Sudden Spam Epedemic

On my NG feed, we've just received 3 cable box descrambler plans and one
pornographic binary - is everyone seeing this or are the rest of you lucky
enough to have decent filters? Anything we can do about it?

Stuart

"Stuart Moore" <stu...@bigfoot.com> writes:

> On my NG feed, we've just received 3 cable box descrambler plans and one
> pornographic binary - is everyone seeing this or are the rest of you lucky
> enough to have decent filters?

They also arrive here (at least the 3 cable TV ones).


> Anything we can do about it?

Most spammers:

Identify the providers of:

- their net access (see the NNTP-Posting-Host: line)
- their usenet access (see the tail of the Path: line)
- their mail boxes (particularly those to anwer to)
  (see the From:, Reply-To: lines and addresses in the text)
- their advertised web sites (see URLs in the text)

and then mail (forward the spam) to abuse@provider and postmaster@provider
and demand to have the net access or mail box or web site closed down.

Repeat this for every spam that makes it through to you. Usenet and Email.
The more people who do this, the faster the spammers net resources disappear,
and the less spamming makes an profit.


This particular cable TV spammer:

He has no mail box and no web site and treats net access as "hit and
run". So the best is to forward them to uc...@ftc.gov so that they
follow up the phone numbers and postal mail boxes to get him.

Note: this is a government agancy mail box (federal trade commission),
so the more people that complain of an particular spammer, the more
likely they are going to take this particular spammer serious. That is
also why you should not distract them with spams where you can go to
the providers.

Alternatively if you are in Florida: follow up the postal address and
find out if local law enables you to privately sue him (for wasting
you resources, see also anti FAX spam laws).


--
Neil Franklin, nei...@franklin.ch.remove http://neil.franklin.ch/
Hacker, Unix Guru, El Eng FH/BSc, Sysadmin, Roleplayer, LARPer, Mystic

Neil Franklin <nei...@franklin.ch.remove> wrote in message
news:6uw...@chonsp.franklin.ch...
> "Stuart Moore" <stu...@bigfoot.com> writes:
>
> > On my NG feed, we've just received 3 cable box descrambler plans and one
> > pornographic binary - is everyone seeing this or are the rest of you lucky
> > enough to have decent filters?
>
> They also arrive here (at least the 3 cable TV ones).
>

I got 4, one of which contained 2 small jpgs, perhaps your provider blocks
binarys.

>
> > Anything we can do about it?
>
> Most spammers:
>
> Identify the providers of:
>
> - their net access (see the NNTP-Posting-Host: line)

Constant domein for all 4: ip113.orlando14.fl.pub-ip.psi.net for one and
ip38.orlando14.fl.pub-ip.psi.net for the other 3; have forwarded to
abu...@psi.net

> - their usenet access (see the tail of the Path: line)

All gone through tiac.net for me; 2 seemed to originate there, 2 from german
domains. These 2 and one that does originate from tiac.net have:
!news-feed1.tiac.net.MISMATCH
So I'm guessing someone could have tried to fake this, and forwarded them to
tiac.net

>
> This particular cable TV spammer:
>
> He has no mail box and no web site and treats net access as "hit and
> run". So the best is to forward them to uc...@ftc.gov so that they
> follow up the phone numbers and postal mail boxes to get him.

How do you know he treats net access as hit and run?

>
> Note: this is a government agancy mail box (federal trade commission),
> so the more people that complain of an particular spammer, the more
> likely they are going to take this particular spammer serious. That is
> also why you should not distract them with spams where you can go to
> the providers.
>
> Alternatively if you are in Florida: follow up the postal address and
> find out if local law enables you to privately sue him (for wasting
> you resources, see also anti FAX spam laws).

Sorry, I'm in the UK. Although that said, I might try to sue him from here; I'll
get him for not making his mind up about the US President at the same time too
;-) (sorry couldn't resist it)

Hope this isn't to OT for some people, but given the Commodore thread I doubt
anything could be ;-)

Stuart

On Sun, 25 Feb 2001 14:31:54 -0000 "Stuart Moore" <stu...@bigfoot.com>
wrote:
>On my NG feed, we've just received 3 cable box descrambler plans and one
>pornographic binary - is everyone seeing this or are the rest of you lucky
>enough to have decent filters? Anything we can do about it?

Know what I see? A damned whiner epidemic. Seriously, people post
useless complaints about spammers far more than people post spam.
-- 
|    _              \      _       ^~      email:bateau at jupiterio.net
|   <')_,/     ,  ;  \   >(')__,  . ` '  ,  ,______________._
|   (_~=/    \._`.'.  \   (_~_/         _,  '------:_______  ;==( *BANG*
|    ='-      \=~_) ;  \ ~^~~^~   ` (_~_/            | | `-\ \    *BANG*
| ICQ:11367619 -'=      \           ~^~~^~           `~'    \_;

: >pornographic binary - is everyone seeing this or are the rest of you
lucky
: >enough to have decent filters? Anything we can do about it?
:
: Know what I see? A damned whiner epidemic. Seriously, people post
: useless complaints about spammers far more than people post spam.

Here's another one...LOL

I use this to help identify spammers.
http://combat.uxn.com/

Yatty
8^D

Bateau <Its...@Not-A-Real-Address.com> wrote in message
news:zam...@4ax.com...
> On Sun, 25 Feb 2001 14:31:54 -0000 "Stuart Moore" <stu...@bigfoot.com>
> wrote:
> >On my NG feed, we've just received 3 cable box descrambler plans and one
> >pornographic binary - is everyone seeing this or are the rest of you lucky
> >enough to have decent filters? Anything we can do about it?
>
> Know what I see? A damned whiner epidemic. Seriously, people post
> useless complaints about spammers far more than people post spam.

I made the comment because I saw what looked to me like a sudden increase in
spam. I wanted to know if everyone was getting it, in which case some new
spammer has found our ng and it's worth trying to get rid of them, or whether it
seemed to be being filtered out by other providers, in which case it would
probably be a spammer local to me, so I could do something about it personally.

I am not whining pointlessly, I want to get rid of spam. I would hardly call one
post after what I believe was a large outburst of spam an epidemic, esp as I was
not just saying "Won't someone do something about this" but was trying to be
objective.

I'm sorry if what I said annoyed you. I was not aware you were the sole judge on
what was acceptable on the newsgroup. In future anything will be run by you
first.

Stuart

> Know what I see? A damned whiner epidemic.

A hey .. you just added to it

Neil Franklin <nei...@franklin.ch.remove> writes:

> > I got 4, one of which contained 2 small jpgs, perhaps your provider
> >blocks binarys.
> 
> I sometimes get binary ones (like the one today), some get killed. I
> have not managed to detect the logic on when they get killed.

Might have something to do with size and/or mime-declaration. Seems like
some filtering-software relies on intact mime-headers, and some MUAs
don't really like standards all too much (OE comes to mind, but there
are others)...

> This is Usenet. The home of topic drift.

Ah, yes. Mind if I add that to my "under construction"-random-.sig-file?

Tilman
-- 
,--------------------------------------------------------.
|Tilman Ahr  | Email:          rio...@gmx.net           |
|            |           til...@student.hu-berlin.de |
`--------------------------PGP-Key available by request--�