Re: DANGEROUS PERSISTENT EMAIL SPAMMER HELP

From: Kevin Martin (cannon@nic.com)
Date: Tue, 08 Apr 1997 23:16:29 -0400

In article <LIaSzkrq47bB089yn@clic.net>,
kelias@clic.net (Robert Keith Elias) says:
>
> I'm keeping this public because I assume it will be of interest
> to others (and the list is quiet now). If anyone disagrees I
> will immediately go to private Email.

I replied privately, even though the existence of mailspam is arguably
a greater burden on users of offline readers than it is to the rest of
the community. That's why there are a few anti-spam pointers under my
Yarn page.

If the topic is of interest to the group I don't mind sharing; the
noise level on news.admin.net-abuse.email is unfortunate. Rather than
rehash their arguments about whether or not spammers should end up in a
hotter Circle of Hell than child molesters (Survey says "Yes"), let's
just figure out how we can kill the spam.

Recent case in point: A stupid message Cc'd to twenty-two full
screens of addresses. Now all of the newbies on the Cc list are
frantically replying to each other, screaming "STOP MAILING ME!" --
and Cc'ing everyone else. Will it ever stop? Not for months,
probably.

By default, johnbob's jmfilter wants to notify postmasters and
raise a fuss; I strongly suspect that this massive Cc was targetted
specifically to overload such filters. Nasty, but it wasn't very hard
to modify jmfilter to say "DON'T record the names, DON'T save a copy
as 'evidence' -- in this one case, just send it to /dev/null and save
your breath."

-- 
  The HANDS-ON HOW-TO for uqwk and YARN is available "on demand" at
              http://www.nic.com/~cannon/handson.html