[SpamCop-Mail] Re: Instant Bypass of Spamcop Filter

[Chris Parker]

"d9d" <d9d at nowhere.net> wrote in message
news:busdkp$e40$1 at news.spamcop.net...
> Seems spammers are using auxillery smtp servers for their outgoing mail
when Spamcop rejects a mesage.  For example, see the following clip from my
smtp server logs.  As you can see, it took two seconds to send that same
spam via a completely different IP (2 seconds).
>
> d9d
>
> 5:36:22 PM SMTP: [2] '12-217-236-175.client.mchsi.com' [12.217.236.175]
connected.
> 5:36:22 PM SMTP: [2] SMTP connection to '12-217-236-175.client.mchsi.com'
established.
> 5:36:24 PM SMTP: [2] Rejecting message from host
12-217-236-175.client.mchsi.com: Mail rejected - you are listed in Spamcop
(Spam) - http://spamcop.net/bl.shtml
> 5:36:24 PM SMTP: [2] Connection error (Winsock: Returned by WSARecv or
WSARecvFrom to indicate the remote party has initiated a graceful shutdown
sequence.).
> 5:36:26 PM SMTP: [2] 'bzq-218-183-33.red.bezeqint.net' [81.218.183.33]
connected.
> 5:36:26 PM SMTP: [2] SMTP connection to 'bzq-218-183-33.red.bezeqint.net'
established.
> 5:36:30 PM SMTP: [2] Receiving message to
'C:\LANSUITE\io\internet\2f44b04f.d'.
> 5:36:32 PM SMTP: [2] Message received (1450 B).
> 5:36:36 PM SMTP: Processing message '2f44b04f.x'/'2f44b04f.d'
> 5:36:37 PM SMTP: Message delivered to 1 local users.
> 5:36:37 PM SMTP: Total processed 1 RFC-822 messages
> 5:37:10 PM SMTP: [2] Connection error (Winsock: Returned by WSARecv or
WSARecvFrom to indicate the remote party has initiated a graceful shutdown
sequence.).

While I have seen what you are talking about, I do not see anything in your
logs that indicate that is what happened in this case.  Maybe I've missed
something.