGWU at spammotel.com Sun Jan 2 14:14:58 2005 From: TJLWBECGSGWU at spammotel.com (Mathew Hendry) Date: Sun Jan 2 09:20:03 2005 Subject: [SpamCop-List] Re: Missed url References: Message-ID: On Sun, 02 Jan 2005 06:19:50 -0500, spamcop wrote: >In http://www.spamcop.net/sc?id=z708527094z806bf1a95fef1b42ca37342e3ce91758z What did it miss? It does seem to be picking up the main phishing page, http://64.23.124.231, which is still active BTW. The rest are hijacked eBay links, not of much interest. I've seen a few weird cases recently where links are missed on the first parse but magically appear if I refresh. That might be what's happened here. -- Mat. From nobody at spamcop.net Sun Jan 2 09:36:30 2005 From: nobody at spamcop.net (Ellen) Date: Sun Jan 2 09:45:03 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Mr K. Mean" <47p772ok02@sneakemail.com> wrote in message news:cr8nfk$k8g$1@news.spamcop.net... > > This has gone far beyond an annoying person who we all try to ignore. > Can something be done to address this issue? I've passed the info up the food chain. Thanks Ellen From rwmarbleAT at yahooDOT.com Sun Jan 2 09:55:22 2005 From: rwmarbleAT at yahooDOT.com (I'm_a_victim) Date: Sun Jan 2 10:00:02 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: Interesting. According to Yahoo "Incoming mail from addresses on the list will be deleted automatically" "N. Miller" wrote in message news:MPG.1c40f87badf299d898978b@news.spamcop.net... > In article , I'm_a_victim says... > >> Thu, 23 Dec 2004 13:36:19 -0800 >> X-YahooFilteredBulk: 217.235.108.78 > > Was this message not in the Yahoo! Bulk Mail folder? That is as much spam > blocking as Yahoo! will give you. > > -- > Norman > ~Win dain a lotica, En vai tu ri, Si lo ta > ~Fin dein a loluca, En dragu a sei lain > ~Vi fa-ru les shutai am, En riga-lint From nobody at nowhere.invalid Sun Jan 2 16:13:51 2005 From: nobody at nowhere.invalid (Steven Maesslein) Date: Sun Jan 2 10:15:02 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: On Sun, 2 Jan 2005 09:55:22 -0500, I'm_a_victim coughed into spamcop and left this in : > Interesting. According to Yahoo "Incoming mail from addresses on the list > will be deleted automatically" Please don't top-post. When they say that, they mean *e-mail* addresses. The list you're supposed to populate is a list of e-mail addresses, not IP addresses. -- Steve BOFH excuse #79: Look, buddy: Windows 3.1 IS A General Protection Fault. From MikeE at ster.invalid Sun Jan 2 07:23:34 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sun Jan 2 10:25:03 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: I'm_a_victim wrote: > Interesting. According to Yahoo "Incoming mail from addresses on the > list will be deleted automatically" In gmail and EL, 'addresses' means email addresses, not IP addresses. In gmail it is not possible to add IP addresses to a blocklist. Nor is it possible to do that in EL spamblocker. Also, see http://members.fortunecity.com/nnqweb/nquote.html Quoting Style in Newsgroup Postings Q1: What is "quoting" in newsgroup postings? Q2: How should I use the quoted text and arrange it with my own text? -- Mike Easter kibitzer, not SC admin From rwmarbleAT at yahooDOT.com Sun Jan 2 10:38:36 2005 From: rwmarbleAT at yahooDOT.com (I'm_a_victim) Date: Sun Jan 2 10:40:08 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: "Mike Easter" wrote in message news:cr93jk$r2d$1@news.spamcop.net... > I'm_a_victim wrote: >> Interesting. According to Yahoo "Incoming mail from addresses on the >> list will be deleted automatically" > > In gmail and EL, 'addresses' means email addresses, not IP addresses. > > In gmail it is not possible to add IP addresses to a blocklist. Nor is > it possible to do that in EL spamblocker. > > > Also, see http://members.fortunecity.com/nnqweb/nquote.html Quoting > Style in Newsgroup Postings > Q1: What is "quoting" in newsgroup postings? > Q2: How should I use the quoted text and arrange it with my own text? > > -- > Mike Easter > kibitzer, not SC admin > OK Thanks for bit of education. I will then just continue to complain to Yahoo about their in effectual blocking. From TJLWBECGSGWU at spammotel.com Sun Jan 2 16:41:18 2005 From: TJLWBECGSGWU at spammotel.com (Mathew Hendry) Date: Sun Jan 2 11:45:02 2005 Subject: [SpamCop-List] Re: Missed url References: Message-ID: On Sun, 02 Jan 2005 14:14:58 +0000, Mathew Hendry wrote: >I've seen a few weird cases recently where links are missed on the first >parse but magically appear if I refresh. That might be what's happened here. Worse just now with http://www.spamcop.net/sc?id=z708588243zee165d12d5004d4c894c89c78974cd69z Parse, no links found, refresh, no links found, view full message, back, http://www.izbb.com found. -- Mat. From nobody at nowhere.invalid Sun Jan 2 17:50:47 2005 From: nobody at nowhere.invalid (Steven Maesslein) Date: Sun Jan 2 11:55:04 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: On Sun, 2 Jan 2005 10:38:36 -0500, I'm_a_victim coughed into spamcop and left this in : > I will then just continue to complain to Yahoo about their in effectual > blocking. You get what you pay for... :) -- Steve At any level of traffic, any delay is intolerable. From ob1dbNOSPAM at spamcop.net Sun Jan 2 13:30:25 2005 From: ob1dbNOSPAM at spamcop.net (David Butler) Date: Sun Jan 2 13:35:02 2005 Subject: [SpamCop-List] hanaro spam to wrong reporting address ?? Message-ID: 222.233.108.95 comes back from Spamcop: Re: 222.233.108.95 (Administrator of network where email originates) To: nospam#hanaro.com@devnull.spamcop.net (Notes) but krnic shows: Org Name : Hanaro Telecom Inc. Service Name : HANANET Org Address : Shindongah Bldg., 43 Taepyeongno2-Ga Jung-Gu [ ISP IP Admin Contact Information ] Name : IP Administrator Phone : +82-2-106-2 Fax : +82-2-6266-6483 E-Mail : ip-adm@hanaro.com [ ISP IP Tech Contact Information ] Name : IP Manager Phone : +82-2-106-2 Fax : +82-2-6266-6483 E-mail : ip-adm@hanaro.com [ ISP Network Abuse Contact Information ] Name : Network Abuse Phone : +82-2-106-2 Fax : +82-2-6266-6483 E-mail : abuse@hanaro.com and that report went through... David From nobody at devnull.spamcop.net Sun Jan 2 13:39:19 2005 From: nobody at devnull.spamcop.net (Sofa King Tyred of Lar Ting) Date: Sun Jan 2 13:40:03 2005 Subject: [SpamCop-List] Re: Strangeness? spam gang(s) has fine tuned look-up delays toavoid SC look up? In-Reply-To: References: Message-ID: Berny wrote: > Me thinks one or more spam gangs along with their hosters have figured out > how to get enough delay to avoid being seen by SC, but not enough to over > try the patience of the vicodin addicts with small penises and erectile > disfunction looking for small bottles to hang in front of their license > plates before they get too many points and lose their drivers license for > going through red lights, and really need a cheaper mortgage from China so > they can pay for everything they've been ordering. LOL! I'm chiming in to say I've theorized the same thing, a while back. The theory about the screen-saver vampire is interesting, too. What's most annoying, is that SpamPal used to block a whole lot more of this crap (based on block lists), and perhaps this tactic is working for the spammers. They're not getting block-listed. I used to have only one or two spams a day that get past the filters. Now I have 10 times that. I first thought it was the latest update of SpamPal, but I re-verified the block lists and I'm pretty sure they're OK. Can SpamCop use an "indirect" service (via proxy) to check for dns lookups, or maybe even record the site then have a batch process to go off and look up "slow" resolves? This is having an effect on spam that gets through. What's most interesting is to see how much positive effect SpamCop can have (when the evil sites get listed), if spammy is truly exploiting a weakness intentionally. From medevul at some.where Sun Jan 2 18:50:26 2005 From: medevul at some.where (MedEvul) Date: Sun Jan 2 13:55:03 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: Ellen wrote: > I've passed the info up the food chain. Thanks Perhaps Heidi should ensure that her own house is in order before she accuses others. :-) From MikeE at ster.invalid Sun Jan 2 11:15:08 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sun Jan 2 14:15:03 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: Mr K. Mean wrote: > I would check this one as one of the main posting locations: > > NNTP-Posting-Host: vl654.host66.netvision.net.il It would be better if people could simply filter or discipline themselves to mentally filter than to expect some administrative management. For Win users, Nfilter ie NewsProxy^1 is a very useful filter and would have no problems with these recent issues. Linux users have their own strategies. That doesn't solve the cancelling problem, but if necessary admin could turn cancelling off. ^1 http://www.nfilter.org/ nfilter : A Client-side Usenet News Filter -- Mike Easter kibitzer, not SC admin From nobody at spamcop.net Sun Jan 2 20:56:15 2005 From: nobody at spamcop.net (D€ja vu) Date: Sun Jan 2 16:00:04 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: MedEvul wrote: > Perhaps Heidi should ensure that her own house is in order > before she accuses others. > > :-) Yeah, she's really gonna be embarrassed when they find out those cancels all came from her own IP. Y is it so? :-) -- cd ./thebomb/ ; ./configure /etc/init.d/mainscreen start chown -R us:us /yourbase/* echo "What" | /usr/bin/festival rm -rf /chance-to-survive/ cd /yourtime/ ; make mv /zig/* ./ From me at privacy.net Sun Jan 2 14:53:09 2005 From: me at privacy.net (Sylvesterthekat) Date: Sun Jan 2 17:55:04 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Mike Easter" wrote in message news:cr9h5q$3is$1@news.spamcop.net... > Mr K. Mean wrote: > > I would check this one as one of the main posting locations: > > > > NNTP-Posting-Host: vl654.host66.netvision.net.il > > It would be better if people could simply filter or discipline > themselves to mentally filter than to expect some administrative > management. > > For Win users, Nfilter ie NewsProxy^1 is a very useful filter and would > have no problems with these recent issues. Linux users have their own > strategies. > > That doesn't solve the cancelling problem, but if necessary admin could > turn cancelling off. That sounds like the best idea since I doubt banning the jerk will do any good. We mostly do ignore him, but it's another thing entirely when s/h/it just cancels anything he doesn't like the look of. If anyone wants the clear evidence of where he cancelled one of my posts, I can provide it (not much point posting it here since he'd just cancel it). From kenbrody at spamcop.net Sun Jan 2 11:19:53 2005 From: kenbrody at spamcop.net (Kenneth Brody) Date: Sun Jan 2 18:25:03 2005 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness References: Message-ID: <41D81F28.9C51AB2A@spamcop.net> Ivan Leo Puoti wrote: > > FYI that site is hosting what appears to be pirated software, so > I've reported it to the copyright owner. They also have a large collection of O'Reilly books online. Whether they're legal copies or not, I can't say. -- +-------------------------+--------------------+-----------------------------+ | Kenneth J. Brody | www.hvcomputer.com | | | kenbrody/at\spamcop.net | www.fptech.com | #include | +-------------------------+--------------------+-----------------------------+ Don't e-mail me at: From jrstark at barntowire.com Sun Jan 2 18:44:01 2005 From: jrstark at barntowire.com (jrstark) Date: Sun Jan 2 19:45:03 2005 Subject: [SpamCop-List] Yahoo is blacklisted? Message-ID: I am not getting any of my yahoo groups email, this is apparently the reason why: http://www.spamcop.net/w3m?action=blcheck&ip=66.94.237.46 What is going on? From devnull at spamcop.net Sun Jan 2 19:48:37 2005 From: devnull at spamcop.net (Heidi) Date: Sun Jan 2 19:50:03 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Mike Easter" wrote in message news:cr9h5q$3is$1@news.spamcop.net... > That doesn't solve the cancelling problem, but if necessary admin could > turn cancelling off. > > ^1 http://www.nfilter.org/ nfilter : A Client-side Usenet News Filter > We don't need filters, anyone remotely competent knows how to killfile, what we need is them to block the troll from canceling posts, and if turning off canceling posts is possible, I would ask that they do it as soon as possible. From Merlyn at Spamcop.net Sun Jan 2 19:49:39 2005 From: Merlyn at Spamcop.net (Merlyn) Date: Sun Jan 2 19:50:08 2005 Subject: [SpamCop-List] Re: Yahoo is blacklisted? References: Message-ID: "jrstark" wrote in message news:cra4ho$f1g$1@news.spamcop.net... >I am not getting any of my yahoo groups email, this is apparently the >reason why: > http://www.spamcop.net/w3m?action=blcheck&ip=66.94.237.46 > > What is going on? Nothing is wrong, too much spam. This is already under discussion here in a few threads. -- Regards, Merlyn A Spamcop advocate No emails this account is for newsgroups only People demand freedom of speech to make up for the freedom of thought which they avoided From wb8tyw at qsl.network Sun Jan 2 20:00:01 2005 From: wb8tyw at qsl.network (John E. Malmberg) Date: Sun Jan 2 20:05:02 2005 Subject: [SpamCop-List] Re: Yahoo is blacklisted? In-Reply-To: References: Message-ID: jrstark wrote: > I am not getting any of my yahoo groups email, this is apparently the > reason why: > http://www.spamcop.net/w3m?action=blcheck&ip=66.94.237.46 > > What is going on? This topic is under discussion in spamcop.help and on the web forum. According to posts by the deputies, Yahoo is allowing spam to be sent to their spamtraps and to spamcop.net members. Looking news.admin.net-abuse.sightings shows 17 spam samples, some of them showing that same spam repeated over again from October to December. I would recommend contacting Yahoo and asking them why they are allowing the spam to be sent. -John wb8tyw@qsl.network Personal Opinion Only From jrstark at barntowire.com Sun Jan 2 19:08:48 2005 From: jrstark at barntowire.com (jrstark) Date: Sun Jan 2 20:10:02 2005 Subject: [SpamCop-List] Re: Yahoo is blacklisted? In-Reply-To: References: Message-ID: Merlyn wrote: > "jrstark" wrote in message > news:cra4ho$f1g$1@news.spamcop.net... > >>I am not getting any of my yahoo groups email, this is apparently the >>reason why: >>http://www.spamcop.net/w3m?action=blcheck&ip=66.94.237.46 >> >>What is going on? > > > Nothing is wrong, too much spam. > > This is already under discussion here in a few threads. > I searched, but just see threads about yahoo email accounts. Where can I find more info? I am not using a yahoo mail account, or complaining about receiving spam. SpamCop is blocking my legitimate emails from yahoo groups, and is sending yahoo bounce notices. From Merlyn at Spamcop.net Sun Jan 2 20:25:23 2005 From: Merlyn at Spamcop.net (Merlyn) Date: Sun Jan 2 20:30:02 2005 Subject: [SpamCop-List] Re: Yahoo is blacklisted? References: Message-ID: "jrstark" wrote in message news:cra607$g7l$1@news.spamcop.net... > Merlyn wrote: > >> "jrstark" wrote in message >> news:cra4ho$f1g$1@news.spamcop.net... >> >>>I am not getting any of my yahoo groups email, this is apparently the >>>reason why: >>>http://www.spamcop.net/w3m?action=blcheck&ip=66.94.237.46 >>> >>>What is going on? >> >> >> Nothing is wrong, too much spam. >> >> This is already under discussion here in a few threads. >> > > I searched, but just see threads about yahoo email accounts. Where can I > find more info? > > I am not using a yahoo mail account, or complaining about receiving spam. > SpamCop is blocking my legitimate emails from yahoo groups, and is sending > yahoo bounce notices. > Spamcop does not block anything. You ISP/Email administrator is doing the blocking. Spamcop is just a list of IP addresses spam has been reported from. -- Regards, Merlyn A Spamcop advocate No emails this account is for newsgroups only People demand freedom of speech to make up for the freedom of thought which they avoided From MikeE at ster.invalid Sun Jan 2 17:54:39 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sun Jan 2 20:55:02 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: Heidi wrote: > We don't need filters, anyone remotely competent knows how to > killfile, Most people are driving a newsagent that has 'primitive' or simplistic rules, like 'block sender' which is fairly inadequate for a morpher. The average morpher would need Nfilter aimed at their IP or provider. This particular one would need to have ongoing headerline adjustments made for whichever proxy s/he happens to be using. Personally I don't have any problem just 'mentally' ignoring what needs to be ignored. Some groups or people have trouble doing that. > what we need is them to block the troll from canceling > posts, and if turning off canceling posts is possible, I would ask > that they do it as soon as possible. The history of the cancelling isn't clear to me. I didn't study it in a timely fashion. By the time you started talking about the cancelling 'problem', a regular was right in the big middle of it. That cancelling should be easily stopped. I don't know which cancelling was retaliatory to which. If everyone, regulars and 'irregulars' alike, would quit cancelling, or rather 'quits' cancelling, or perhaps 'has quit' cancelling, maybe it isn't currently a problem at all. Whoever setup the newsserver wanted there to be cancelling. Maybe it can stay. -- Mike Easter kibitzer, not SC admin From David1 at suescornerweb.com Sun Jan 2 21:10:10 2005 From: David1 at suescornerweb.com (David 1) Date: Sun Jan 2 21:15:03 2005 Subject: [SpamCop-List] Re: FYI In-Reply-To: References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: Heidi wrote: > "Mike Easter" wrote in message > news:cr9h5q$3is$1@news.spamcop.net... > > We don't need filters, anyone remotely competent knows how to killfile, > Excuse me Who ever the hell wrote this, just because I was going to ask in help what killfile is that makes me incompetent, so far the filters are doing fine but if they stop I may have asked what it is because I've been on the web for 10 years but this is my first few months on the ngs. -- David 1 bad addy spamtrap@suescornerweb.com From devnull at spamcop.net Sun Jan 2 21:28:07 2005 From: devnull at spamcop.net (Heidi) Date: Sun Jan 2 21:30:05 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Mike Easter" wrote in message news:cra8is$hu8$1@news.spamcop.net... Personally I don't > have any problem just 'mentally' ignoring what needs to be ignored. Nor do I, that's not the problem. > The history of the cancelling isn't clear to me. Easy. The troll started posting from NNTP-Posting-Host: s01060080c8ec971d.vc.shawcable.net, when he became abusive and obnoxious and ignored, he started morphing hysterically, I think there are probably 50 or so incarnations in my killfile. When he got bored with that, he started finding open proxies, NNTP-Posting-Host: c-24-18-161-66.client.comcast.net NNTP-Posting-Host: 220-134-241-65.hinet-ip.hinet.net NNTP-Posting-Host: speedup.oxfordnetworks.net posting vile things he thought would upset people, and started changing his settings in order to cancel posts of the regular posters to call attention to himself. I didn't study it in a > timely fashion. By the time you started talking about the cancelling > 'problem', a regular was right in the big middle of it. That cancelling > should be easily stopped. The "regular" took it upon herself to play cop and cancel his posts when no one authorized her to do so, and if I recall someone was very nearly banned for doing just that a year or so ago. She was doing exactly what the troll was doing, which is all I saw, changing her posting names and ID in order to cancel his posts. Bad idea. I couldn't care less about her, actually. The troll is the problem. > > I don't know which cancelling was retaliatory to which. If everyone, > regulars and 'irregulars' alike, would quit cancelling, or rather > 'quits' cancelling, or perhaps 'has quit' cancelling, maybe it isn't > currently a problem at all. Right, tell the morphing troll to stop canceling posts. That'll work....not. Something else needs to be done about it. From nobody at spamcop.net Sun Jan 2 20:45:11 2005 From: nobody at spamcop.net (RW) Date: Sun Jan 2 21:50:03 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "David 1" wrote in message news:cra9ic$ic8$1@news.spamcop.net... > Heidi wrote: >> "Mike Easter" wrote in message >> news:cr9h5q$3is$1@news.spamcop.net... > >> We don't need filters, anyone remotely competent knows how to killfile, > Excuse me Who ever the hell wrote this, just because I was going to ask in > help what killfile is that makes me incompetent, so far the filters are > doing fine but if they stop I may have asked what it is because I've been > on the web for 10 years but this is my first few months on the ngs. Killfile is simply a term for assigning a filter to ignore posts from a particular person. It makes your news reader mark the post as read, doesn't download the post, hides it from view, etc., depending on what news reader you are using. Usually the term is used to ignore posts from a particular identity, but you can also filter on subject, thread, date, etc. In Mozilla you make a rule under Tools -> Message Filters. Richard From ric.gates at bigsleep.org Mon Jan 3 02:49:00 2005 From: ric.gates at bigsleep.org (Blammo) Date: Sun Jan 2 21:50:09 2005 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness now OT References: Message-ID: On 02 Jan 2005 Pop entered spamcop and left news:cr8u01$nle$1@news.spamcop.net: > Yes, XP Pro. Dunno about earlier versions, but you can put > anything, inter/intra in the Network Places and you'll go there. > A surprise to me, but it sort of makes sense! > Hmm, actually it sounds like a URL shortcut ("favorite"), XP is treating Network Places just like any other folder? Actually that really doesn't make sense, Network Places are computers you are always connected to, an FTP connection will time out. -- | Ric | From nobody at spamcop.net Sun Jan 2 20:50:35 2005 From: nobody at spamcop.net (RW) Date: Sun Jan 2 21:55:03 2005 Subject: [SpamCop-List] Re: hanaro spam to wrong reporting address ?? References: Message-ID: "David Butler" wrote in message news:ob1dbNOSPAM-309C03.13302502012005@news.cesmail.net... > 222.233.108.95 comes back from Spamcop: > > Re: 222.233.108.95 (Administrator of network where email originates) > To: nospam#hanaro.com@devnull.spamcop.net (Notes) > E-mail : abuse@hanaro.com > > and that report went through... We've basically given up on Hanaro. They've written us a few times, we've turned reports back on only to have them continue to bounce reports. abuse@hanaro.com is showing 231,226 bounces as of recently. Richard From MikeE at ster.invalid Sun Jan 2 19:07:05 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sun Jan 2 22:10:02 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: David 1 wrote: > Excuse me Who ever the hell wrote this, just because I was going to > ask in help what killfile is that makes me incompetent, so far the > filters are doing fine but if they stop I may have asked what it is > because I've been on the web for 10 years but this is my first few > months on the ngs. Killfiling or KF/ing or 'plonking' is simply a newsreader [or mailreader] 'tool' which causes a particular poster [or mailer] 's posts to become 'invisible' to you, so that you won't see them and be 'upset' by them -- in case you lack the fortitude or knack or whatever you want to call it to not let such postings 'bother' you. As a general rule, the strategy of remaining silent even when inner 'compelled' to respond, whether you are talking to a friend or a foe, is a useful method of coping with some issues. Personally, when I interact with my dear friends in one-on-ones, I am 'notorious' for speaking frankly with them. I'm much more likely to be silent in a public arena. That is, silent about oneoneone stuff in public -- very much a blabbermouth about everything else. Doesn't opionated mean 'to have an opinion'? Who doesn't? Continuing the extension to responses to trolls and others. It wouldn't be any fun to be a troll if there weren't some kind of reaction or response to one's trollishness. So, when trolls come around, it is best to simply ignore them. It is much harder for them to be completely entertained simply by their own activities. Similarly, when ng interacting with some, if you find yourself having to 'bite your tongue' so much that your tongue is beginning to bleed, then it is time to ignore, if necessary mechanically aided by killfiling, the aggravator. Sometimes the mechanics of the killfile can be useful to 'spot' mechanical things in advance which are nuisances. One could kf all crossposts, all pgp signed messages, or all messages from someone who just gets on your nerves. One might decide to kf a refractory topposter or whatever. And then there is the more complicated issue of social interactions, which involves whether killfiling should be done silently or 'out loud'. That is a much more complicated subject. Most of the time plonking should be done silently. Occasionally some other way. IMO. -- Mike Easter kibitzer, not SC admin From David1 at suescornerweb.com Mon Jan 3 00:21:10 2005 From: David1 at suescornerweb.com (David 1) Date: Mon Jan 3 00:25:13 2005 Subject: [SpamCop-List] Re: FYI In-Reply-To: References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: RW wrote: > "David 1" wrote in message > news:cra9ic$ic8$1@news.spamcop.net... > >>Heidi wrote: >> >>>"Mike Easter" wrote in message >>>news:cr9h5q$3is$1@news.spamcop.net... >> >>>We don't need filters, anyone remotely competent knows how to killfile, > > >>Excuse me Who ever the hell wrote this, just because I was going to ask in >>help what killfile is that makes me incompetent, so far the filters are >>doing fine but if they stop I may have asked what it is because I've been >>on the web for 10 years but this is my first few months on the ngs. > > > Killfile is simply a term for assigning a filter to ignore posts from a > particular person. It makes your news reader mark the post as read, doesn't > download the post, hides it from view, etc., depending on what news reader > you are using. Usually the term is used to ignore posts from a particular > identity, but you can also filter on subject, thread, date, etc. > > In Mozilla you make a rule under Tools -> Message Filters. > > Richard > > thankyou, so it's what I'm already doing -- David 1 bad addy spamtrap@suescornerweb.com From David1 at suescornerweb.com Mon Jan 3 00:23:37 2005 From: David1 at suescornerweb.com (David 1) Date: Mon Jan 3 00:25:20 2005 Subject: [SpamCop-List] Re: FYI In-Reply-To: References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: Mike Easter wrote: > David 1 wrote: > >>Excuse me Who ever the hell wrote this, just because I was going to >>ask in help what killfile is that makes me incompetent, so far the >>filters are doing fine but if they stop I may have asked what it is >>because I've been on the web for 10 years but this is my first few >>months on the ngs. > > > Killfiling or KF/ing or 'plonking' is simply a newsreader [or > mailreader] 'tool' which causes a particular poster [or mailer] 's posts > to become 'invisible' to you, so that you won't see them and be 'upset' > by them -- in case you lack the fortitude or knack or whatever you want > to call it to not let such postings 'bother' you. > > As a general rule, the strategy of remaining silent even when inner > 'compelled' to respond, whether you are talking to a friend or a foe, is > a useful method of coping with some issues. Personally, when I interact > with my dear friends in one-on-ones, I am 'notorious' for speaking > frankly with them. I'm much more likely to be silent in a public arena. > That is, silent about oneoneone stuff in public -- very much a > blabbermouth about everything else. Doesn't opionated mean 'to have an > opinion'? Who doesn't? > > Continuing the extension to responses to trolls and others. It wouldn't > be any fun to be a troll if there weren't some kind of reaction or > response to one's trollishness. > > So, when trolls come around, it is best to simply ignore them. It is > much harder for them to be completely entertained simply by their own > activities. Similarly, when ng interacting with some, if you find > yourself having to 'bite your tongue' so much that your tongue is > beginning to bleed, then it is time to ignore, if necessary mechanically > aided by killfiling, the aggravator. > > Sometimes the mechanics of the killfile can be useful to 'spot' > mechanical things in advance which are nuisances. One could kf all > crossposts, all pgp signed messages, or all messages from someone who > just gets on your nerves. One might decide to kf a refractory topposter > or whatever. > > And then there is the more complicated issue of social interactions, > which involves whether killfiling should be done silently or 'out loud'. > That is a much more complicated subject. Most of the time plonking > should be done silently. Occasionally some other way. IMO. > > > Do I have this right or not Killfilling = Filtering -- David 1 bad addy spamtrap@suescornerweb.com From spamtrap at mrsmith.com Mon Jan 3 02:08:02 2005 From: spamtrap at mrsmith.com (Mr. Smith) Date: Mon Jan 3 02:10:18 2005 Subject: [SpamCop-List] Re: empty spam References: Message-ID: "Rob" wrote in message news:cr4na6$9n2$1@news.spamcop.net... > > "Mr. Smith" wrote in message > news:cr4g01$3qc$1@news.spamcop.net... >> I have received the same spam 3 ~ 4 per week, as posted in spamcop.spam >> under the heading "empty spam" >> >> The originating IP changes each time. The nonsense text changes each >> time. >> The subject header always starts with $.S.T.O.R- >> >> There is nothing advertised and no links other than MSN search. >> >> It is sent to multpile yahoo addresses. What would be the purpose of >> this? >> Is it to check email addresses (i.e. verify which ones do not bounce)? >> >> >> > > Have you viewed the source? Is there invisible HTML and/or Java there? > > Rob nothing, just plain text. You can see a copy over at spamcop.spam. not just this crop either, I have noticed in the past that I sometimes get spam with nothing in it, similar to this one From spamtrap at mrsmith.com Mon Jan 3 02:19:47 2005 From: spamtrap at mrsmith.com (Mr. Smith) Date: Mon Jan 3 02:20:03 2005 Subject: [SpamCop-List] Re: empty spam References: Message-ID: "Mike Easter" wrote in message news:cr4nec$9vj$1@news.spamcop.net... > Mr. Smith wrote: >> I have received the same spam 3 ~ 4 per week, as posted in >> spamcop.spam under the heading "empty spam" > > Generally speaking, spammer mindreading is not a worthwhile endeavor; > but we can go along with the idea of doing some analysis because some > people are actually interested in messing around with something more > thoroughly, and also because it is quite common for a more in-depth > evaluation of an issue to bring out something worth knowing which wasn't > expected. But, we have to be able to get all the depth possible. > > There's a better way to talk about this than you posting the one item > you did into .spam. You can never describe something adequately which > you could alternatively demonstrate the 'real thing' by using the > tracking URL. That is 'sort of a' real thing in .spam, but it is only > one and it is bent by the process you used to put it there. hmmm... a Babelfish translation from which language? I would guess either Lithuanian or some other Baltic country, right? From nobody at spamcop.net Mon Jan 3 00:10:20 2005 From: nobody at spamcop.net (RandallW) Date: Mon Jan 3 03:15:11 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: "I'm_a_victim" wrote in message news:cr94hq$rhu$1@news.spamcop.net... > > > > I will then just continue to complain to Yahoo about their in effectual > blocking. > Do you have SpamGuard activated? From MikeE at ster.invalid Mon Jan 3 02:09:23 2005 From: MikeE at ster.invalid (Mike Easter) Date: Mon Jan 3 05:11:06 2005 Subject: [SpamCop-List] Re: empty spam References: Message-ID: Mr. Smith wrote: > "Mike Easter" >> There's a better way to talk about this than you posting the one item >> you did into .spam. > hmmm... a Babelfish translation from which language? I would guess > either Lithuanian or some other Baltic country, right? How about this? You. Post some trackers, not spam. -- Mike Easter kibitzer, not SC admin From porpoise1954 at yahoo.co.uk Mon Jan 3 10:06:38 2005 From: porpoise1954 at yahoo.co.uk (Porpoise) Date: Mon Jan 3 05:20:10 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Mr K. Mean" <47p772ok02@sneakemail.com> wrote in message news:crapdm$sop$1@news.spamcop.net... > Mike Easter wrote: >> >> Killfiling or KF/ing or 'plonking' is simply a newsreader [or >> mailreader] 'tool' which causes a particular poster [or mailer] 's posts >> to become 'invisible' to you, so that you won't see them and be 'upset' >> by them -- in case you lack the fortitude or knack or whatever you want >> to call it to not let such postings 'bother' you. > > This is well and fine, but not useful in this case. There are a few > trolls in social who I have killfiled who I have no problems with anymore > because I don't see them. With this particular psycho troll, however, > killfiles are not the answer. When somebody morphs their identity > probably around 50 times, to date, in order to avoid being killfiled, > resorts to posting from compromised trojaned open proxies to further avoid > being killfiled and then starts to randomly canceling other people's > messages, this is not something that can be solved by a simple killfile, > or even a pretty sophisticated one. > I think you missed Mike's point there..... The best Killfile is the brain - i.e. just ignore what bothers you rather than feeding the trolls. From porpoise1954 at yahoo.co.uk Mon Jan 3 10:12:11 2005 From: porpoise1954 at yahoo.co.uk (Porpoise) Date: Mon Jan 3 05:25:04 2005 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness now OT References: Message-ID: "Blammo" wrote in message news:Xns95D2BF74359Dblammo@216.154.195.61... > On 02 Jan 2005 Pop entered spamcop and left > news:cr8u01$nle$1@news.spamcop.net: > > Hmm, actually it sounds like a URL shortcut ("favorite"), XP is treating > Network Places just like any other folder? Actually that really doesn't > make sense, Network Places are computers you are always connected to, an > FTP connection will time out. That's not strictly true..... You don't need to be *always* connected to them (laptops for example are not always connected to the network). You can set whether you want XP to "remember" Network Connections. It does it in a similar way to the way it mounts network drives - except instead of a drive it's a computer. An FTP connection timing out (whilst not in use) is not a problem IME, it will re-connect as soon as you want to do something. From ric.gates at bigsleep.org Mon Jan 3 10:42:48 2005 From: ric.gates at bigsleep.org (Blammo) Date: Mon Jan 3 05:45:03 2005 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness now OT References: Message-ID: On 03 Jan 2005 Porpoise entered spamcop and left news:crb6f1$4f6$1@news.spamcop.net: > An FTP connection timing out (whilst not in use) is not a problem IME, > it will re-connect as soon as you want to do something. > FTP is for file transfer, it is strictly NOT a network connection and it makes no sense being there. It also sounds like it fired up IE when opened, which is nothing like any other network connection. The question of how it got there in the first place is an obvious security concern, especially since network connections are supposed to be in a diferent "security zone". -- | Ric From billk at no.spam Mon Jan 3 02:51:31 2005 From: billk at no.spam (Bill K.) Date: Mon Jan 3 05:55:03 2005 Subject: [SpamCop-List] Identity Compromised? Message-ID: How many of you have received spam which address you by your full name, which you have never given out publicly over the Internet? What's also disconcerting is that is that in the places where such information was entered, such as online product registration forms for new purchases, other information, such as street address and other sensitive personal and private information were also entered. What do you figure is likely happening here? Do you suppose some of the companies, whose sites this personal information was entered, have some corrupt workers within extracting information from their database to use for their own unscrupulous purposes? What to do in these situations? Thanks. -Bill From billk at no.spam Mon Jan 3 02:58:35 2005 From: billk at no.spam (Bill K.) Date: Mon Jan 3 06:00:03 2005 Subject: [SpamCop-List] Identity Compromised? Message-ID: Spam in question at news://news.spamcop.net/crb7di$51f$1@news.spamcop.net How many of you have received spam which address you by your full name, which you have never given out publicly over the Internet? What's also disconcerting is that is that in the places where such information was entered, such as online product registration forms for new purchases, other information, such as street address and other sensitive personal and private information were also entered. What do you figure is likely happening here? Do you suppose some of the companies, whose sites this personal information was entered, have some corrupt workers within extracting information from their database to use for their own unscrupulous purposes? What to do in these situations? Thanks. -Bill From porpoise1954 at yahoo.co.uk Mon Jan 3 11:08:48 2005 From: porpoise1954 at yahoo.co.uk (Porpoise) Date: Mon Jan 3 06:25:03 2005 Subject: [SpamCop-List] Re: help Help? HELP! FTP Silliness now OT References: Message-ID: "Blammo" wrote in message news:Xns95D31BA528A0Bblammo@216.154.195.61... > On 03 Jan 2005 Porpoise entered spamcop and left > news:crb6f1$4f6$1@news.spamcop.net: > >> An FTP connection timing out (whilst not in use) is not a problem IME, >> it will re-connect as soon as you want to do something. >> > > FTP is for file transfer, it is strictly NOT a network connection Well, strictly speaking it is... it's a WAN (wide area NETWORK) connection > and it > makes no sense being there. It does to WinXP > It also sounds like it fired up IE when opened, > which is nothing like any other network connection. Ermmm.... ALL directories use IE for browsing in XP (remember the DJ actions against M$ for making it a part of the OS?) albeit the UI presented might differ slightly > The question of how it got there in the first place is an obvious security > concern, especially since network connections are supposed to be in a > diferent "security zone". Not relevant here. If you start up a connection to a LAN machine and a connection to a WAN machine, you'll find their "security zones" *are* different. The fact that there's a shortcut to them in the same folder is neither here-nor-there. From porpoise1954 at yahoo.co.uk Mon Jan 3 11:34:30 2005 From: porpoise1954 at yahoo.co.uk (Porpoise) Date: Mon Jan 3 06:50:02 2005 Subject: [SpamCop-List] Re: Identity Compromised? References: Message-ID: "Bill K." wrote in message news:crb81f$5dk$1@news.spamcop.net... > How many of you have received spam which address you by your full name, > which you have never given out publicly over the Internet? > > What's also disconcerting is that is that in the places where such > information was entered, such as online product registration forms for new > purchases, other information, such as street address and other sensitive > personal and private information were also entered. > > What do you figure is likely happening here? ? > Do you suppose some of the companies, whose sites this personal > information was entered, have some corrupt workers within extracting > information from their database to use for their own unscrupulous > purposes? > > What to do in these situations? > > Thanks. > > -Bill From porpoise1954 at yahoo.co.uk Mon Jan 3 11:40:10 2005 From: porpoise1954 at yahoo.co.uk (Porpoise) Date: Mon Jan 3 06:55:03 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Mr K. Mean" <47p772ok02@sneakemail.com> wrote in message news:crb9dn$69t$1@news.spamcop.net... > Porpoise wrote: > >>> >> I think you missed Mike's point there..... The best Killfile is the >> brain - i.e. just ignore what bothers you rather than feeding the trolls. > > It doesn't bother me. I can scan the list of new headers and mark the > ones I know are the trolls read before I read anything. I never see them. > But how exactly does the brain help when messages disappear. Ahh... Well...... you see....... then you don't even have to scan for them..... ;-) From 79ytka802 at sneakemail.com Mon Jan 3 12:47:46 2005 From: 79ytka802 at sneakemail.com (Aviatrix) Date: Mon Jan 3 07:50:03 2005 Subject: [SpamCop-List] Re: Yahoo is blacklisted? In-Reply-To: References: Message-ID: John E. Malmberg wrote: > This topic is under discussion in spamcop.help and on the web forum. > > According to posts by the deputies, Yahoo is allowing spam to be sent to > their spamtraps and to spamcop.net members. > > Looking news.admin.net-abuse.sightings shows 17 spam samples, some of > them showing that same spam repeated over again from October to December. > > I would recommend contacting Yahoo and asking them why they are allowing > the spam to be sent. I think the problem is that Yahoogroups mailing lists are not under Yahoo's direct control. Anybody can set up a Yahoogroups mailing list. The vast majority of Yahoogroups mailing lists are genuine multi-way discussion lists, but every now and again the facility gets abused by spammers who set up mailing lists to send spam. Another problem is that some genuine mailing lists are not properly looked after. I have received spam through Yahoogroups mailing lists that I am subscribed to. It's up to each list administrator/moderator to ensure their lists are kept free from spam (which they can do by making sure it's "members only" and that all new subscription requests are properly vetted). Unfortunately some mailing list administrators are failing in their duty of care here. From nobody at spamcop.net Mon Jan 3 07:54:57 2005 From: nobody at spamcop.net (Miss Betsy) Date: Mon Jan 3 07:55:04 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: > Do I have this right or not > Killfilling = Filtering IIUC, yes. it is also the same as Since there are various ways of doing it, basically it means that you no longer are reading posts by that person (even if you don't do any mechanical filtering). If the 'not reading' is because of a person's attitude, then to tell hir is the final 'insult' or attempt to get the person to 'behave' If it is because you are just not interested, or don't particularly respect hir knowledge or thought processes, then generally people don't make it public. There are a few posters that I rarely look at, some that I only read the thread if Mike Easter has answered and only read his answer, and whole threads that I ignore if I am not interested in the subject. However, I do not mechanically filter anyone. Miss Betsy From TMHRVMFWREVN at spammotel.com Mon Jan 3 12:37:45 2005 From: TMHRVMFWREVN at spammotel.com (Rob) Date: Mon Jan 3 07:55:08 2005 Subject: [SpamCop-List] Re: Blocking address on YAHOO a waste of time References: Message-ID: "Fred K" wrote in message news:cr7f02$pn0$1@news.spamcop.net... > > "I'm_a_victim" wrote in message > news:cr786m$ltt$1@news.spamcop.net... > >A few weeks ago I started spending my time attempting to trace and then > >block the address of spammers. > > I currently have thousands of addresses blocked but lately I see that some > > spam I get is from a blocked address. > > > Report each one to Yahoo as spam > > Fred k > > Then sit back for a few weeks until you get a thank you note from Yahoo telling you that they take spam very seriously and will look into it :-) From me at privacy.net Mon Jan 3 07:40:58 2005 From: me at privacy.net (Frog Prince) Date: Mon Jan 3 08:00:04 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Porpoise" | > | > This is well and fine, but not useful in this case. There are a few | > trolls in social who I have killfiled who I have no problems with anymore | > because I don't see them. With this particular psycho troll, however, | > killfiles are not the answer. When somebody morphs their identity | > probably around 50 times, to date, in order to avoid being killfiled, | > resorts to posting from compromised trojaned open proxies to further avoid | > being killfiled and then starts to randomly canceling other people's | > messages, this is not something that can be solved by a simple killfile, | > or even a pretty sophisticated one. | > | | I think you missed Mike's point there..... The best Killfile is the brain - | i.e. just ignore what bothers you rather than feeding the trolls. Isn't that much like the mantra JHD (just hit delete) as a responce to spam? From nobody at spamcop.net Mon Jan 3 08:01:53 2005 From: nobody at spamcop.net (Miss Betsy) Date: Mon Jan 3 08:00:11 2005 Subject: [SpamCop-List] Re: Yahoo is blacklisted? References: Message-ID: "jrstark" wrote in message news:cra607$g7l$1@news.spamcop.net... > I am not using a yahoo mail account, or complaining about receiving > spam. SpamCop is blocking my legitimate emails from yahoo groups, and > is sending yahoo bounce notices. The yahoo servers are on the blocklist because of yahoo policies that allow spammers to actually send spam through them. The only way to keep receiving legitimate yahoo groups is to 'whitelist' them if you have that capability (you need to contact your ISP who is bouncing the email from the spamming yahoo servers who is the one who is using the spamcop blocklist). Or better yet, get your yahoo group administrator to complain to yahoo to stop allowing unmoderated groups (or whatever it is that the spammers exploit) to use the same servers as the groups who use the recommended methods to prevent spammers so that their groups always receive their messages. The only way that spam can be controlled is from the sending end and it is the sender's responsibility to use responsible servers. Miss Betsy > From notgiven at nodomain.net Mon Jan 3 08:13:39 2005 From: notgiven at nodomain.net (C. S.) Date: Mon Jan 3 08:15:03 2005 Subject: [SpamCop-List] Re: Identity Compromised? References: Message-ID: Sometime around Mon, 03 Jan 2005 02:51:31 -0800, "Bill K." deemed it necessary to offer: > How many of you have received spam which address you by your full name, > which you have never given out publicly over the Internet? I have never received such a pitch, though I have received spew targeted to the geographic region indicated by my Yahoo! address profile. If you have said information stored in any fashion on your system, I'd suggest using a full battery of scans with ad/spy/malware and antivirus detectors. Failing that, I'm one of those geeky types who would just go ahead and do a low-level format and re-install of my OS and other software, since I archive everything I want to keep for easy retrieval. > What's also disconcerting is that is that in the places where such > information was entered, such as online product registration forms for > new purchases, other information, such as street address and other > sensitive personal and private information were also entered. Likely encoded into the URL, as a tracker, though that may be too simple an explanation. > What do you figure is likely happening here? Do you suppose some of the > companies, whose sites this personal information was entered, have some > corrupt workers within extracting information from their database to use > for their own unscrupulous purposes? > > What to do in these situations? If the standard actions for such a situation prove fruitless, I'd consider contacting law-enforcement about identity theft possibly *in-progress*. The *in-progress* aspect might get them off their duffs to actually investigate, rather than telling you "So sorry, but..." > Thanks. > > -Bill From nobody at spamcop.net Mon Jan 3 08:17:27 2005 From: nobody at spamcop.net (Miss Betsy) Date: Mon Jan 3 08:15:07 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Frog Prince" wrote in message news:crbfi1$a42$1@news.spamcop.net... > | I think you missed Mike's point there..... The best Killfile is the > brain - > | i.e. just ignore what bothers you rather than feeding the trolls. > > Isn't that much like the mantra JHD (just hit delete) as a responce to spam? And JHD is a reasonable response until the incoming gets to be overwhelming to deal with. FMO, trolls will go away if the first time they post, someone posts a 'Do Not Feed the Trolls' sign and noone contributes anything more to the thread. The 'sign' is necessary for newcomers to understand about trolls. Sometimes, however, some members of the ng do not consider the person a troll and continue to respond. Then, they can be asked to take the discussion elsewhere if it is not on topic for the newsgroup (i.e. when spamcop.help was the only place to get help, a discussion of anti-spam tactics would not be appropriate). You know all this, but I am stating for those who don't know. The basic point is that ignoring (either by JHD or blocking) works, but it has to be a community effort. Anyone who responds keeps the spam or the troll going because even one response is worth its while. Miss Betsy From porpoise1954 at yahoo.co.uk Mon Jan 3 13:13:06 2005 From: porpoise1954 at yahoo.co.uk (Porpoise) Date: Mon Jan 3 08:25:02 2005 Subject: [SpamCop-List] Re: FYI References: <41D7CA2B.4C62@xyzzy.claranet.de> Message-ID: "Frog Prince" wrote in message news:crbfi1$a42$1@news.spamcop.net... > > "Porpoise" >> | > | I think you missed Mike's point there..... The best Killfile is the > brain - > | i.e. just ignore what bothers you rather than feeding the trolls. > > Isn't that much like the mantra JHD (just hit delete) as a responce to > spam? > > Not quite the same - spammers just keep spamming indiscriminately and use your bandwidth. Trolls get bored and go away when no-one plays with them. And you don't need to download their NG postings. From Kilgallen at SpamCop.net Mon Jan 3 07:43:22 2005 From: Kilgallen at SpamCop.net (Larry Kilgallen) Date: Mon Jan 3 08:45:03 2005 Subject: [SpamCop-List] Re: