>name spew spam attack.
what's that?
>Idiot didn't even bother to go through a relay, but used a
>Psinet dial-up port in Greensboro NC.
Dial-up spamming is not idiotic. It's a very popular techique. That's why
the DUL database exists.
I suppose PSInet has the means in their mail infracture to detect and
defend against spamming. If they had blocked their dial-up ip from sending
to any port 25 except PSInet's own mail servers, you wouldn't have been
attacked, and PSInet would not be guilty of allowing spamming from their DUL's.
>Called Psinet and they recommended sending some log excerpts to abuse
>account and they would kick the guy offline, but they really recommended
>prosecution.
In general, a waste for your time and money, from all the press reports
I've read. PSInet is the source of this pb, you are the victim.
>even suggested a local law firm specializing in this area. He suggested
>placing a monetary value on every attempt at spamming us and suing the sender.
He has experience succeeding with this legal approach? can he cite anybody
that does it successfully?
>What I would like is to have some people on the list that has done this or
>has any experience doing this, to respond back with some idea as to values
>on time and cleanup and how to best go about this...I do want to get the
>guy, but don't want to waste too much time and feed some lawyers car habit.
this is a classic case of "an ounce of prevention is worth more than a
pound of cure".
Tell PSInet to retrict port 25 access by thei DUL's to their mail servers,
and you run IMGate subscribe to mail-abuse.org so you receive happy-face
msg's like this:
=================================
Date: Wed, 5 Jul 2000 09:37:05 +0200 (CEST)
From: [EMAIL PROTECTED] (Mail Delivery System)
To: [EMAIL PROTECTED] (Postmaster)
Subject: Postfix Relay Hub SMTP server: errors from
ip195.dayton5.oh.pub-ip.psi.net[38.27.181.195]
Message-Id: <[EMAIL PROTECTED]>
X-UIDL: 78743
Status: U
Transcript of session follows.
Out: 220 mgw2.MEIway.com - ESMTP - Postfix Relay Hub - ATTN: UCE trespassers
will be pursued.
In: HELO mail01.homeworkers23232.com
Out: 250 mgw2.MEIway.com
In: MAIL FROM: <[EMAIL PROTECTED]>
Out: 250 Ok
In: RCPT TO:<[EMAIL PROTECTED]>
Out: 554 Service unavailable; [38.27.181.195] blocked using
dialups.mail-abuse.org, reason: See <URL:http://mail-abuse.org/dul/>
In: DATA
Out: 503 Error: need RCPT command
Session aborted, reason: lost connection
================================
.... instead of 100+ megabyte log files. Ha, above, look how I was
protected from a ... psi.net DUL!!
IMGate is pantload cheaper to build than 1 hour in a lawyer's office.
Len
Len
http://BIND8NT.MEIway.com: ISC BIND 8 installable binary for NT4
http://IMGate.MEIway.com: Build free, hi-perf, anti-spam mail gateways
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
