https://wjla.com/news/local/timeline-darren-thornton-sex-crime-case-fairfax-county-public-schools-fcps-virginia-what-we-know-arrest-charges-conviction-chesterfield-county-police-hiring-firing-corrections

The outbound mail DID bounce. And the bounce message is what ended up in the sender's spam folder which the sender never checked... until later when they started the investigation. No mail was dropped on the floor by anti-spam.

There is still a place for things to be formally delivered on a piece of paper. Sure, send the email for quick notification, but also back it up with a physical letter sent via certified mail.

This x100. 

1. Send the email for notification.
2. Pick up the phone. "Hey, we just emailed you an official notification about one of your employees that was arrested. Can you please get back to us within 24h to confirm that you received it?"
3. Send a physical certified letter. 

Just a LITTLE bit of extra effort would have prevented all of this, and the nerds could poke at the email situation at their own pace. 

On Wed, Aug 24, 2022 at 2:06 AM Crist Clark <cjc+nanog@pumpky.net> wrote:
From the timeline here,

https://wjla.com/news/local/timeline-darren-thornton-sex-crime-case-fairfax-county-public-schools-fcps-virginia-what-we-know-arrest-charges-conviction-chesterfield-county-police-hiring-firing-corrections

The outbound mail DID bounce. And the bounce message is what ended up in the sender's spam folder which the sender never checked... until later when they started the investigation. No mail was dropped on the floor by anti-spam.

There is still a place for things to be formally delivered on a piece of paper. Sure, send the email for quick notification, but also back it up with a physical letter sent via certified mail.

And not that I feel sorry for the guy who was convicted, more than once, of soliciting a minor, but it doesn't necessarily mean he's a pedophile.


On Tue, Aug 23, 2022 at 8:09 PM Jeremy Chequer <jeremy@resolvergroup.com.au> wrote:

Or at the bare minimum, require a response. Just assuming the email went through and then blaming that for a pedo keeping their job for another year and a half is just bad on the officials side. With scams increasing, measures need to be in place. Unfortunately, several agencies seem to think that you should just trust anything that comes from their address but that’s how we end up with email spoofing. The agencies need to ensure they have the right setup in place to avoid ending up in spam and also ensure they are following up in some form, especially when its to do with child safety.

 

- Jeremy

 

From: NANOG <nanog-bounces+jeremy=resolvergroup.com.au@nanog.org> On Behalf Of Suresh Ramasubramanian
Sent: Wednesday, 24 August 2022 12:52 PM
To: Eric Tykwinski <eric-list@truenet.com>
Cc: nanog@nanog.org
Subject: Re: email spam

 

[External Sender] Be cautious of any links or attachments within this email as it has come from an External Sender.

100%. Also - there’s no way to offer a delivery sla for email.  If you have something business critical, let alone anything that affects child safety, pick up a phone and call, or send an officer over to the school.

 

--srs


From: Eric Tykwinski <eric-list@truenet.com>
Sent: Wednesday, August 24, 2022 8:14:16 AM
To: Suresh Ramasubramanian <ops.lists@gmail.com>
Cc: nanog@nanog.org <nanog@nanog.org>
Subject: Re: email spam

 

Sorry about the bad examples, but I remember contacting both about issues with SPF multiple times.  They both have seemed have to fixed things at least searching my logs for the last week.  Most of my customers have had to whitelist them though for past issues. It’s also ezpassnj.com for the NJ collection.  Point still stands, assume incompetence over malice.

 

Sincerely,

 

Eric Tykwinski

TrueNet, Inc.

P: 610-429-8300



On Aug 23, 2022, at 10:20 PM, Eric Tykwinski <eric-list@truenet.com> wrote:

 

Bill,

 

Not only that, did they even follow their own rules, I’ve been fighting with septa.org, the Pennsylvania train authority, and easypassnj.com, the New Jersey transit toll collectors about invalid SPF records for years, and they literally don’t give a shit.  If they say to put it in spam, well than that is their own fault.

 

Sincerely,

 

Eric Tykwinski

TrueNet, Inc.

P: 610-429-8300



On Aug 23, 2022, at 10:00 PM, Suresh Ramasubramanian <ops.lists@gmail.com> wrote:

 

Without saying why the mail was blocked (dumb content filter looking for porn? a spamhaus listing because the police server was hacked? something else?) that’s not going to help too much.

 

I’ve been spam filtering stuff at large providers since the late 90s and it never gets any easier to block 100% spam or let 100% legit mail through.

 

—srs

 

--srs


From: NANOG <nanog-bounces+ops.lists=gmail.com@nanog.org> on behalf of William Herrin <bill@herrin.us>
Sent: Wednesday, August 24, 2022 7:03:52 AM
To: nanog@nanog.org <nanog@nanog.org>
Subject: email spam

 

Hello,

To folks at places like Google and Godaddy which have gotten, shall we
say, overzealous about preventing spam from entering their systems,
consider the risk:

https://www.washingtonpost.com/education/2022/08/23/fairfax-county-counselor-solicitation-minor/

"Chesterfield County police said emails notifying Fairfax County
Public Schools that an employee was arrested and charged with
soliciting prostitution from a minor were not delivered to the school
system."

Long story short, the pedo kept his school job another year and a half.

There was once a time when both the outbound emails and the bounce
messages when they failed... worked. It was a spammy place but the
important emails got through.

Regards,
Bill Herrin