getting a 550 response to mail volume implies a volume well over 1M messages a day (though, it could just be a temporary spike and not sustained)... 400 messages/day is about what we estimated a customer service rep could handle in a shift if the replies are basically just FAQs, do you think they have >2500 abuse reps?
At some point, these things have to be automated, and of course a form is way easier to extract the right information from and potentially put up roadblocks to prevent DoS attacks on the form. Otherwise, you're basically trying to do automated clustering of the reports from free form data, some of which is deliberately anonymized for privacy purposes or to prevent list washing. You also have the helpful folks who go through their spam folder and forward every message to about 20 different abuse contacts for every possible domain in the message and add the FTC, FBI and Secret Service for good measure... oh, and they send to both abuse@ and postmaster@ and maybe arin-contact or whatever else on top of that. Or maybe some ISP decided to send their feedback loop to your abuse address without having signed up, and they send messages that didn't originate with you and don't pass auth, but sure, flood away. Anyways, it's a very valuable stream of data. Brandon On Tue, Jan 18, 2022 at 4:49 PM Jarland Donnell via mailop < mailop@mailop.org> wrote: > Same thing happened at a similar cloud when I worked at it, we had > Gsuite email and no one saw it coming. Most companies seem to be using > abuse forms to make up for it and to some degree I get it, forms require > intentional input where as people dumping fail2ban logs (and similar) at > abuse@ emails renders them so terribly difficult to process at scale. > > On 2022-01-18 10:22, Michael Peddemors via mailop wrote: > > Serious? > > > > <ab...@linode.com>: host aspmx.l.google.com[2607:f8b0:4023:c0b::1a] > > said: > > 550-5.2.1 The user you are trying to contact is receiving mail at a > > rate > > that 550-5.2.1 prevents additional messages from being delivered. > > For more > > 550-5.2.1 information, please visit 550 5.2.1 > > https://support.google.com/mail/?p=ReceivingRatePerm > > k9si1297959vsh.481 - > > gsmtp (in reply to RCPT TO command) > > > > Why do they have their abuse email address at gmail.. > > > > If a person gets that once, do you think they will try to report again? > > > > -- > > "Catch the Magic of Linux..." > > ------------------------------------------------------------------------ > > Michael Peddemors, President/CEO LinuxMagic Inc. > > Visit us at http://www.linuxmagic.com @linuxmagic > > A Wizard IT Company - For More Info http://www.wizard.ca > > "LinuxMagic" a Registered TradeMark of Wizard Tower TechnoServices Ltd. > > ------------------------------------------------------------------------ > > 604-682-0300 <(604)%20682-0300> Beautiful British Columbia, Canada > > > > This email and any electronic data contained are confidential and > > intended > > solely for the use of the individual or entity to which they are > > addressed. > > Please note that any views or opinions presented in this email are > > solely > > those of the author and are not intended to represent those of the > > company. > > _______________________________________________ > > mailop mailing list > > mailop@mailop.org > > https://list.mailop.org/listinfo/mailop > _______________________________________________ > mailop mailing list > mailop@mailop.org > https://list.mailop.org/listinfo/mailop >
_______________________________________________ mailop mailing list mailop@mailop.org https://list.mailop.org/listinfo/mailop
