[vox-tech] aggressive spam headers

Peter Jay Salzman vox-tech@lists.lugod.org
Fri, 6 Dec 2002 18:28:13 -0800


thanks rod.  that's _precisely_ what i thought, but earthlink seemed so
darn sure of themselves that i was beginning to doubt myself.   i
should've known better.

thanks for verifying my sanity test!  :-)

this spammer is pernicious!  i can't drop earthlink into my tcp wrappers
because i have a few friends who have earthlink accounts.  i've been
sent 8+ spams from this person since 3:00pm today, and when i replied in
person asking them to stop, i was sent 3 more for my trouble.

i could set up a procmail filter, but i've never been a believer in
ignoring spam.  we should take an active role in combating it.  but if
earthlink takes no action, i don't know what else to do...   :-(

these people are also spamming lugod, and again, we have some users with
earthlink accounts that would be dropped along with these people.  this
totally sucks.  :(

i'll try sending earthlink another note saying they're wrong...

pete


begin Rod Roark <rod@sunsetsystems.com> 
> I would say that the person who replied to you screwed up.
> Their system definitely delivered the offending message:
> 
> $ nslookup -sil 207.217.120.218
> Server:         66.51.205.100
> Address:        66.51.205.100#53
> 
> 218.120.217.207.in-addr.arpa    name = bluejay.mail.pas.earthlink.net.
> 
> $ whois 207.217.120.218
> 
> OrgName:    EarthLink Network, Inc.
> OrgID:      ERTH
> 
> NetRange:   207.217.0.0 - 207.217.255.255
> CIDR:       207.217.0.0/16
> NetName:    EARTHLINK-CIDR
> NetHandle:  NET-207-217-0-0-1
> Parent:     NET-207-0-0-0-0
> NetType:    Direct Allocation
> NameServer: DNS1.EARTHLINK.NET
> NameServer: DNS2.EARTHLINK.NET
> NameServer: DNS3.EARTHLINK.NET
> Comment:    ADDRESSES WITHIN THIS BLOCK ARE NON-PORTABLE
> RegDate:    1996-10-04
> Updated:    2001-10-09
> 
> TechHandle: DAE4-ARIN
> TechName:   Domain Administrator, Administrator
> TechPhone:  +1-404-815-0770
> TechEmail:  arinpoc@corp.earthlink.net
> 
> OrgAbuseHandle: ABUSE60-ARIN
> OrgAbuseName:   ABUSE TEAM
> OrgAbusePhone:  +1-404-815-0770
> OrgAbuseEmail:  ABUSE@corp.earthlink.net
> 
> OrgTechHandle: ELNK-ORG-ARIN
> OrgTechName:   EarthLink, Inc.
> OrgTechPhone:  +1-404-815-0770
> OrgTechEmail:  arin_tech@lists.corp.earthlink.net
> 
> -- Rod
>    http://www.sunsetsystems.com/
> 
> On Friday 06 December 2002 03:37 pm, Peter Jay Salzman wrote:
> > i sent a letter of complaint about spam to earthlink and got a reply
> > that included this paragraph:
> >
> >    This report is being returned to you because there appear to
> >    be no numeric IP addresses in the headers of the reported
> >    mail that match IP addresses within our network.  This means
> >    that the mail likely did not originate with us, and
> >    therefore we cannot enforce our policies on the junk
> >    e-mailer.
> >
> > from my reading of the headers, the spam seemed to follow this path:
> >
> > 68.114.30.56 -> 207.217.120.218 -> 64.164.47.8
> >
> > charter comm -> earthlink       -> me (satan)
> >
> > because the received headers go in the order of newest received header
> > first, oldest received header last.
> >
> > is this not correct?  from my reading, the email originated from charter
> > communications but was passed to me via earthlink.
> >
> > is earthlink not culpable for delivering the spam?  if not, how can this
> > email reach me if earthlink 207.217.120.218 isn't an open relay?
> >
> > pete
> >
> > >>From womensinstitute@earthlink.net Fri Dec 06 14:36:21 2002
> > >
> > >Return-path: <womensinstitute@earthlink.net>
> > >Envelope-to: p@dirac.org
> > >Delivery-date: Fri, 06 Dec 2002 14:36:21 -0800
> > >Received: from bluejay.mail.pas.earthlink.net ([207.217.120.218])
> > >	by satan.diablo.localnet with esmtp (Exim 3.36 #1 (Debian))
> > >	id 18KR53-0000gI-00
> > >	for <p@dirac.org>; Fri, 06 Dec 2002 14:36:21 -0800
> > >Received: from 68-114-30-56.charterga.net ([68.114.30.56]
> > > helo=earthlink.net) by bluejay.mail.pas.earthlink.net with asmtp (Exim
> > > 3.33 #1)
> > >	id 18KPsz-0005NG-00; Fri, 06 Dec 2002 13:19:49 -0800
> > >Message-ID: <410-22002126701756704@earthlink.net>
> > >X-Priority:
> > >Reply-To: womensinstitute@earthlink.net
> > >X-Mailer: EarthLink MailBox 2003.1.12.0 (Windows)
> >
> > From: "Morgan Pillsbury" <womensinstitute@earthlink.net>
> >
> > >To: "womensinstitute" <womensinstitute@earthlink.net>
> > >Subject: Do something about Domestic Violence
> > >Date: Fri, 6 Dec 2002 16:17:56 -0800
> > >MIME-Version: 1.0
> > >Content-Type: text/html; charset=US-ASCII
> > >X-ELNK-Trace:
> > > 90043ac6fb6056a69adad1ec2ad180e8d780f4a490ca69564776905774d2ac4bf1b6d38dd
> > >cf6444833d0c1f868c49a4c350badd9bab72f9c350badd9bab72f9c Status: RO
> > >Content-Length: 5672
> > >Lines: 59
> > >
> > ><HTML><HEAD>
> > ><META http-equiv=Content-Type content="text/html; charset=windows-1251">
> > ><META content="MSHTML 6.00.2715.400" name=GENERATOR></HEAD>
> > ><BODY>
> > ><P><FONT face="MS Sans Serif" size=2>
> > ><DIV><FONT color=#ff00ff size=6>
> > ><P> </P>
> > ><P><FONT size=2><FONT face=Arial><STRONG>Contact Name: </STRONG>Michelle
> > > Gysan<BR><B>Other E-mail: </B>webhause@cox.net<BR></FONT></FONT></P>
> > > <P>&nbsp;</P>
> > ><P>&nbsp;</P>
> > ><P>&nbsp;</P>
> > ><P>Women’s Institute for Individual and Political Justice </P></FONT><FONT
> > > face="Times New Roman"> <P>December 5, 2002</P>
> > ><P>&nbsp;</P><B>
> > ><P>This Christmas let’s do something about Domestic Violence</P></B>
> > ><P>&nbsp;</P>
> > ><P>&nbsp;</P>
> > ><P></P>
> > ><P>Dear Friend, </P>
> > ><P>I know how frustrating it is to live in a world where we can put women
> > > in space but we cannot keep them safe in their own homes. </P> <P>I run a
> > > nonprofit foundation dedicated to changing outcomes for women. The first
> > > issue we took up was domestic violence. </P> <P>My background is not
> > > academic but political and my motivations in this case have become very
> > > unexpectedly personal. </P> <P>Starting late last year my oldest daughter
> > > was threatened and battered, first by her long-term boy friend and then
> > > by the very institutions that were supposed to help her, the District
> > > Attorney in New York among others. </P> <P>Sitting up nights sweating
> > > over whether or not John Fund and his friends would manage to kill her
> > > engaged my mind powerfully. I thought, "Why doesn't the justice system DO
> > > something about women at risk of violence?" </P> <P>Then I thought about
> > > something my grandfather did over a very different issue.</P> <P>It was
> > > wildflowers blooming in Yosemite. </P>
> > ><P>My grandfather, Arthur C. Pillsbury built the first lapse -time camera
> > > to use with plants to demonstrate the life-integrity of a flower as a
> > > means of persuading the Park Service to stop mowing the meadows to get
> > > fodder for their horses. </P> <P>That first lovely vision recorded in
> > > human time of a flower elegantly raising its head to the sun was his idea
> > > of a campaign. It worked. </P> <P>How do we make a no tolerance for
> > > violence policy real and visible for the victims of violence today? I
> > > imagined what human intervention could make it possible for my daughter,
> > > and for me, to sleep at night without fear. I saw it. Then, I started
> > > making phone calls.</P> <P>We don't need to invent anything to make women
> > > safe. All the parts are there on the shelf, so to speak. We just need to
> > > assemble them differently. </P> <P>When a woman is deemed at risk a
> > > restraining order should mean something. The order should have teeth; it
> > > should come with an award for needed security services. This could be an
> > > armed guard at her door twenty-four hours a day, seven days a week; a
> > > guard to travel with her, leaving one watching her home. It could mean a
> > > guard watching her abuser. It could mean cuffing abusers and monitoring
> > > their movements. It could mean bonding them. </P> <P>It should always
> > > mean that abusers will pay the costs of their behavior. </P> <P>When you
> > > hit them in the pocketbook it will change their choices and their
> > > behavior. </P> <P>Making sure they pay opens up a whole new range of
> > > possibilities. </P> <P>We all know that violence happens up and down the
> > > economic spectrum, it is just uncomfortable for us to admit that people
> > > we know are battered and silent through fear. This is the ugly little
> > > secret finally making its way out through the courageous acts of women
> > > who dare to share. </P> <P>Awards exacted from abusers who are wealthy
> > > should be punitive thus helping us pay for victims of risk at lower
> > > economic levels. Awards can be securitized and bundled into financial
> > > instruments, sold and traded. It can be done. I have consulted economists
> > > and financial experts across the country. </P> <P>There is a lot to be
> > > done and I need your help. Make a donation to our nonprofit, the Women's
> > > Institute. Join us as a member. Down load our articles and follow the
> > > development of the program so that it can be offered where you live.
> > > Volunteer to help us do just that. We are heavily dependent on volunteers
> > > across the country. Real change starts in the heart and in the community
> > > that surrounds it. </P> <P>Today my daughter is living in hiding far from
> > > New York while her abuser walks free. He has friends with power who are
> > > perfectly willing to use it. This, too, must change. </P> <P>My daughter
> > > understood the risks she was taking. She decided that pursue her abuser
> > > through the system so that other women after her will be able to live
> > > free of fear. I am proud of the choice she made even as I fear for her
> > > life. While in New York she experienced two break-in attempts to her
> > > security apartment. </P> <P>Help us celebrate the birth of a new freedom
> > > from violence starting in 2003. Help make this coming year one that will
> > > be remembered as the year we said NO to violence and meant it. </P>
> > > <P>Safe at Home is something we all need to be able to feel. </P> <P>God
> > > bless and keep you.</P>
> > ><P>Melinda Pillsbury-Foster,</P>
> > ><P>President, Women's Institute and </P>
> > ><P>Morgan's Mom </P>
> > ><P>&nbsp;</P>
> > ><P>Read more:</P></FONT><U><FONT face="Times New Roman" color=#0000ff>
> > ><P>http://womensinstitutes.com/ej_ending_violence.html</P></U></FONT><FONT
> > > face="Times New Roman"> <P>Join us and support our
> > > work:</P></FONT><U><FONT face="Times New Roman" color=#0000ff>
> > > <P>http://womensinstitutes.com/join.html</P></U></FONT><FONT face="Times
> > > New Roman"></FONT></DIV> <DIV>&nbsp;</DIV>
> > ><DIV>&nbsp;</DIV>
> > ><DIV>m pillsbury</DIV>
> > ><DIV><A
> > > href="mailto:womensinstitute@earthlink.net">womensinstitute@earthlink.net
> > ></A></DIV> <DIV>Why Wait? Move to EarthLink.</DIV>
> > ><DIV>&nbsp;</DIV></FONT>
> > ><P></P></BODY></HTML>
> >
> > ----- End forwarded message -----

-- 
Fingerprint: B9F1 6CF3 47C4 7CD8 D33E 70A9 A3B9 1945 67EA 951D