mgs
[Top] [All Lists]

Re: Spam on the list (Warning - LONG)

To: Calvin Krug <ckrug@laf.cioe.com>
Subject: Re: Spam on the list (Warning - LONG)
From: Rocky Frisco <rock@rocky-frisco.com>
Date: Thu, 16 Sep 1999 15:33:44 -0500
Calvin Krug wrote:
> 
> Oops, looks like one slipped through today.  Another one of those get rich
> quick pyramid schemes.  I could just ignore it, but that's not my style.
> What I always do is reply to the sender, including the original message,
> with this statement attached:
> "NOTICE TO BULK E-MAILERS Pursuant to US Code, Title 47, Chapter 5,
> Subchapter II, p.227, any and all nonsolicited commercial E-mail sent
> to this address is subject to a download and archival fee in the
> amount of $500 US. Anyone who sends unsolicited commercial e-mail to
> this account will be charged a $500 proofreading fee. Consider this
> official notification. Failure to abide by this will result in legal
> action."
> In the event that they've used a fake email adress, I have a filter set up
> to discard any messages that bounce back to me.  Maybe if enough of us do
> this, these people will get the point.  Or their ISP will notice the volume
> and cut them off.  It's worth a try.

Calvin, let me suggest a more direct method, one I have used to get
literally hundreds of these idiots disconnected from their ISPs:

I recommend a program called "Sam Spade," available free at:

http://www.blighty.com/products/spade/

This wonderful little program goes out and does ping, whois, traceroute,
dig, DNS, etc. There's lots of Spam-busting info on the Sam Spade page
too.

For instance, if you were a Spammer, you would have disguised your ISP
by using the DNS number instead of the domain name. Your ISP's DNS is:
204.120.165.33

If you enter that number into Spade, you get: laf.cioe.com

A further information search gives: 

Registrant:
CIOE (CIOE-DOM)
   1250 S. Creasy Lane
   Lafayette, IN 47905
   US

   Domain Name: CIOE.COM

   Administrative Contact:
      Tan, Felix  (FT10)  ftan@CIOE.COM
      (317)449-4000 ex. 16 (FAX) (317)449-4190
   Technical Contact, Zone Contact:
      Ames, Steve E  (SA101)  steve@CIOE.COM
      (765)449-4000 ext. 12 (FAX) (765)449-4190

   Record last updated on 23-Oct-96.
   Record created on 23-Apr-94.
   Database last updated on 16-Sep-99 04:48:41 EDT.

   Domain servers in listed order:

   NS1.CIOE.COM   204.120.165.37
   NS2.CIOE.COM   204.248.219.36
************************************

All you have to do is change the preferences of your mail-reader to
"show all headers," then forward the message to the administrator of the
source ISP.

If you want to go closer to the ISP's own source, you can go up the line
one step by changing the last set of digits to a zero: 
204.120.165.33 becomes 204.120.165.0  and you learn that that DNS refers
to Sprint network:

US Sprint (NETBLK-SPRINT-BLKB) SPRINT-BLKB    204.117.0.0 -
204.120.255.0
Commercial Information Order Express, Inc. (NET-SPRINT-CC78A5)
SPRINT-CC78A5
         204.120.165.0
*******************************

I highly recommend the program; I've been using it for a few years now
and it almost always does the job. I have a collection of messages from
ISPs, reporting that the Spammers and Junk-Mailers I reported have been
nuked off the system.

My favorite is from Norway, where the ISP has some fine print buried at
the bottom of their contract that allows them to assess a fine
equivalent to over $1000 from the Spammer's credit card account and then
cut them off.  ;)

-Rock
-- 
Rocky, JJ Cale Band & Pratchett Books: http://www.rocky-frisco.com
Rocky's Mini Cooper Page: http://www.geocities.com/MotorCity/6437/
Mini Books:  http://www.geocities.com/MotorCity/6437/rockboox.html

<Prev in Thread] Current Thread [Next in Thread>
  • Re: Spam on the list (Warning - LONG), Rocky Frisco <=