[SpamCop.net - protecting the internet through technology]

[SpamCop-List] Re: Wondering about how SpamCop works

John E. Malmberg wb8tyw at qsl.network
Sun Apr 30 18:03:16 EDT 2006


Patty wrote:

> I've gotten good suggestions here which I will pass along to the others.  I
> do thank everyone for their thoughts and help.

One of the things that you should look at in the signup process is the 
I.P. address that references the web form.

Any address listed in sbl-xbl.spamhaus.org or list.dsbl.org is likely to 
be from someone attempting to forge subscriptions of either spam 
reporters or suspected spamtraps.  They are using zombied computers 
listed by the above I.P. addresses to avoid tracing by law enforcement.

Such techniques are used by spammers to attempt to locate a spamtrap by 
a binary search or retaliate against a spam reporter, or to attempt to 
cause a blocking list like spamcop.net to be used less.

In addition, your web signup process should require a human review of 
any attempted sign-up from an I.P. address with out a working rDNS.

For some time now, the RFCs (effective rules of the internet) require 
all systems connected to the internet to have a correct rDNS.

You should also set up a backup mailing system with another I.P. address 
for use when their is a problem with the primary mail server's I.P. 
address or network connections.  Backhoe operators are very good at 
finding networks with out working disaster recovery procedures.

-John
wb8tyw at qsl.network
Personal Opinion Only


More information about the SpamCop-List mailing list