I received this spam this morning. As of 6:41am, it wasn't fixed. I didn't test it *right* before I sent the e-mail, but I really didn't have a reason to assume it had been fixed between 6:40 and 10am (when I sent my original post..), considering that I have been e-mailing them for over a week now and nothing has been done. Return-Path: big3ld@worldnet.att.net Received: from gull.prod.itd.earthlink.net (gull.prod.itd.earthlink.net [207.217.120.85]) by hq.idt.net (8.8.8/8.8.8/TANNHAUSER) with ESMTP id JAA12380 for <adam@hq.idt.net>; Mon, 17 Aug 1998 09:42:44 -0400 (EDT) Received: from mail.earthlink.net (1Cust162.tnt2.sdg1.da.uu.net [208.250.122.162]) by gull.prod.itd.earthlink.net (8.8.7/8.8.5) with SMTP id GAA29453; Mon, 17 Aug 1998 06:41:55 -0700 (PDT) Message-Id: <199808171341.GAA29453@gull.prod.itd.earthlink.net> To: big3ld@worldnet.att.net Date: Mon, 17 Aug 98 18:49:56 EST From: big3ld@worldnet.att.net (8.9 cent flat rate - NO Switching needed) Subject: 8.9 cent/min: Dial 1010948 = FREE Registration Offer. X-UIDL: d60237bbfb9c109a8e74c8de0b9ff145 --Adam --- bash: syntax error near unexpected token `:)' Adam D. McKenna adam@flounder.net -----Original Message----- From: Sam Hayes Merritt, III <harter@feeding.frenzy.com> To: Adam D. McKenna <adam@flounder.net> Cc: nanog@merit.edu <nanog@merit.edu> Date: Monday, August 17, 1998 11:04 AM Subject: Re: open relays at Earthlink On Mon, 17 Aug 1998, Adam D. McKenna wrote:
Earthlink has the following open mail relays: gull.prod.itd.earthlink.net
feeding: {13} rly2 gull.prod.itd.earthlink.net Connecting to gull.prod.itd.earthlink.net ... <<< 220 gull.prod.itd.earthlink.net ESMTP Sendmail 8.8.7/8.8.5; Mon, 17 Aug 1998 07:58:06 -0700 (PDT)
HELO feeding.frenzy.com <<< 250 gull.prod.itd.earthlink.net Hello feeding.frenzy.com [209.198.128.35], pleased to meet you MAIL FROM:<sam_merritt@hotmail.com> <<< 250 <sam_merritt@hotmail.com>... Sender ok RCPT TO:<harter@feeding.frenzy.com> <<< 550 <harter@feeding.frenzy.com>... Relaying Denied rly2: relay rejected - final response code 550
snipe.prod.itd.earthlink.net
feeding: {17} rly2 snipe.prod.itd.earthlink.net Connecting to snipe.prod.itd.earthlink.net ... <<< 220 snipe.prod.itd.earthlink.net ESMTP Sendmail 8.8.7/8.8.5; Mon, 17 Aug 1998 08:00:04 -0700 (PDT)
HELO feeding.frenzy.com <<< 250 snipe.prod.itd.earthlink.net Hello feeding.frenzy.com [209.198.128.35], pleased to meet you MAIL FROM:<sam_merritt@hotmail.com> <<< 250 <sam_merritt@hotmail.com>... Sender ok RCPT TO:<harter@feeding.frenzy.com> <<< 550 <harter@feeding.frenzy.com>... Relaying Denied rly2: relay rejected - final response code 550
I know this because I have been getting spammed by someone using them for the past week. I have tried e-mailing abuse@earthlink.net several times and have received no response.
I'm hoping a clueful Earthlink admin will see this post and take the appropriate action. If not, then maybe Earthlink should be "nominated" for RBL.
They must have fixed it (or you didn't test it). Lets not be too hasty. Sam
On Mon, 17 Aug 1998, Adam D. McKenna wrote:
Received: from gull.prod.itd.earthlink.net (gull.prod.itd.earthlink.net [207.217.120.85]) by hq.idt.net (8.8.8/8.8.8/TANNHAUSER) with ESMTP id JAA12380 for <adam@hq.idt.net>; Mon, 17 Aug 1998 09:42:44 -0400 (EDT) Received: from mail.earthlink.net (1Cust162.tnt2.sdg1.da.uu.net [208.250.122.162])
This probably means that Earthlink is renting uunet ports for their dialup business. You can complain to abuse@uunet about spam originating from 1Cust162.tnt2.sdg1.da.uu.net, but they will do nothing except forward your complaint to someone else (the reseller). It can take anywhere between 3 days and a week for them to stop a spammer. One has been operating out of .nyc*.da.uu.net for a couple of months now. The uunet abuse staff doesn't enforce the uunet AUP unless uunet is billing the user directly, so you might try emailing noc@uunet if the spammer is online. Last time i looked, the uunet NOC was still acting in a responsible manner. Bill
participants (2)
-
Adam D. McKenna -
Bill Becker