> -----Original Message-----
> From: Shaul Karl [mailto:[EMAIL PROTECTED]
> Sent: Saturday, August 02, 2003 5:43 AM
[snip]

Hello all

You are talking about the SPAM problem but ignoring a bigger problem: The misuse of 
SMTP.

This announcement is automatic; yet instead of replying to the envelope sender (a la 
RFC2821) it replies to the sender in the body. That's why the message got to [EMAIL 
PROTECTED] instead of [EMAIL PROTECTED] In fact, if the sender IP address or the 
sender envelope would have been used for the test, Shaul's message wouldn't have been 
stopped.

What could be even MORE conductive is a 5xy SMTP error message with the proper 
explanation - that would have prevented the need for the delivery of the entire 
message and the delivery of an additional bounce message back, while reducing the 
chance of a mail loop.

This is extremely annoying, because many auto responders do that. It is the stuff mail 
loops are made from.

-- Arik


> Return-path: [EMAIL PROTECTED]
> Envelope-to: [EMAIL PROTECTED]
> Delivery-date: Sat, 02 Aug 2003 04:37:23 +0300
> Received: from localhost ([127.0.0.1] ident=fetchmail)
>       by localhost with esmtp (Exim 4.14)
>       id 19ilKk-0001Lq-SK
>       for [EMAIL PROTECTED]; Sat, 02 Aug 2003 04:37:22 +0300
> X-Sieve: cmu-sieve 2.0
> Received: from mail3.actcom.net.il [192.114.47.14]
>       by localhost with POP3 (fetchmail-6.2.2)
>       for [EMAIL PROTECTED] (single-drop); Sat, 02 Aug 2003 
> 04:37:22 +0300 (IDT)
> Received: from smtp1.actcom.net.il (mail.actcom.co.il [192.114.47.13])
>       by mail3.actcom.co.il (8.11.6/8.11.6) with ESMTP id h721RU209100
>       for <[EMAIL PROTECTED]>; Sat, 2 Aug 2003 04:27:30 +0300
> Received: from tmicha.net ([213.8.90.214])
>       by smtp1.actcom.net.il (8.12.8/8.12.8) with ESMTP id 
> h721SYr9030061
>       for <[EMAIL PROTECTED]>; Sat, 2 Aug 2003 04:28:35 +0300
> Received: from tmicha.net [127.0.0.1] by tmicha.net [127.0.0.1]
>       with RAW (MDaemon.PRO.v6.5.2.R)
>       for <[EMAIL PROTECTED]>; Sat, 02 Aug 2003 04:24:45 +0200
> Date: Sat, 02 Aug 2003 04:24:45 +0200
> From: [EMAIL PROTECTED]
> Reply-To: [EMAIL PROTECTED]
> Subject: Warning! Your message was rejected
> To: [EMAIL PROTECTED]
> X-MDaemon-Deliver-To: [EMAIL PROTECTED]
> Message-ID: <[EMAIL PROTECTED]>
> Mime-Version: 1.0
> X-Actual-From: [EMAIL PROTECTED]
> Content-Type: text/plain; charset=US-ASCII
> 
> Hello, [EMAIL PROTECTED]
> 
> Your message was delayed by Tmicha.net mail server.
> The reasons for that might be the following:
> 
> 1. Your ISP (Internet Service Provider) is unwilling to
> cancel spammers' accounts
> 2. Your ISP does not enforce/have Acceptable User Policy (AUP) 
> 3. Your ISP does not have anti-spam policy
> 
> Message delay is necessary to verify that you are an actual
> person and not a spammer.
> 
> In order to deliver your message to the original recipient, 
> please RESEND the original message including the following words
> in the 'Subject' field (including parentheses):
> 
> (not spam)
> 
> 
> Regards,
> 
> Tmicha.net Abuse Dept.
> 
> 
> Message delayed:
> ----------------
> Subject: Re: Keysigning issues
> Date: Sat, 2 Aug 2003 04:13:49 +0300
> 
> 
> 
> 
> 
> 
> 
> ----- End forwarded message -----
> 
> 
> 
> Script started on Sat Aug  2 05:25:33 2003
> $ whois Tmicha.net
> 
> Found a referral to whois.namesdirect.com.
> 
> 
>  The data contained in the WHOIS database, while
> believed by the company to be reliable, is provided "as is",
> with no guarantee or warranties regarding its accuracy.  This
> information is provided for the sole purpose of assisting you
> in obtaining information about domain name registration records. 
> Any use of this data for any other purpose, including, but not
> limited to, allowing or making possible dissemination or
> collection of this data in part or in its entirety for any
> purpose, such as the transmission of unsolicited advertising and
> solicitations, is expressly forbidden without the prior written
> permission of this company. By submitting an inquiry, you agree
> to these terms of usage and limitations of warranty.
> Please limit your queries to 10 per minute and one connection.
> 
> Registrant:
>    Slav BA
>    Confidential
>    Tel Aviv,  90210
>    IL
> 
>    Registrar: NAMESDIRECT
>    Domain Name: TMICHA.NET
>       Created on: 07-MAY-01
>       Expires on: 07-MAY-04
>       Last Updated on: 05-MAY-03
> 
>    Administrative, Technical Contact:
>       BA, Slav  [EMAIL PROTECTED]
>       Confidential
>       Tel Aviv,   90210
>       IL
>       972-52-294612
> 
> 
>    Domain servers in listed order:
>       NS1.MYDOMAIN.COM 
>       NS2.MYDOMAIN.COM 
>       NS3.MYDOMAIN.COM 
>       NS4.MYDOMAIN.COM 
> 
> End of Whois Information
> $ whois 213.8.90.214
> % This is the RIPE Whois server.
> % The objects are in RPSL format.
> %
> % Rights restricted by copyright.
> % See http://www.ripe.net/ripencc/pub-services/db/copyright.html
> 
> inetnum:      213.8.0.0 - 213.8.255.255
> netname:      IL-EURONET-RG-990603
> descr:        Euronet Digital Communications
> descr:        Provider Local Registry
> country:      IL
> admin-c:      AR4994-RIPE
> tech-c:       AA957908-RIPE
> tech-c:       NS3998-RIPE
> status:       ALLOCATED PA
> mnt-by:       RIPE-NCC-HM-MNT
> mnt-lower:    AS5486-MNT
> mnt-routes:   AS5486-MNT
> changed:      [EMAIL PROTECTED] 19990603
> changed:      [EMAIL PROTECTED] 20000303
> changed:      [EMAIL PROTECTED] 20000407
> changed:      [EMAIL PROTECTED] 20010302
> changed:      [EMAIL PROTECTED] 20010515
> changed:      [EMAIL PROTECTED] 20010531
> changed:      [EMAIL PROTECTED] 20020419
> changed:      [EMAIL PROTECTED] 20020423
> changed:      [EMAIL PROTECTED] 20020428
> source:       RIPE
> 
> route:        213.8.0.0/16
> descr:        EURONET
> origin:       AS5486
> mnt-by:       AS5486-MNT
> changed:      [EMAIL PROTECTED] 20020428
> source:       RIPE
> 
> person:       Amos Rosenboim
> address:      Internet Gold - LTD.
> address:      Alexander Yanai 1,
> address:      Petah-Tikva
> address:      Israel
> phone:        +972 39 399 703
> fax-no:       +972 39 399 700
> e-mail:       [EMAIL PROTECTED]
> nic-hdl:      AR4994-RIPE
> changed:      [EMAIL PROTECTED] 20020206
> source:       RIPE
> 
> person:       Nir Shamir
> address:      Alexander Yanay 1
> address:      Petach Tikva
> address:      Israel
> phone:        +972-3-9399738
> fax-no:       +972-57-975005
> nic-hdl:      NS3998-RIPE
> changed:      [EMAIL PROTECTED] 20030101
> source:       RIPE
> 
> person:       Arik Alster
> address:      Ha'melacha 22
> address:      Park Sibel, Rosh Haain
> address:      Israel
> phone:        +972-3-9020000
> fax-no:       +972-3-9024222
> e-mail:       [EMAIL PROTECTED]
> nic-hdl:      AA957908-RIPE
> changed:      [EMAIL PROTECTED] 20010607
> source:       RIPE
> 
> 
> $ exit
> exit
> 
> Script done on Sat Aug  2 05:26:06 2003
> 
> -- 
> 
>     Shaul Karl,    shaul @ actcom . net . il
> 
> =================================================================
> To unsubscribe, send mail to [EMAIL PROTECTED] with
> the word "unsubscribe" in the message body, e.g., run the command
> echo unsubscribe | mail [EMAIL PROTECTED]
> 
> 
**********************************************************************
This email and attachments have been scanned for
potential proprietary or sensitive information leakage. 

PortAuthority(TM)  Server 
Keeping Information Inside
Vidius, Inc. 
www.vidius.com
**********************************************************************


================================================================To unsubscribe, send 
mail to [EMAIL PROTECTED] with
the word "unsubscribe" in the message body, e.g., run the command
echo unsubscribe | mail [EMAIL PROTECTED]

Reply via email to