Anyone else have any information on this?
Cyber Promotions has a machine at IDCI in New Jersey, IP address 207.124.161.54, which identifies itself as relay5.ispam.net. It appears to be a generic Unix box running a version of sendmail that adds the stupid "CLOAKED" header to mail that it relays. IDCI gets its feed from CWI which is in turn fed by Alternet. If you complain to IDCI about being spammed, you'll get a sanctimonious form letter from their Mr. Mossholder which makes the laughable claim that there's no legal basis on which he could terminate a spammer's account even if he wanted to. CWI seems to have forgotten that they have an ISP subsidiary, people have trouble finding anyone connected to it. You may recall that Cyber Promotions signed up a bunch of "bandwidth partners" on whose networks CP located PCs so CP could evade the router blocks against CP's home network. As far as I can tell, IDCI is the only one they have left. This is straying away from NANOG, there's plenty of discussion of this on n.a.n-a.e and the various e-mail lists about spam. -- John R. Levine, IECC, POB 640 Trumansburg NY 14886 +1 607 387 6869 johnl@iecc.com, Village Trustee and Sewer Commissioner, http://iecc.com/johnl, Finger for PGP key, f'print = 3A 5B D0 3F D9 A0 6A A4 2D AC 1E 9E A6 36 A3 47