Emails to SORBS 

 

Subject: [sorbs.net #72518] [Webform] spamtrap addresses are being used by spammers to hurt innocent 3rd parties
From: "SORBS Support (Dan)" <general@sorbs.net>
Reply-To: general@sorbs.net
To: owner @ kelvinist.com

> [owner @ kelvinist.com - Thu Apr 13 09:04:45 2006]:
>
> I have a whitelisting spam filter.  It would appear that spammers are
>    reverse engineering the whitelister by using your spamtrap
>    addresses as the spam from: addresses.  Thus, my whitelister has
>    been tricked into sending a registration request to your spamtrap.
>    You have blacklisted my domain as an innocent 3rd party because of
>    what spammers have done.  In the interest of stoppng spam, you have
>    instead extended the reach of the harm they cause.

No, your messages are spam to the people being forged by spammers. As virtually 100% of spam and
viruses are sent with a forged From address, your messages do nothing but harass someone who had
nothing to do with the spam. No only that, but to make matters worse, you include the spam in
your message making you some kind of weird spam relay.
 
>
> If you are going to use spamtrap addresses, then something else needs
>    to be done. For instance, checking for similar content from two
>    distinct emails to verify that it really is spam.  Check that you
>    get more than one (!) email from a given address before
>    blacklisting it.
 
Why don't you just deal with your own spam instead of causing more abuse and expecting the rest
of the world to help you filter your email? Your so-called whitelisting does not stop any spam
as you still must receive the spam, put it in a separate folder in case someone doesn't get your
reply. All you have done is double the amount of spam. Your substantially identical messages
sent in reply to the spam you receive are bulk email. They are certainly unsolicited by those
being forged by spammers. Unsolicited bulk email is also known as spam.
 
>
> In the meantime, you are generating huge ill will as legitimate email
>    is blocked.
>
>

SORBS does not want email from abusive hosts. See:
 http://kmself.home.netcom.com/Rants/challenge-response.html
 
Please let us know when you have disabled such messages and we will be happy to delist your IP.
--
Dan
SORBS Volunteer

-------- Original Message --------

Subject: [sorbs.net #72514] Need help with 198.144.208.97 (support form)
Date: Thu, 13 Apr 2006 08:05:47 +1000 (EST)
From: SORBS Support (Dan) <payments@sorbs.net>
Reply-To: payments@sorbs.net
To: owner @ ownersmith.com
References: <RT-Ticket-72514@SORBS> <20060412215919.C1A5E1143B@desperado.sorbs.net>


> [owner @ ownersmith.com - Thu Apr 13 07:59:35 2006]:
> 
> Name: ....
> IP: 198.144.208.97
> rDNS: [TTL 10800] m208-97.dsl.rawbw.com.
> Domain: kelvinist.com
> Type: person
> Primary OS: windows
> Skill Level: normal
> DB: spam database
> Additional Information:
> 
> We feel that 198.144.208.97 has been listed erroneously. The only way
>    it would ever transmit a message to your "spamtrap" server is in
>    sending a bounce message in response to an email targeted to the
>    server on 198.144.209.97.

Bounce messages are sent by the sending server. Your messages are unsolicited bulk 
email sent to the email addresses forged by spammers. As virtually 100% of spam and 
viruses are sent with a forged From address, your messages do nothing but harass 
someone who had nothing to do with the spam.
See http://kmself.home.netcom.com/Rants/challenge-response.html and
http://www.spamhaus.org/faq/answers.lasso?section=ISP%20Spam%20Issues#109
Please let us know when you have disabled such messages and we will be happy to delist 
your IP.


> That server applies a white list, and
>    will send exactly one bounce message back to the return address.
>    (This is a lifetime of one message, no matter how many spam
>    messages are sent using the same return address.)

Your one message is one of thousands of similar messages. Such messages are now a 
bigger spam problem then the spam you are responding to.

> We do not think
>    an IP address should be black listed for a single email message.
> We will not pay an extortion fee of $50 to unlist this ip address
>    because it was erroneously listed in the first place.

You are welcome not to. However, even making a $50 charity donation and not stopping 
your abusive messages you will just end up listed again when you send your UBE to 
another SORBS admin or spamtrap. You will also be listed by Spamcop and Spamhaus 
should your messages reach there. This is not something unique to SORBS.

> If you do not delist this IP address, I will demand my ISP to stop
>    using SORBS to filter my domain somebody.com. If they refuse to
>    do that, I will find another ISP that does not use SORBS.
> 
> 

You are welcome to do so.

-- 
Dan
SORBS Volunteer