Re: spamcop

["s. keeling" <keeling@spots.ab.ca>]

Mumia W.. <paduille.4058.mumia.w@earthlink.net>:
>  On 09/28/2006 12:23 PM, Andrew Sackville-West wrote:
> > [...]
> > also, threadjacking, but its spam related... is anyone else getting a
> > lot of these "bounced email" spam? I'm getting a TON of it lately. It
> > all has a .zip or .com binary attachment, so obviously its a virus or
> 
>  I've gotten a couple of such messages with the virus removed.

Follow it up.  Complain to the bouncer that their SMTP is
misconfigured and they're sending bounce messages to innocent third
parties whose From: addresses were forged by spammers.  Here's some
aliases to help you look up the originator's complaint address which
you can Cc: in the same mail to get the originator's account killed
(there may be others, and I'd appreciate hearing about them :-):

   afnic='whois -h whois.afrinic.net'
   apnic='whois -h whois.apnic.net'
   arin='whois -h whois.arin.net \+'
   brnic='whois -h whois.registro.br'
   jpnic='whois -h whois.nic.ad.jp'
   krnic='whois -h whois.krnic.net'
   lacnic='whois -h whois.lacnic.net'
   ripe='whois -h whois.ripe.net'

Forward inline (not as attachment) to the abuse address and have them
deal with their problem.  Two birds, one stone.  Kill a spammer,
and educate a clueless admin.  "Received:" is your friend.  Learn to
read them.  It's not difficult.


-- 
Any technology distinguishable from magic is insufficiently advanced.
(*)    http://www.spots.ab.ca/~keeling          Linux Counter #80292
- -    http://www.faqs.org/rfcs/rfc1855.html    Please, don't Cc: me.
       Spammers! http://www.spots.ab.ca/~keeling/emails.html