homepage Welcome to WebmasterWorld Guest from 54.197.189.108
register, free tools, login, search, pro membership, help, library, announcements, recent posts, open posts,
Become a Pro Member
Home / Forums Index / WebmasterWorld / Webmaster General
Forum Library, Charter, Moderators: phranque & physics

Webmaster General Forum

    
SPAM problem
I need advice how to deal with it
Ulrike




msg:385160
 9:21 am on Jul 27, 2001 (gmt 0)

I got today one of the most impertinent spams I had ever the misfortune to receive. Usually I just delete spam, but this gave the impression that I sent it and apparently I wasn't the only receiver.

From: ***-owner@yahoogroups.com ()
To: <snip>, ***@yahoogroups.com, ***-owner@yahoogroups.com

Below is the result of your feedback form. It was submitted by (***-owner@yahoogroups.com) on Thursday, July 26, 2001 at 17:06:06
----------------------------------------------------------------------
-----

: Join for free Today.
<snip>

I took some receiver addresses out and changed the addys.

You have to know that ***-owner@yahoogroups.com is one of *my* email addresses because I am the list mom.

Please note the parenthesis behind the sender email address. So it does give the impression that the thing came from me. If you hit replay it will even give my addy as email address, but without parenthesis. And btw, I'm not aware of any feedback form.

Obviously this someone tried to send it to the list, but couldn't probably deceive the yahoo mail server.

If you take a look at the source code of the email you get the following email header:

-------
X-eGroups-Return: httpsd@www-1.ahnet.net
Received: from [10.1.4.56] by b05.egroups.com with NNFMP; 27 Jul 2001 00:00:04 -0000
Received: (qmail 227 invoked from network); 27 Jul 2001 00:00:03 -0000
Received: from unknown (10.1.10.26) by l10.egroups.com with QMQP; 27 Jul 2001 00:00:03 -0000
Received: from unknown (HELO lmg02.affinity.com) (207.150.192.13) by mta1 with SMTP; 27 Jul 2001 00:00:02 -0000
Received: from www-1.ahnet.net ([216.185.159.6]) by lmg.ahnet.net with ESMTP id <289354-15460>; Thu, 26 Jul 2001 16:59:32 -0700
Received: (from httpsd@localhost) by www-1.ahnet.net (8.9.3/8.9.3) id RAA29302; Thu, 26 Jul 2001 17:06:06 -0700 (PDT) (envelope-from httpsd)
Date: Thu, 26 Jul 2001 17:06:06 -0700 (PDT)
Message-Id: <200107270006.RAA29302@www-1.ahnet.net>
To: <snip>
From: ***-owner@yahoogroups.com ()
--------

Same changes as before.

There are any possibilities to get back to the originator of the spam?

For now I have informed the mailinglist that they should contact me asap if they got such a message.
It is almost common to get spam. But this deception raises my blood pressure. Especially as it could hurt my reputation with my subcribers.

 

Brett_Tabke




msg:385161
 2:14 pm on Jul 27, 2001 (gmt 0)

Forward it to: abuse@ahnet.net

Ulrike




msg:385162
 4:21 pm on Jul 27, 2001 (gmt 0)

Thank you, I will do so.

Ulrike




msg:385163
 9:21 am on Jul 29, 2001 (gmt 0)

I just wanted to add. ahnet.net hasn't answered yeat. But I got the first irate spamming victim calling me names. I can understand her. This spam directed you to a sex site. I sent her a placating reply and pointed out the email header to her. Hope that helps. I'm afraid it could become worse. :(

To make this morning perfect, I got 30 virus infected emails. :(

ggrot




msg:385164
 5:48 pm on Jul 29, 2001 (gmt 0)

There is no retaliation through virtually any means. ISPs and large websites barely care. If you can suggest something that would reduce the amount of overall spam, they might implement it. It you point out an individual they can track down, nothing will happen. It is a waste of their resources for no gain of their own. Check this article our on grc.com:
[grc.com...]

A thirteen year old took down (DOS attacks) grc.com(major website) multiple times. The owner got no help from the ISPs this kid was using, or even the FBI. However, he did get the provider who he was paying money to to implement a filter to stop further attacks.

lawman




msg:385165
 2:03 am on Jul 30, 2001 (gmt 0)

ggrot:

That was just about the most fascinating article I've ever read. I am amazed that Steve Gibson was able to spy on the hackers for a week before he revealed himself.

Lawman

Global Options:
 top home search open messages active posts  
 

Home / Forums Index / WebmasterWorld / Webmaster General
rss feed

All trademarks and copyrights held by respective owners. Member comments are owned by the poster.
Home ¦ Free Tools ¦ Terms of Service ¦ Privacy Policy ¦ Report Problem ¦ About ¦ Library ¦ Newsletter
WebmasterWorld is a Developer Shed Community owned by Jim Boykin.
© Webmaster World 1996-2014 all rights reserved