- Test - lists.nanog.org

to control spam let's break the net?
by Robert Laughlin 01 Nov '97

01 Nov '97

Well spam is bad, but I do not think this is the answer either. DataXchange has spent lots of efforts at spam control, but apparently Karl does not think we have done enough. Based on receiving this one email, relayed thru us, he has decided to put a block in place. Most of our customers use portal.dx.net and other machines in the same address block as a mail relay, so he has effectively cut off most of our ISPs and their customers from his net. Of course maybe his network is pure, and he has found the magic bullet that stops any of his customers from spamming or relaying spam from any of his hosts or his customer's hosts. Regards, Robert Laughlin president ---------------------------------------------------------------------------- DataXchange sales: 800-863-1550 http://www.dx.net Network Operations Center: 703-903-7412 -or- 888-903-7412 ---------------------------------------------------------------------------- On Fri, 31 Oct 1997, Karl Denninger wrote: > > > Dear Site Administrator: > > Your netblock has been banned from our service for one or more of > the following offenses: > > 1) You have been used as a mail relay for spam or other unsolicited > electronic mail, and we are unable to determine if you are an > unwilling victim or a participant in the scheme. > > 2) Your domain ORIGINATED a spam or other unsolicited transmission > of electronic mail to multiple accounts on our service, and we > have received complaints or otherwise detected this unsolicited > transmission. > > 3) A customer of your service appears to have used *OUR* servers > as a relay for unsolicited email or other traffic to other > unwitting users of the Internet. > > If the offense is (2) or (3), your netblock has been PERMANENTLY blocked > until and unless you do one of the following: > > 1) Identify and remove the perpetrator of this offense. We require > documentation that the perpetrator has been removed from your > service and will not be sold access through your organization > or any affiliate or subsidiary in the future. Note that this > option will be offered only ONCE per perpetrator (ie: if you > misrepresent that a given organization has been removed, we will > not allow you this option a second time) > > 2) Identify *TO US* the source and perpetrator of this offense. > This includes their physical address, telephone number, and > sufficient unambiguous identifying information so that we may > take remedial action ourselves against this party if we so > choose to do so. > > 3) You may choose to pay MCSNet a fee for the processing of the spam > or other UCE which your organization originated, whether by yourself > or on behalf of one of your customers who you choose to protect. > The fee is currently US $500.00, doubled for each offense (ie: the > first offense is $500, the second $1000, the third $2000, etc). > The block will be removed when the fee has been paid in good US > funds. HOWEVER, note that paying the fee does not prevent the > block from being reinstated if you spam us again (in which case > the fee escalates as stated above). > > If the offense is (1) above, the block will be removed when you demonstrate > to our satisfaction that further relaying from the originating source is no > longer possible. > > Since you can no longer transmit email to our domain, to correspond with us > you must call our technical department at +1 312-803-6271 (press "T"). A > technical support representative will assist you. This department is open > from 8:00 AM - Midnight Monday through Friday, and 9-5 on weekends. > > Thank you. > > MCSNet Management > > > -----Forwarded message from 56694256(a)compuserve.com----- > > Received: from portal.dx.net (portal.dx.net [199.190.65.2]) by Mailbox.mcs.net (8.8.7/8.8.2) with ESMTP id EAA05582; Fri, 31 Oct 1997 04:03:14 -0600 (CST) > From: 56694256(a)compuserve.com > Received: from dx.net (ppp-206-171-250-28.vntrcs.pacbell.net [206.171.250.28]) > by portal.dx.net (8.8.5/8.8.5) with SMTP id FAA10023; > Fri, 31 Oct 1997 05:00:10 -0500 (EST) > Date: Fri, 31 Oct 97 01:04:14 EST > To: FreeSatellite(a)aol.com > Subject: FREE SATELLITE DISH > Message-ID: <> > > WOULD YOU LIKE TO USE A FREE SATELLITE DISH ??? > > Sounds too GOOD to be TRUE, right? Believe me, it's not! All you have to do is > call 800-733-8643, tell them that you want special offer # 954123595, leave your > name and telephone number. We will call you shortly and arrange for you to > receive your FREE Satellite Dish. A small $99.00 installation charge is > all that you pay (you will not want to install it yourself!) and the small monthly > television charge just like cable but YOU DO NOT PAY FOR THE DISH! > > Now, you can receive cable channels over a Satellite Dish - pretty hot huh? > And eventually you might use the same dish for high speed internet access. > > Digital clarity, many options, 2 FREE Remotes AND a FREE DISNEY WATCH. > Just in time for the Holidays. There are many more features available to you > for free, but first call 800-733-8643 and remember to mention Special Offer > # 954123595, your name and telephone number. > > SIMPLE - EASY - AFFORDABLE - AND A GREAT DEAL!!! > DON'T DELAY - CALL TODAY!!! > > > -----End of forwarded message----- >

3 2

Re: Spam Control Considered Harmful
by Art Houle 01 Nov '97

01 Nov '97

So what do we do about this enterprising businessperson? ---------- Forwarded message ---------- JUST RELEASED... 27,000,000 Email Addresses! Plus 12 Bonuses... Including FREE bulk e.mail software. These addresses are less than 21 days old. EARN INSANE PROFITS WITH THE RIGHT FORMULA If you have a product, service, or message that you would like to get out to Thousands, Hundreds of Thousands, or even Millions of people, you have several options.Traditional methods include print advertising, direct mail, radio, and television advertising. They are all effective, but they all have two catches: They're EXPENSIVE and TIME CONSUMING. Not only that, you only get ONE SHOT at making your message heard, by the right people. The INTERNET, the "Global Communications Frontier" has changed this dramatically, including making countless individuals wealthy. "Electronic Marketing," as it's commonly referred to, has effectively leveled the playing fields of all types businesses. AmeriNet has been in the online marketing business for over 5 years. We can help make your goals come true. We have helped many individuals succeed in marketing their product effectively. It's very simple to do. In fact soon you will have the problem of what to do with all the cash you will make from sending out bulk email. Here is just one of many true success stories we have seen... We did a mailing of 1 1/2 million emails for one of our customers. He was selling a home workers manual for $29.95. His results are very typical and scary. He took in over 700 orders! 700 x $29.95 = $20,000. This gentleman was so amazed, that after being skeptical, it had really happened to him, he made it, he found a niche. That niche was email! He went on to buy our full list and will be set for life in less than six months time. All this from selling a simple manual via e.mail. That was just one of the many success stories we hear everyday. It may all sound to good to be true. Well, we can tell you this. It really does work. Why else are so many individuals doing it? They are not just wasting their time. They are all making mega bucks. Don't even hesitate on this one or you will miss out on the most effective way to market anywhere..PERIOD! HERE'S THE BOTTOM LINE AND WHAT WE CAN DO FOR YOU Here is what you get when you order today! >> 27 Million Email Addresses... 1 per line in simple text format on a CD. Multiple files of 250,000 or greater (no codes needed to open files). You will receive email addresses of the following domains... AOL, PRODIGY, COMPUSERVE, DELPHI, GENIE, JUNO, PIPELINE, INTERAMP, MSN, MCI, and 5 MILLION OTHER MIXED EMAIL ADDRESSES (.com, .net). All names listed above are seperated in files by domain name for your convenience. PLUS THESE BONUS SPECIALS... >> 2 Free Bulk Email Programs...Pegasus and Eudora. You will be able to load our names into these 2 Distribution List Software's (which will create Distribution Lists Saving you hours of work) for immediate, around the clock launching! You can whip out as many distribution lists as you like, and depending on the speed of your modem and the length of your message, you will be able to send out around 10,000 to 30,000 messages per hour for free. >>"Stealth Mass Mailer" Bulk Email Demo. This is the most popular bulk emailer in the world. You can test drive it for free. This product sends over 250,000 per hour. >> Super Note Pad... This software will help manage your large text files for you. >> Winzip Self Extractor... This program will be needed when de-compressing a compressed file. It will come in handy when dealing with files of zip format. >> Over 5,000 Places To Advertise For Free! >> "Profits 2500 Series"... 7 manuals that will teach you how to market on the internet and what offers work and which ones to stay clear of. Also we will show you where to find web designers for free and much, much more. YOU GET EVERYTHING FOR ONLY $199.00 >>>SPECIAL BONUS... If you order within 48 hours you can deduct $50.00 from the listed price. Limited time only! We have previously sold the seven manuals alone for over $400. Now you can have the complete package for the low price of only $149.00 Don't even hesitate on this one.. Reserve yours today! All lists are completely free of any Duplicates. We also on a continual basis, add New Names and Remove Undeliverables and Remove Requests. The result is the Cleanest Email Addresses Available Anywhere to use over and over again, for a FRACTION of the cost that other companies charge. Typical rates for acquiring email lists are from 1 cent to as high as 3 cents per email address - that's "INFORMATION HIGHWAY" ROBBERY!. How do I protect my e.mail address? 1st of all, send your e.mail with the Stealth Mass Mailer. This program will protect your email address while sending your e.mail at speeds of up to 250,000 messages per hour (28.8 connection). 2nd, collect your inquiries and remove requests via AutoResponders . Using AutoResponders, you don't even have to read the flames. Just move them to your remove list and forget about them! Start earning mega money and get started now! If you have ANY further questions please feel free to contact us anytime at: amerinet(a)prodigy.com and please type "QUESTIONS" in the subject line. To order our email package, simply print out the EZ Order form below and fax or call us anytime. We accept Visa ,Mastercard,American Express, Personal Check or Money Order. ---------------------------------------- EZ Order Form Please fax your order form to: 561-833-3968 Or call our 24 Hour Order Line at: 1-330-438-0229 (orders only) We will deduct an additional $5.00 for all phone and faxed orders. _____Yes! I would like to order your 27,000,000 email addresses Plus all the bonuses for only $199.00 _____I am ordering within 48 Hours! Please deduct $50.00 from the price making the total only $149.00 *Please select one of the following for shipping. ____I would like to receive my package OVERNIGHT. I'm including $12 for shipping. ____I would like to receive my package PROIRITY delivery. I'm including $4 for shipping. ____Please add $10.00 for all orders from outside the U.S. DATE_____________________________________________________ NAME____________________________________________________ ADDRESS_________________________________________________ CITY, STATE, ZIP__________________________________________ PHONE NUMBER_________________________________________ EMAIL ADDRESS__________________________________________ TYPE OF CREDIT CARD: ______VISA _____MASTERCARD____AMERICAN EXPRESS CREDIT CARD# __________________________________________ EXPIRATION DATE________________________________________ NAME ON CARD__________________________________________ AMOUNT $___________________ SIGNATURE:x________________________ DATE:x__________________ ---------------------------------------------------- Best of Luck!! We apologize if this e.mail was sent to you in error. To be permanently removed from all mailing lists simply send any e.mail to: remove(a)bulkcenter.com Thank You!

3 2

Spam Control Considered Harmful
by Daniel Karrenberg 01 Nov '97

01 Nov '97

I am worried about the tools we are developing and deploying to control spam. Some of them are esentially centralsied methods of controlling Internet content. Paul's anti-spam feed for instance prevents users of some providers from seeing spam. The user has no choice; they cannot opt to receive spam other than by switching to another provider. Even worse: they may not even be aware that they are "missing" some content. Combatting spam is considered a Good Thing(TM) by almost everybody here, including myself. However the same technology could just as easily be used to do Bad Things(TM). Even worse: if it works it demonstrates that *centralised control* of the content of Internet services like e-mail is *feasible*. This will give some people ideas we may not like, and sometime in the future we may ask ourselves why we have done this. The end does not always justify the means. I hope that methods like the anti-spam feed will not be taken up widely. Please consider the consequences before you use them. I stress that I do not question the morality or good intentions of those involved. I am just concerned about the almost ubiquitous and apparently unreflected zeal that spam seems to evoke and the danger of it making us accept methods we would otherwise despise. I would prefer to see more work in technology that is less centralised and gives the users a choice of the content they wish to see. Yes this may be harder to do, but the consequences of deploying the easier methods may be just too severe. Waehret den Anfaengen (beware of the beginnings) Daniel PS: I hope this is more coherent than my contribution at the meeting yesterday when my brain failed due to jet-lag while my mouth was still working perfectly ;-).

19 33

Re: Problems with specific routing policies for each exchange point
by Danny McPherson 31 Oct '97

31 Oct '97

> I was not questioning the function, only the requirement. It seems > that if the problem exist between NAPNET and GENUITY, it might exist > elsewhere and changing to the specific ASes would be a simple fix. > > Are there cases where an AS macro would be really beneficial in the > inet-rtr.rs-(in|out) statements? Well, assuming you use as-macros as they were intended (to simply objects) .. it shouldn't be a problem. The code is obviously broken and Jake is fixing it. I assume that we could create another 2 macros listing every AS individually, but then that'd be more changes that'd we'd have to make every time we pick-up or drop an AS. I've removed AS-NAPNET from the AS-GENUITY macro until the problem is corrected.. -danny > Frankly, it's paranoia that causes me to only put specific ASes in the > statements. While I'm willing to let an ISP tell me what ASes they are > carrying, I want to know exactly with whom I'm exchanging routes. > > I always thought of Randy as the conservative type, but maybe not as > much as I. > -- > R. Kevin Oberman, Network Engineer > Energy Sciences Network (ESnet) > Ernest O. Lawrence Berkeley National Laboratory (Berkeley Lab) > E-mail: oberman(a)es.net Phone: +1 510 486-8634

3 2

The Cidr Report
by Tony Bates 31 Oct '97

31 Oct '97

1 0

potentially profitable spam countermeasures
by Erik E. Fair 31 Oct '97

31 Oct '97

Those of you who operate ISPs that accept credit-card, dial-up customers (and therefore have a problem with spammers abusing your services) might find this item of interest. Earthlink's Acceptable Use Policy has a $200 penalty for spamming in it. I am told that with the advent of this policy, there was a dramatic drop in abuse of their service. See http://www.earthlink.net/company/aupolicy.html for the details. The key section is 2.3.1.3. Member specifically agrees that he/she/it will not utilize the EarthLink Network service, EarthLink Network's equipment or any EarthLink Network electronic mail address in connection with the transmission of the same or substantially similar unsolicited message to 50 or more recipients or 15 or more newsgroups in a single day. For each day upon which this provision is violated, Member agrees to pay EarthLink Network $10.00 per day for an unintentional violation of this provision, but where warranted, such as in the case of an accidental transmission, EarthLink Network may waive all or part of the applicable charge. In cases of willful violations of this provision, Member agrees to pay EarthLink Network $200.00 per day. EarthLink Network at its sole discretion shall determine whether such a violation was unintentional or willful. Payment by member under this provision shall not prevent EarthLink Network from seeking to obtain other legal remedies against member, including other damages or an injunction. So, set the agreement up right, find the spammers abusing your service, and whack them with a fine, per the agreement. Recover your cost, plus lost goodwill. This will not eradicate spam. However, if everyone does this, the effect should be to sharply curtail the penny-ante players who abuse the relative anonymity of dial-up Internet access. We would be left with the "big" spammers who have their own connections, which should be easier to effectively deal with. FYI, Erik E. Fair fair(a)clock.org

3 2

Re: potentially profitable spam countermeasures
by Eric Germann 31 Oct '97

31 Oct '97

In the early days of the US Postal System, the recipient paid for letter received, because the delivery mechanisms were unreliable and subject to failure due to Indians, bears, wolves, etc. Is SMTP mail delivery the Pony Express of the late 20th century? Eric At 10:47 AM 10/31/97 -0500, Peter E. Giza wrote: >My bucks worth. The *real* issue is that spam steals bandwidth by using >more >than an "average" users worth of bandwidth. Postal systems the world >over >have a simple solution, one must buy a stamp first. I am not advocating >an >email "pay before you use policy", however if one were to look at the >number >of out-going messages that a "typical" email user generates on any given >day >it likely on the order of <100. Given this, if everyone's AUP stated >that unless >negotiated by said user and ISP previously, that all out-going email >exceeding ><some number> would be subject to a bulk mail charge of $X.X per message. > >This still will not fix the dial-up hit and run artists that plague our >networks >today. The only way to truly solve the spam issue is through >re-architecting >the email systems that are in use today to use some of the features to >prevent >this abuse. I know this sounds like a global peace pitch, but if there >were >a standard by which all mailers would follow that contained the feature >sets >needed to eradicate spamming then and only then may it be possible to >stop >spending valuable time and money fighting this issue. Even the threat of >federal >penalty is not enough to stop spammers, just look how hard it is for the >postal >service to track and prosecute clever mail fraud houses. > >I guess what I am saying is that we and the developers of email and >other systems >that use these networks need to work together to solve these issues at >the product >layer. Waiting for legislation may turn out to be very frustrating and >in the mean >time the theft continues. Black holing while effective carries with it >other distasteful >side-effects/concerns as we have witnessed. We can toss around all the >legalese >we want to and will continue to be ineffective at significantly reducing >the problem. >This is just like CB radio, "who is gonna catch me?!" is what spammers >are saying >and they are right. When you have thousands of people abusing the system >it is >really difficult to prosecute them, so the system turns into a pestilent >pile of garbage. >I submit that is an engineering problem, waiting for lawyers and senators >will bring >the system down. > >-pete > >Erik E. Fair (Timekeeper) wrote: > >> Those of you who operate ISPs that accept credit-card, dial-up >> customers (and therefore have a problem with spammers abusing your >> services) might find this item of interest. >> >> Earthlink's Acceptable Use Policy has a $200 penalty for spamming >> in it. I am told that with the advent of this policy, there was a >> dramatic drop in abuse of their service. >> >> See http://www.earthlink.net/company/aupolicy.html for the details. >> The key section is >> >> 2.3.1.3. Member specifically agrees that he/she/it will >> not utilize the EarthLink Network service, EarthLink >> Network's equipment or any EarthLink Network electronic >> mail address in connection with the transmission of the >> same or substantially similar unsolicited message to 50 or >> more recipients or 15 or more newsgroups in a single day. >> For each day upon which this provision is violated, Member >> agrees to pay EarthLink Network $10.00 per day for an >> unintentional violation of this provision, but where >> warranted, such as in the case of an accidental transmission, >> EarthLink Network may waive all or part of the applicable >> charge. In cases of willful violations of this provision, >> Member agrees to pay EarthLink Network $200.00 per day. >> EarthLink Network at its sole discretion shall determine >> whether such a violation was unintentional or willful. >> Payment by member under this provision shall not prevent >> EarthLink Network from seeking to obtain other legal remedies >> against member, including other damages or an injunction. >> >> So, set the agreement up right, find the spammers abusing your >> service, and whack them with a fine, per the agreement. Recover >> your cost, plus lost goodwill. >> >> This will not eradicate spam. However, if everyone does this, the >> effect should be to sharply curtail the penny-ante players who >> abuse the relative anonymity of dial-up Internet access. We would >> be left with the "big" spammers who have their own connections, >> which should be easier to effectively deal with. >> >> FYI, >> >> Erik E. Fair fair(a)clock.org > > > > > ============================================================================ ==== Eric Germann Computer and Communications Technologies ekgermann(a)cctec.com Van Wert, OH 45891 Phone: 419 968 2640 http://www.cctec.com Fax: 419 968 2641 Network Design, Connectivity & System Integration Services A Microsoft Solution Provider

1 0

Re: Spam Control Considered Harmful
by Bill Unsworth 31 Oct '97

31 Oct '97

At 23:16 30/10/97 -0000, you wrote: >>> And what will the FBI do when spammers leave the US... > >This is really a red herring -- any spam control law, even one of the >bad ones like the Murkowski bill applies to any resident of the U.S., >even if he hires someone in Moldova to send out his spam. To escape >U.S. law the spammer has to move his entire business offshore. In >practice we're unlike to see much offshore spam because the goal of >spammers is to collect money from suckers, and it's a whole lot harder >to do so if you don't have a domestic mailing address and bank >account. > >Also, as others have pointed out, there aren't a lot of other >countries with low cost unmetered Internet connections and, other than >Canada, even those are connected to the U.S. by long, thin, expensive >undersea cables whose proprietors aren't likely to enjoy having them >filled with spam and angry responses. You mean like now when spam sent to .com's outside the USA ends up hitting us! Yep it would be great if the USA isps did something about Spam cos it sure dont come from anywhere else in any quantity. :-)) > > >-- >John R. Levine, IECC, POB 640 Trumansburg NY 14886 +1 607 387 6869 >johnl(a)iecc.com, Village Trustee and Sewer Commissioner, http://iecc.com/johnl, >Finger for PGP key, f'print = 3A 5B D0 3F D9 A0 6A A4 2D AC 1E 9E A6 36 A3 47 > > U-NET Limited - Global Transit Division mailto:world@u-net.net http://world.u-net.net Tel 44 1925 484444 Fax 44 1925 484466

1 0

(forw) Re: Spam Control Considered Harmful
by Patrick Lynch 31 Oct '97

31 Oct '97

Well, according to your post, this person is probably distributing copyrighted material in his package and doesn't care about proper licensing. This is just a theory, no proof. Sometimes the easiest way to get rid of spam kings like this is by measures already in place. -----Forwarded message from Art Houle <houle(a)zeppo.acns.fsu.edu>----- So what do we do about this enterprising businessperson? ---------- Forwarded message ---------- JUST RELEASED... 27,000,000 Email Addresses! Plus 12 Bonuses... Including FREE bulk e.mail software. SNIP! -----End of forwarded message----- -- Patrick Lynch -- INDnet Network Engineer E-mail -- plynch(a)ind.net, noc(a)ind.net Phone: 317.263.8966 FAX: 317.263.8831

1 0

Kashpureff in custody.
by Marc Hurst 31 Oct '97

31 Oct '97

Eugene Kashpureff, known for his redirect of the NSI web page, was apprehended this morning in Toronto by undercover RCMP detectives. Pending a deportation hearing, he will be returned to New York to face Felony Wire Fraud charges that were sworn out against him after he had settled out of court with NSI in regard to their civil suit. Early in the week Eugene relinquished control of the Alternic to an adhoc industry group and that group will be making an announcement in the next few days. A this time I have no further information to volunteer. Sincerely Marc Hurst

1 0