From smims at sunstoneinc.com Mon Oct 3 10:24:24 2005 From: smims at sunstoneinc.com (smims@sunstoneinc.com) Date: Mon Oct 3 10:15:20 2005 Subject: [SC-Help] Mail not delivered Message-ID: We are having problems with a couple of our partners receiving the following message when sending email to our address. How do we find out what's causing this delivery failure? From: Mail Delivery System [mailto:MAILER-DAEMON@ironport.qrs.com] Subject: Delivery Status Notification (Failure) The following message to was undeliverable. The reason for the problem: 5.4.7 - Delivery expired (message too old) '' Steville Mims smims@sunstoneinc.com From baloo at ursine.ca Mon Oct 3 13:45:00 2005 From: baloo at ursine.ca (baloo@ursine.ca) Date: Mon Oct 3 16:10:03 2005 Subject: [SC-Help] Re: Is Valueweb.net on any blacklists? References: Message-ID: Borgholio wrote: > What's the easiest way to check to see if my ISP (Valueweb.net) is on any > major blacklists? Get the outbound MX ips and run them through the checker at http://rbls.org/ ? From keithj at spamcop.net Tue Oct 4 02:27:59 2005 From: keithj at spamcop.net (Keith Jillings) Date: Mon Oct 3 20:30:25 2005 Subject: [SC-Help] Stock inflaters? Message-ID: Until recently, Spamcop has done a brilliant job. As I posted above (and got no reply) stuff is now getting past the filters. On watching the batches that arrive daily, it seems almost all to be these pesky "This stock is about to explode" scans. They comes mostly from countries that are in my country blacklist - yet they get past the filter. How is that? Has Spamcop got a problem? From pete+usenet at heypete.com Mon Oct 3 18:54:25 2005 From: pete+usenet at heypete.com (Pete Stephenson) Date: Mon Oct 3 20:55:07 2005 Subject: [SC-Help] Re: Stock inflaters? References: Message-ID: In article , Keith Jillings wrote: > They comes mostly from countries that are in my country blacklist - yet > they get past the filter. How is that? Has Spamcop got a problem? Many of the country-level filters are provided by blackholes.us, who is now offline due to technical difficulties. A notice on their website indicates they'll return soon. Hope this helps. -- Pete Stephenson HeyPete.com From wb8tyw at qsl.network Mon Oct 3 23:47:35 2005 From: wb8tyw at qsl.network (John E. Malmberg) Date: Mon Oct 3 22:50:03 2005 Subject: [SC-Help] Re: Mail not delivered In-Reply-To: References: Message-ID: smims@sunstoneinc.com wrote: > We are having problems with a couple of our partners receiving the > following message when sending email to our address. How do we find out > what's causing this delivery failure? > > From: Mail Delivery System [mailto:MAILER-DAEMON@ironport.qrs.com] > Subject: Delivery Status Notification (Failure) > > The following message to was undeliverable. > The reason for the problem: > 5.4.7 - Delivery expired (message too old) '' For that you will have to contact the owner of the mail server that generated that failuer message for a more specific interpretation of it. The mail server is claiming to be ironport.qrs.com and if you have reason to trust that it is telling the truth, that would be who to contact. A mail server will try for a period of time to find a destination server that will either accept or permanently refuse a message. One other option is to request the sending server to try again later. This error message indicates that the mail server ironport.qrs.com is a mail server that you are using for outgoing e-mail. And because it does not indicate that it ever got any status from a destination mail server, this indicates that it never found one to deliver it to. This could be from multiple causes: 1. The error message is incorrect. 2. Your outgoing mail server does can not resolve or find a route to the destination. 3. Something on the internet between your server and the destination server is blocking the packets. This could either be deliberate or accidental. 4. The recipiant is refusing packets from your server. It would greatly help if ironport.qrs.com gave a better diagnostic of why it could not deliver the e-mail before it expired. This may or may not be a clue: http://www.moensted.dk/spam/?addr=ironport.qrs.com&Submit=Submit See the text: "no IP found for ironport.qrs.com - try again" The name ironport.qrs.com is not visible to the public internet. -John wb8tyw@qsl.network Personal Opinion Only From nobody at devnull.spamcop.net Tue Oct 4 10:33:17 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Tue Oct 4 10:35:03 2005 Subject: [SC-Help] Re: Stock inflaters? References: Message-ID: "Keith Jillings" wrote in message news:dhsiag$ppv$1@news.spamcop.net... > > Until recently, Spamcop has done a brilliant job. As I posted above > (and got no reply) stuff is now getting past the filters. Can "we" (tinw) say something similar? Information is passed on but no one reads it? As far as that goes, it's hard telling from here what is "above" on your screen. > They comes mostly from countries that are in my country blacklist - yet > they get past the filter. How is that? Has Spamcop got a problem? You'd have found this data as a Pinned entry in the SpamCop E-Mail account Forum at http://forum.spamcop.net/forums/index.php?showtopic=5038 in addition to the posts made in the spamcop newsgroup. That it also counted as news elsewhere on 'the net' probably isn't important ... From nobody at devnull.spamcop.net Tue Oct 4 13:04:00 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Tue Oct 4 13:05:02 2005 Subject: [SC-Help] Re: Quick Reporting returns empty data References: Message-ID: Replying to cross-post this into the other newsgroups ... Don also posted this into the Forum discussion at http://forum.spamcop.net/forums/index.php?showtopic=5055 "SpamCop Admin" wrote in message news:nea5k1d2pmedts97o3aev1q24d9h0evehj@4ax.com... > Reporting from webmail is inserting a blank line between the header > lines and causing the parse to fail. > > I paged JeffT and sent him email about the problem. > > Unfortunately, that's all I can do. He is not up on IM, so he may be > away from his office. > > - Don D'Minion - SpamCop Admin - From post.please.this.email.is.not.valid at example.com Tue Oct 4 21:30:01 2005 From: post.please.this.email.is.not.valid at example.com (DougW) Date: Tue Oct 4 21:30:13 2005 Subject: [SC-Help] b0rked link resolution. Message-ID: ----- Resolving link obfuscation http:\/zlqnqumon.com%2e<.oyystqwxxgqu%2egealsilau.info#apjwxjfcpe.net Percent unescape: http:\/zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net Normalizing slashes: http://zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net Host zlqnqumon.com. (checking ip) IP not found ; zlqnqumon.com. discarded as fake. Host zlqnqumon.com. (checking ip) IP not found ; zlqnqumon.com. discarded as fake. Tracking link: http://zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net No recent reports, no history available Cannot resolve http://zlqnqumon.com.<.oyystqwxxgqu.gealsilau.info#apjwxjfcpe.net ----- Looks like spammy has gotten "cute" to the point of proving rule#3 The question is do you go to the point of trying to lart a b0rked link and how many problems does that open up. Not that that matters because SC is still choking on the spamdomain.org#fakedomain.org trick. :/ The following list are domains using the # trick so far this week. Mostly HGH and fake watch spams. scamelldc.com 221.11.133.63 <- abuse@cnc-noc.net quiraff.com 58.20.160.17 <- abuse@cnc-noc.net gealsilau.info 200.108.166.3 gdeltomwi.info 200.108.166.3 gdaeleela.info 200.108.166.3 afinepurchase.com 221.11.134.11 <- support@NameCheap.com; abuse@cnc-noc.net afineasset.com 221.11.134.11 <- support@NameCheap.com; abuse@cnc-noc.net agoodbasket.com 221.11.134.11 <- support@NameCheap.com; abuse@cnc-noc.net alovelypresent.com 221.11.134.11 <- support@NameCheap.com; abuse@cnc-noc.net greatthingsforever.com 221.11.134.11 <- support@NameCheap.com; abuse@cnc-noc.net steighke.com 211.233.16.92 <- abuse@your-domains-here.com; security@kidc.net twattlecneg.com 211.233.16.92 <- abuse@your-domains-here.com; security@kidc.net unficklegj.com 211.233.16.93 <- abuse@your-domains-here.com; security@kidc.net uniambicnf.com 211.233.16.93 <- abuse@your-domains-here.com; security@kidc.net murmurcb.com 211.233.16.93 <- abuse@your-domains-here.com; security@kidc.net foggerkkej.com 211.233.16.92 <- abuse@your-domains-here.com; security@kidc.net -- DougW From panoptes at iquest.net Tue Oct 4 22:36:13 2005 From: panoptes at iquest.net (Daniel W. Johnson) Date: Tue Oct 4 22:40:02 2005 Subject: [SC-Help] Re: Mail not delivered References: Message-ID: <1h3xfos.14299cyxcqopcN%panoptes@iquest.net> wrote: > We are having problems with a couple of our partners receiving the > following message when sending email to our address. How do we find out > what's causing this delivery failure? > > From: Mail Delivery System [mailto:MAILER-DAEMON@ironport.qrs.com] > Subject: Delivery Status Notification (Failure) > > The following message to was undeliverable. > The reason for the problem: > 5.4.7 - Delivery expired (message too old) '' > > Steville Mims > smims@sunstoneinc.com Look at the mail server log on ironport.qrs.com (or the machine claiming to be ironport.qrs.com) to find out why it never actually delivered the message. That machine might also be set with a ridculously short timeout. -- Daniel W. Johnson panoptes@iquest.net http://members.iquest.net/~panoptes/ 039 53 36 N / 086 11 55 W From keithj at spamcop.net Fri Oct 7 01:12:11 2005 From: keithj at spamcop.net (Keith Jillings) Date: Thu Oct 6 19:15:14 2005 Subject: [SC-Help] Re: Stock inflaters? In-Reply-To: References: Message-ID: WazoO wrote: > Can "we" (tinw) say something similar? Information is passed > on but no one reads it? As far as that goes, it's hard telling > from here what is "above" on your screen. Not sure I follow you. Who is "tinw"? What is the information passed on that I haven't read? I read the "title page" of Spamcop just about every day when I log on. All I see is the option to do something with Eudora, and a request to limit blow-back. That's been there for a while. >>They comes mostly from countries that are in my country blacklist - yet >>they get past the filter. How is that? Has Spamcop got a problem? > > > You'd have found this data as a Pinned entry in the SpamCop > E-Mail account Forum at > http://forum.spamcop.net/forums/index.php?showtopic=5038 > in addition to the posts made in the spamcop newsgroup. That > it also counted as news elsewhere on 'the net' probably isn't > important ... Thanks for that link - I've not used the forums before - should I use those rather than posting here? My problem with stuff getting past the country filters is a lot older than Sept 30th in that forum posting: it goes back several weeks. I'll wait and see if the problem goes away eventually - it hadn't as of this morning (October 6th). Keith From MikeE at ster.invalid Thu Oct 6 18:31:45 2005 From: MikeE at ster.invalid (Mike Easter) Date: Thu Oct 6 20:35:03 2005 Subject: [SC-Help] Re: Stock inflaters? References: Message-ID: Since this thread is a mess; I think I'll start all over again from the very beginning. Keith Jillings wrote: > Until recently, Spamcop has done a brilliant job. This is precedent to nothing. > As I posted above This is subsequent to nothing; there is no 'above'. This cite the first post by you in this forum. Ergo -- some aspects of it make absolutely no sense. > (and got no reply) ... naturally; as there was nothing to be replying to. > stufff is now getting past the filters. Ah, so. A tiny clue. This post must have something to do with someone who is using spamcop's mail system. I think you are addressing a spamcop mail issue in spamcop help instead of spamcop .mail -- which ng is wannabe by some to become non-existent because it wantsta-be totally replaced by the forums. Which those of us who hangout here in the nntp newsgroups are 'against' in the -- Forums Against [as opposed to With] the Newsgroups War. > On watching > the batches that arrive daily, it seems almost all to be these pesky > "This stock is about to explode" scans. ... still awaiting the theme of this missive. > They comes mostly from countries that are in my country blacklist - > yet they get past the filter. How is that? Has Spamcop got a > problem? I see. This is clearly a spamcop mail issue posted in the spamcop.help newsgroup. We'll see what becomes of this. So what became of this was more confusion. Just to clarify, WazoO posted a link relating to the problem of blackholes.us, the country filter, being out of commission. See http://www.blackholes.us/ Blackholes.us Disk crashed. Wierd things happened. Back online very soon now... Now catching up: Keith Jillings wrote: > Who is "tinw"? It is a newsgroupism for 'there is no we' when the term 'we' is used. > Thanks for that link - I've not used the forums before - should I use > those rather than posting here? I suppose you /could/ use the forums instead of the newsgroups. Or, you could use the spamcop.mail wannabe-dead newsgroup, which would be /my/ recommendation. Those of us nntp diehards would like to see the spamcop.mail newsgroup kept alive with these questions by newsgroup competents. I don't think that a person who is capable of using a newsreader should have to take hir questions to a webforum which has all of its problems instead of having your questions answered competently in the newsgroup instead of being sent to a webforum. -- Mike Easter kibitzer, not SC admin From MikeE at ster.invalid Thu Oct 6 18:58:14 2005 From: MikeE at ster.invalid (Mike Easter) Date: Thu Oct 6 21:00:05 2005 Subject: [SC-Help] Newsgroups beef (was Stock inflaters?) References: Message-ID: ng/s expanded to .help and .mail -- f/ups to .help Mike Easter wrote: > Keith Jillings wrote: >> Thanks for that link - I've not used the forums before - should I use >> those rather than posting here? > > I suppose you /could/ use the forums instead of the newsgroups. Or, > you could use the spamcop.mail wannabe-dead newsgroup, which would be > /my/ recommendation. Those of us nntp diehards would like to see the > spamcop.mail newsgroup kept alive with these questions by newsgroup > competents. I don't think that a person who is capable of using a > newsreader should have to take hir questions to a webforum which has > all of its problems instead of having your questions answered > competently in the newsgroup instead of being sent to a webforum. Just to iterate a little history here. Once upon a time some powers came along and tried to destroy support in the spamcop.mail newsgroup by removing it from here http://www.spamcop.net/help.shtml#nntp Newsgroups [spamcop, geeks, social, spam] and also from here: http://www.spamcop.net/sitemap.shtml Forums General discussion Email discussion Mailhosts system discussion NNTP (usenet style) Newsgroups ... simply because the/a power didn't like to support newsgroup questions and wanted to instigate his own notions of webforum support. It was a shortsighted concept because of lack of full appreciation for what is bad about a webforum's various 'manifestations' and what is good about nntp support functions. The webforum structure is very suboptimal for faq construction in spite of WazoO's diligent efforts to work with what he has; and extremely 'suboptimal' to 'throw out the baby with the bathwater' in an effort to satisfy the personal preferences of a single individual about support concepts. Even if it isn't exactly a single individual. What needs to happen is that the webforums need to do 'their thing'; plus there needs to be a 'dynamic' faq in some form such as a wiki or website faq dynamics [as opposed to trying to make a wiki out of a forum or a webfaq out of a forum]; and most importantly, there needs to be continuing and ongoing nntp newsgroup support for the various newsgroups *including* spamcop.mail. It is crazy to try to impair its support by 'hiding it' and by 'ignoring' it as was previously and currently done. It shouldn't be ignored by administration; it shouldn't be ignored by the website and forum links; and it *should* be supported by anyone who is interested in providing support. furrfu! -- Mike Easter kibitzer, not SC admin From pantheus at suespammers.org Thu Oct 6 19:18:11 2005 From: pantheus at suespammers.org (Ken Knull) Date: Thu Oct 6 21:20:03 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) References: Message-ID: On Thu, 06 Oct 2005 17:58:14 -0700, Mike Easter wrote: > ng/s expanded to .help and .mail -- f/ups to .help > > Mike Easter wrote: >> Keith Jillings wrote: > >>> Thanks for that link - I've not used the forums before - should I use >>> those rather than posting here? >> >> I suppose you /could/ use the forums instead of the newsgroups. Or, >> you could use the spamcop.mail wannabe-dead newsgroup, which would be >> /my/ recommendation. > > Once upon a time some powers came along and tried to destroy support in > the spamcop.mail newsgroup by removing it from here > ... simply because the/a power didn't like to support newsgroup > questions and wanted to instigate his own notions of webforum support. > It was a shortsighted concept because of lack of full appreciation for > what is bad about a webforum's various 'manifestations' and what is good > about nntp support functions. Amen !! Plus don't forget the bubble-headed egos possessed by some of the forums's denizens, that cause me and plenty of others to steer way clear of that place. K. -- In a world without walls and fences nobody needs Windows and Gates! User #104362 with the Linux Counter, http://counter.li.org From nobody at devnull.spamcop.net Thu Oct 6 21:48:25 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Thu Oct 6 21:50:03 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) References: Message-ID: "Mike Easter" wrote in message news:di4h70$b3o$1@news.spamcop.net... > > Just to iterate a little history here. > > Once upon a time some powers came along and tried to destroy support in > the spamcop.mail newsgroup by removing it from here > http://www.spamcop.net/help.shtml#nntp Newsgroups [spamcop, geeks, > social, spam] > > and also from here: > > http://www.spamcop.net/sitemap.shtml > Forums > General discussion > Email discussion > Mailhosts system discussion > NNTP (usenet style) Newsgroups Yeah, but .... links to news://news.spamcop.net were added to Forum page, included in some Topic posts (though admitting that the archives are more used due to the aging off of posts and also getting around the "never heard of NNTP" stuff ... though (also noted 'here in the newsgroups') that some folks are depriving those archives of some useful information with the X-NoArchive: Yes tags) > The webforum structure is very suboptimal for faq construction in spite > of WazoO's diligent efforts to work with what he has; and extremely no argument there > What needs to happen is that the webforums need to do 'their thing'; > plus there needs to be a 'dynamic' faq in some form such as a wiki or > website faq dynamics [as opposed to trying to make a wiki out of a forum > or a webfaq out of a forum]; I may have stumbled accross some keys a few days ago, still checking to see if I can use them and end up with something functional ...??? Been a bit busy lately working on some newly discovered bugs in that app ... But the wiki concept just doesn't really seem plausible, when looking at all the "friendlies" out there that would have a field-day with the opportunity to post that 'perfectly distinctive' dialog to get thier point across ... > It shouldn't be ignored by administration; it shouldn't be ignored by > the website and forum links; and it *should* be supported by anyone who > is interested in providing support. As above, I did it best I could, the link to hit the newsgroup server is at the top of each Forum page, all existing newsgroups (should be) are listed that way. Just to touch on the 'dynamic' aspect, more additions to that version of the FAQ are still on-going ... I even remembered to add you as a contributor this time, stealing yet another one of your excellent responses 'here' On the other hand, I'll point out that you're (probably) included in a recent Topic in the Lounge area ... From MikeE at ster.invalid Thu Oct 6 20:17:48 2005 From: MikeE at ster.invalid (Mike Easter) Date: Thu Oct 6 22:20:02 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) References: Message-ID: WazoO wrote: > "Mike Easter" >> Just to iterate a little history here. >> >> Once upon a time some powers came along and tried to destroy support >> in the spamcop.mail newsgroup by removing it from here >> http://www.spamcop.net/help.shtml#nntp Newsgroups [spamcop, geeks, >> social, spam] >> >> and also from here: >> >> http://www.spamcop.net/sitemap.shtml >> Forums > Yeah, but .... links to news://news.spamcop.net were added to Forum > page, It is true that a newsreader accessing that link news.spamcop.net from the forum page will be provided with a list of newsgroups which includes all of the newsgroups including control, control cancel, spamcop, spamcop.geeks, spamcop.help, spamcop.mail, spamcop.routing, spamcop.social, spamcop.spam and spamcop.test -- and it is also true that the newsserver provides descriptions. But... *EXCEPT* you will notice that the descriptions carry no descriptions of spamcop.mail -- strange how that works. >> What needs to happen is that the webforums need to do 'their thing'; >> plus there needs to be a 'dynamic' faq in some form such as a wiki or >> website faq dynamics [as opposed to trying to make a wiki out of a >> forum or a webfaq out of a forum]; There seems to be some confusion about the concept that all wiki/s are totally 'open' to being altered by anyone who feels like it. There are many many ways to control wiki access and wiki changes and wiki changes oversight. > But the wiki concept just doesn't really seem plausible, when looking > at all the "friendlies" out there that would have a field-day with the > opportunity to post that 'perfectly distinctive' dialog to get thier > point across ... I have never believed that a wiki should be totally universally accessible to change. > On the other hand, > I'll point out that you're (probably) included in a recent Topic in > the Lounge area ... I looked into lounge, but I couldn't figger what you are alluding to. -- Mike Easter kibitzer, not SC admin From MikeE at ster.invalid Thu Oct 6 20:43:54 2005 From: MikeE at ster.invalid (Mike Easter) Date: Thu Oct 6 22:45:04 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) References: Message-ID: WazoO wrote: > "Mike Easter" >> Once upon a time some powers came along and tried to destroy support >> in the spamcop.mail newsgroup by removing it from here >> and also from here: > Yeah, but .... links to news://news.spamcop.net were added to Forum > page, That is inadequate compared to what has been removed and obscured. The availability of spamcop.mail should be 'equi-present' or accessible as the spamcop forums. Trying to hide spamcop.mail was a dumb idea from the very beginning. It doesn't matter who does or does not want to visit the nntp group to post responses. It should be equally visible and equally accessible as both the forum and the other nntp newsgroups. The fact that the very thread that this spun off of which was about spamcop mail but yet started in spamcop.help is evidence of the fact that there is inadequate evidence and presence of the spamcop.mail newsgroup -- Mike Easter kibitzer, not SC admin From me at privacy.net Fri Oct 7 08:14:41 2005 From: me at privacy.net (Kyle Atmore) Date: Fri Oct 7 07:15:03 2005 Subject: [SC-Help] SpamCop reeeeeeeeally slow? Message-ID: I've been reporting all my spam, and generally, I get all the emails back from Spamcop almost immediately. But over the last couple of days, this has been slowing down to the point where I get nothing for quite a while after reporting. For instance, last night before I went to bed, I reported all my current spam. There wasn't a whole lot, but when I got up and checked email this morning, the replies from Spamcop came in over a 6-hour period, one or two at a time. Is something jamming up the system? From post.please.this.email.is.not.valid at example.com Fri Oct 7 09:42:22 2005 From: post.please.this.email.is.not.valid at example.com (DougW) Date: Fri Oct 7 09:45:03 2005 Subject: [SC-Help] Re: SpamCop reeeeeeeeally slow? References: Message-ID: Kyle Atmore did pass the time by typing: > I've been reporting all my spam, and generally, I get all the emails > back from Spamcop almost immediately. But over the last couple of days, > this has been slowing down to the point where I get nothing for quite a > while after reporting. > > For instance, last night before I went to bed, I reported all my current > spam. There wasn't a whole lot, but when I got up and checked email > this morning, the replies from Spamcop came in over a 6-hour period, one > or two at a time. > > Is something jamming up the system? Every now and then SC seems to loose who I am and the ability to sign in. This is what I've been getting: #No userid found #You appear to be using an old login (you may have logged out in another browser session) #Log in here #Cannot open database connection in getRow <------------This line--------------- methinks SC is having "issues". :/ -- DougW From smims at sunstoneinc.com Fri Oct 7 11:36:30 2005 From: smims at sunstoneinc.com (smims@sunstoneinc.com) Date: Fri Oct 7 11:27:12 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) In-Reply-To: Message-ID: Hi Everyone - any ideas on how I can resolve this problem as shown below: Da: Mail Delivery System [mailto:MAILER-DAEMON@ibs01.interbusiness.it] Inviato: gioved? 29 settembre 2005 9.04 A: xxx@karizia.it Oggetto: Delivery Status Notification (Failure) The following message to was undeliverable. The reason for the problem: 5.4.7 - Delivery expired (message too old) '' smims From petunia at flower.pot Fri Oct 7 19:03:44 2005 From: petunia at flower.pot (Flower Power) Date: Fri Oct 7 14:05:02 2005 Subject: [SC-Help] error: couldn't parse head Message-ID: This is my first post, and I'm a spamcop newbie, so I hope this is posted in the correct group. In posting the following spam to spamcop today: http://www.spamcop.net/sc?id=z813081185zd334b68a2fec1233180387e3a14cac64z I noted the error message "error: couldn't parse head" in the report and read the associated FAQ file. The FAQ indicates that the error was probably that the "Content-type" header is not indented when carried over to a second line. The FAQ further insists that I introduced the error, but it appears to me to be in the original message. My reporting method is to preview all messages with an old version of MailWasher (version 1.32), from which I copy and paste the offending message into spamcop and then delete the message without it even being picked up by my mail reader (Thunderbird). This method has worked flawlessly for several weeks/months, now, so I can't see any error on my part. I even cancelled the first report and resubmitted the offending message--with the same result. So, I guess my point is to question the certainty of the FAQ entry or to determine if, in fact, I really did something to cause the error. Thanks for any responses. -Mike From nobody at spamcop.net Fri Oct 7 12:50:18 2005 From: nobody at spamcop.net (N. Miller) Date: Fri Oct 7 14:55:03 2005 Subject: [SC-Help] Re: error: couldn't parse head References: Message-ID: On Fri, 7 Oct 2005 18:03:44 +0000 (UTC), Flower Power wrote: > This is my first post, and I'm a spamcop newbie, so I hope this is posted > in the correct group. > > In posting the following spam to spamcop today: > > http://www.spamcop.net/sc?id=z813081185zd334b68a2fec1233180387e3a14cac64z > > I noted the error message "error: couldn't parse head" in the report and > read the associated FAQ file. The FAQ indicates that the error was > probably that the "Content-type" header is not indented when carried > over to a second line. The FAQ further insists that I introduced the > error, but it appears to me to be in the original message. It wouldn't be the first time that a spammer's application mangled a header. The date following the Content-type header is just "there"; but there is no proper context for its existence. It is not, normally, a part of a Content-type header. -- Norman ~Shine, bright morning light, ~now in the air the spring is coming. ~Sweet, blowing wind, ~singing down the hills and valleys. From MikeE at ster.invalid Fri Oct 7 12:50:27 2005 From: MikeE at ster.invalid (Mike Easter) Date: Fri Oct 7 14:55:06 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) References: Message-ID: smims@sunstoneinc.com wrote: > Hi Everyone - any ideas on how I can resolve this problem as shown > below: You will have to state what the problem is more exactly. What you have shown below doesn't tell me/us enough; I can't make sense or an understanding of what you have pasted absent a context. > Da: Mail Delivery System [mailto:MAILER-DAEMON@ibs01.interbusiness.it] There is no such resolvable host as ibs01.interbusiness.it, so there can be no such working mailer-daemon address so I don't know what system this came from. It could be a non-routing name. > Inviato: gioved? 29 settembre 2005 9.04 That looks like an .it datestamp which is pretty old. > A: xxx@karizia.it That looks like a munged address whose domainname does resolve and which does have an MX mx.karizia.it which resolves to 6 different IPs and those IPs rDNS to mxavasN.aruba.it where N = 1-6. > Oggetto: Delivery Status Notification (Failure) That looks like a DSN. A DSN might be generated by a sender or recipient server. > The following message to was > undeliverable. That looks like a munged username of the sunstoneinc.com domain. That is the same domainname as the From in your header. You didn't happen to describe the circumstances of any part of this message which was pasted into a thread on a different topic. > The reason for the problem: > 5.4.7 - Delivery expired (message too old) '' That is a NDR [non-delivery report] code which indicates that it is permanent with the 5 and that 5.4.7 was intended by RFC 2582 [section 4.1.3] to mean: Time has expired; deliver-by-time reached or passed If the message is not delivered or relayed before deliver-by-time and a by-mode of "R" was specified, no further delivery attempts may be made for the message. The server or MTA MUST issue a "failed" DSN with status 5.4.7, "delivery time expired", for each recipient address with either no NOTIFY parameter specified or for which the NOTIFY parameter includes "FAILURE". -- Mike Easter kibitzer, not SC admin From MikeE at ster.invalid Fri Oct 7 13:10:34 2005 From: MikeE at ster.invalid (Mike Easter) Date: Fri Oct 7 15:15:03 2005 Subject: [SC-Help] Re: error: couldn't parse head References: Message-ID: Flower Power wrote: > This is my first post, and I'm a spamcop newbie, so I hope this is > posted in the correct group. Sure; this is fine. > In posting the following spam to spamcop today: > www.spamcop.net/sc?id=z813081185zd334b68a2fec1233180387e3a14cac64z Good start; posting a tracker is the absolutely best way to communicate about any problem involving a parse of a spam -- or also to show a spam or mail for other reasons than parsing problems. > I noted the error message "error: couldn't parse head" in the report > and read the associated FAQ file. Excellent. Your tracker also allows me to see the verbose parsing result, which shows me that you are configured as being mailhosted. Further, the tracker gives me access to a 'copy' of the original spam. The 'couldn't parse head' in this case actually means the header was parsed, but not the body. > The FAQ indicates that the error was > probably that the "Content-type" header is not indented when carried > over to a second line. The FAQ further insists that I introduced the > error, but it appears to me to be in the original message. That content-type header line is the root of the problem. It is 'funky'. A content-type headerline doesn't normally contain a datestamp, much less an improperly wrapped datestamp. Just for experimental and demonstration purposes [that means do *not* do this to 'solve' the problem] - an identical spam which parsing isn't mailhosted and which does /not/ have the faulty content type condition [that is, turned into a 'normal' content type condition absent the bad or spurious datestamp line under the content type line] shows this normal parse result: http://www.spamcop.net/sc?id=z813118971zb034f81cfaf92481191f0774d572c98az Report Spam to: Re: 72.25.27.57 (Administrator of network where email originates) To: abusenet@dejazzd.com (Notes) Re: http://qqrtexfa6npb8.mononame1.com/?ra=s1250 (Administrator of network hosting website referenced in spam) To: abuse@hanaro.com (Notes) ... meaning that the parser was able to parse the body when there isn't a faulty header condition. See description of normal headers below. > My reporting method is to preview all messages with an old version of > MailWasher (version 1.32), from which I copy and paste the offending > message into spamcop and then delete the message without it even being > picked up by my mail reader (Thunderbird). This method has worked > flawlessly for several weeks/months, now, so I can't see any error on > my part. I even cancelled the first report and resubmitted the > offending message--with the same result. I'm not able to answer for you why the bad line 'crept into' the headers. > So, I guess my point is to question the certainty of the FAQ entry or > to determine if, in fact, I really did something to cause the error. SC will not parse 'faulty' headers. The rules for headers is that headers are supposed to have proper 'beginnings' of lines, which is the header field which contains no spaces and ends with a colon space. Then follows the header value which is either all on one line, or, if the line wraps, the 'wrappage' must result in the proper leading whitespace before the rest of the header value. The 'end' of the header or last headerline is 'signalled' by an empty line. Then the body begins. So, if any lines should come along which do not conform to that condition, SC will recognize that something bad has happened to the header or to the relationship between the header and the body. The bad thing which came along in this case was that datestamp just under the content-type line of the header. That line does not conform to what I described above and it 'screws up' the header and/or header to body relationship, so SC has to bail on the parse of the body. It provides a parse of the headers for source, because SC can 'understand' that much of the header situation. -- Mike Easter kibitzer, not SC admin From smims at sunstoneinc.com Fri Oct 7 15:30:53 2005 From: smims at sunstoneinc.com (smims@sunstoneinc.com) Date: Fri Oct 7 15:21:38 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) In-Reply-To: Message-ID: Mike the problem we are having is that 2 of our partners, 1 of whom is listed in the email, have been receiving this 5.4.7 error message whenever they send email to us. This started happening over the past two weeks. We have check our settings on our Surf SMTP server, our firewall, our DNS and there is nothing blocking these accounts. We are trying to find out what else may be causing the problem why just these 2 are not able to reach us and thousands of others are just fine. This is from our vendor Inovis From: Mail Delivery System [mailto:MAILER-DAEMON@ironport.qrs.com] Subject: Delivery Status Notification (Failure) The following message to was undeliverable. The reason for the problem: 5.4.7 - Delivery expired (message too old) '' Steville "Mike Easter" Sent by: spamcop-help-bounces-+smims=sunstoneinc.com@news.spamcop.net 10/07/2005 01:50 PM Please respond to Help about SpamCop and spam To Steville Mims cc Subject Re: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) smims@sunstoneinc.com wrote: > Hi Everyone - any ideas on how I can resolve this problem as shown > below: You will have to state what the problem is more exactly. What you have shown below doesn't tell me/us enough; I can't make sense or an understanding of what you have pasted absent a context. > Da: Mail Delivery System [mailto:MAILER-DAEMON@ibs01.interbusiness.it] There is no such resolvable host as ibs01.interbusiness.it, so there can be no such working mailer-daemon address so I don't know what system this came from. It could be a non-routing name. > Inviato: gioved? 29 settembre 2005 9.04 That looks like an .it datestamp which is pretty old. > A: xxx@karizia.it That looks like a munged address whose domainname does resolve and which does have an MX mx.karizia.it which resolves to 6 different IPs and those IPs rDNS to mxavasN.aruba.it where N = 1-6. > Oggetto: Delivery Status Notification (Failure) That looks like a DSN. A DSN might be generated by a sender or recipient server. > The following message to was > undeliverable. That looks like a munged username of the sunstoneinc.com domain. That is the same domainname as the From in your header. You didn't happen to describe the circumstances of any part of this message which was pasted into a thread on a different topic. > The reason for the problem: > 5.4.7 - Delivery expired (message too old) '' That is a NDR [non-delivery report] code which indicates that it is permanent with the 5 and that 5.4.7 was intended by RFC 2582 [section 4.1.3] to mean: Time has expired; deliver-by-time reached or passed If the message is not delivered or relayed before deliver-by-time and a by-mode of "R" was specified, no further delivery attempts may be made for the message. The server or MTA MUST issue a "failed" DSN with status 5.4.7, "delivery time expired", for each recipient address with either no NOTIFY parameter specified or for which the NOTIFY parameter includes "FAILURE". -- Mike Easter kibitzer, not SC admin _______________________________________________ SpamCop-Help mailing list SpamCop-Help@news.spamcop.net http://news.spamcop.net/mailman/listinfo/spamcop-help From MikeE at ster.invalid Fri Oct 7 13:43:53 2005 From: MikeE at ster.invalid (Mike Easter) Date: Fri Oct 7 15:45:03 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) References: Message-ID: smims@sunstoneinc.com wrote: > Mike the problem we are having is that 2 of our partners, 1 of whom is > listed in the email, have been receiving this 5.4.7 error message > whenever they send email to us. But I'm still not 'getting it'. Partner1 tries to email you. If we were looking at the headers of the DSN message which partner1 receives, we would be able to tell if partner1 were receiving that message from his own provider or if partner1 were receiving a newmail generated by the recipient server, perhaps namely yours. > This started happening over the past > two weeks. We have check our settings on our Surf SMTP server, our > firewall, our DNS and there is nothing blocking these accounts. We > are trying to find out what else may be causing the problem why just > these 2 are not able to reach us and thousands of others are just > fine. How did you conclude that your server was generating these reports? You haven't shown me that part in a way which I understand yet. > This is from our vendor Inovis I don't know who vendor Inovis is. > From: Mail Delivery System [mailto:MAILER-DAEMON@ironport.qrs.com] I have seen that strange nonrouting domainname before in an earlier thread here. Whichever mailerdaemons you post are 'non-existent' from a routing point of view. From: smims@sunstoneinc.com Newsgroups: spamcop.help Subject: Mail not delivered Date: Mon, 3 Oct 2005 09:24:24 -0500 Message-ID: > Subject: Delivery Status Notification (Failure) > > The following message to was undeliverable. > The reason for the problem: > 5.4.7 - Delivery expired (message too old) '' You are pasting a body of something or other when you need to be pasting its headers to aid in its understanding. -- Mike Easter kibitzer, not SC admin From MikeE at ster.invalid Fri Oct 7 16:33:13 2005 From: MikeE at ster.invalid (Mike Easter) Date: Fri Oct 7 18:35:05 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) References: Message-ID: Mike Easter wrote: > smims@sunstoneinc.com wrote: >> Da: Mail Delivery System >> [mailto:MAILER-DAEMON@ibs01.interbusiness.it] > > There is no such resolvable host as ibs01.interbusiness.it, so there > can be no such working mailer-daemon address so I don't know what > system this came from. It could be a non-routing name. > >> Inviato: gioved? 29 settembre 2005 9.04 > > That looks like an .it datestamp which is pretty old. So presumably the DSN is coming from the .it server, perhaps the one which is trying to mail something to a sunstoneinc.com addy. >> Oggetto: Delivery Status Notification (Failure) > > That looks like a DSN. A DSN might be generated by a sender or > recipient server. And the server is Italian language. >> The following message to was >> undeliverable. We could look at whether or not there are flaws in the smtp 'connectivity' of the sunstone MX. DNS Report for sunstoneinc.com MX section: WARN Multiple MX records WARNING: You only have 1 MX record. If your primary mail server is down or unreachable, there is a chance that mail may have troubles reaching you. and sometimes when I try to connect to mail.sunstoneinc.com at 68.20.90.68 it is very very slow, and sometimes it is not. So, my guess is that at least 2 of your partners is having trouble connecting or transacting with the sunstoneinc server for some reason. -- Mike Easter kibitzer, not SC admin From nobody at devnull.spamcop.net Fri Oct 7 18:49:01 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Fri Oct 7 18:50:04 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) References: Message-ID: "Mike Easter" wrote in message news:di4ls5$dsj$1@news.spamcop.net... > WazoO wrote: > > > Yeah, but .... links to news://news.spamcop.net were added to Forum > > page, > > It is true that a newsreader accessing that link news.spamcop.net from > the forum page will be provided with a list of newsgroups which includes > all of the newsgroups including control, control cancel, spamcop, > spamcop.geeks, spamcop.help, spamcop.mail, spamcop.routing, > spamcop.social, spamcop.spam and spamcop.test -- and it is also true > that the newsserver provides descriptions. But... *EXCEPT* you will > notice that the descriptions carry no descriptions of spamcop.mail -- > strange how that works. Maybe I need to reset or something, but I don't see descriptions for any of the newsgroups (OE6) ..??? > There seems to be some confusion about the concept that all wiki/s are > totally 'open' to being altered by anyone who feels like it. There are > many many ways to control wiki access and wiki changes and wiki changes > oversight. Won't argue the concept, but ... I've been looking at some of the 'free' wiki things out there and not all of them go to that level of control, not all of them are noted for security in general, .... most seem to be put together by the programming types looking at the functionality and display .. the protection from hacking seems to come up a bit later on > > But the wiki concept just doesn't really seem plausible, when looking > > at all the "friendlies" out there that would have a field-day with the > > opportunity to post that 'perfectly distinctive' dialog to get thier > > point across ... > > I have never believed that a wiki should be totally universally > accessible to change. There are those that limit 'control' over posting to some Moderator types, others that go the "Registration" route, others that offer a "roll-back" capability ... but that all goes back to having folks around to handle any of these actions. That effort wasn't around back when the FAQ-o- Matic thing was accessible by mere users, that effort hasn't been demonstrated in getting the many / various "How-To" tutorials developed but by a very few, on and on .... > > On the other hand, > > I'll point out that you're (probably) included in a recent Topic in > > the Lounge area ... > > I looked into lounge, but I couldn't figger what you are alluding to. catch the word "diatribe" in the Title ... From MikeE at ster.invalid Fri Oct 7 17:30:56 2005 From: MikeE at ster.invalid (Mike Easter) Date: Fri Oct 7 19:35:03 2005 Subject: [SC-Help] Re: Newsgroups beef (was Stock inflaters?) References: Message-ID: WazoO wrote: > "Mike Easter" >> the descriptions carry no descriptions of >> spamcop.mail -- strange how that works. > > Maybe I need to reset or something, but I don't see descriptions for > any of the newsgroups (OE6) ..??? Go to the view where the title bar is named 'Newsgroup Subscriptons' and next to the 'display newsgroups which contain' input and cursor there is a place to check 'also search descriptions'. If you check that and reset the list, you will get the descriptions for the SC newsgroups. There are a lot of ways to get the newsgroup subscriptions window, such as select the newsserver and use File/ Properties - or R click the newsserver in the folder view and select newsgroups - or use the synchronization view and click the newsgroups button. >> I looked into lounge, but I couldn't figger what you are alluding to. > > catch the word "diatribe" in the Title ... Yeah I saw that thread and the negatives on the nntp as well as the forum. I tho't that might be it. What does 'brought from a PM' mean? - that you moved something from somewhere else, but what kind of somewhere else? -- Mike Easter kibitzer, not SC admin From keithj at spamcop.net Mon Oct 10 01:01:27 2005 From: keithj at spamcop.net (Keith Jillings) Date: Sun Oct 9 19:05:03 2005 Subject: [SC-Help] Re: Stock inflaters? In-Reply-To: References: Message-ID: Mike Easter wrote: > Since this thread is a mess; I think I'll start all over again from the > very beginning. If I had a clue what this and the following thread is all about, maybe it would help. I haven't and it doesn't. The problem was that I was receiving spam via Spamcop despite my filter settings. I didn't know why. Pete Stephenson's answer gave all the information I needed, concisely and politely - thanks, Pete. I'll watch and see if the problem goes away in the next few days. I'm baffled as to why my simple question launched this flame attack followed by a long debate. Perhaps it's a newsgroup thing, but it didn't help me. Clearly, asking here isn't the thing to do when help is needed with Spamcop. Sorry to have intruded into your private club. I won't do it again. From h9vzc2i02 at sneakemail.com Sun Oct 9 21:43:39 2005 From: h9vzc2i02 at sneakemail.com (Anon_) Date: Sun Oct 9 23:45:06 2005 Subject: [SC-Help] Re: Stock inflaters? References: Message-ID: "Keith Jillings" wrote in message news:dic7g8$gi4$1@news.spamcop.net... > Mike Easter wrote: > > > Since this thread is a mess; I think I'll start all over again from the > > very beginning. > > If I had a clue what this and the following thread is all about, maybe > it would help. I haven't and it doesn't. > > > I'm baffled as to why my simple question launched this flame attack > followed by a long debate. Perhaps it's a newsgroup thing, but it > didn't help me. Clearly, asking here isn't the thing to do when help > is needed with Spamcop. > *** I think that your question regarding "mail" should have been posted in the spamcop,mail ng. There have been other postings stating that the mail manager monitors that ng and not necessarily this (help) ng. I'm sorry you got flamed, but there are posters that love to flame any posting. -- A SpamCop user and forum reader, Not Admin *** From nobody at spamcop.net Mon Oct 10 14:34:17 2005 From: nobody at spamcop.net (Ellen) Date: Mon Oct 10 14:25:03 2005 Subject: [SC-Help] Transient Problems was Re: Cannot Log in - server problems? References: Message-ID: "Tim P." wrote in message news:Xns96EB75E4033CEdwvbo91q4001sneakema@216.154.195.61... > The server must be experiencing problems this morning. > > I was able to report a batch of spams this morning but then at about 9am on > the service was spotty. It would take it's time to process, then it came > back with a text page of what was supposed to be html. I would be prompted > to log in repeatedly and now it appears my user id is not even in the > database. > > Confirmation? > > -- We are experiencing some transient system problems. System operations and engineering is aware of these problems and they are working on them. I don't have an ETA at this point. Thanks. Ellen SpamCop From stephen.johnston at casema.nl Thu Oct 13 11:11:54 2005 From: stephen.johnston at casema.nl (Stephen Johnston) Date: Thu Oct 13 04:15:03 2005 Subject: [SC-Help] Windows xp spam question Message-ID: Hi, Does spam travel across different users in Windows XP? In other words, if somebody gets my email address and starts spamming me, will they also spam another user account on the same xp configuration? Thanks From smims at sunstoneinc.com Thu Oct 13 05:00:22 2005 From: smims at sunstoneinc.com (smims@sunstoneinc.com) Date: Thu Oct 13 04:52:19 2005 Subject: [SC-Help] Steville Mims is out of the office. Message-ID: I will be out of the office starting 10/11/2005 and will not return until 10/17/2005. For EDI related matters, please send to edi@sunstoneinc.com. Other IT requests, send to helpdesk@sunstoneinc.com. Otherwise I will reply to messages on my return. From wb8tyw at qsl.network Thu Oct 13 09:38:40 2005 From: wb8tyw at qsl.network (John E. Malmberg) Date: Thu Oct 13 08:40:04 2005 Subject: [SC-Help] Re: Windows xp spam question In-Reply-To: References: Message-ID: Stephen Johnston wrote: > Hi, > > Does spam travel across different users in Windows XP? In other words, if > somebody gets my email address and starts spamming me, will they also spam > another user account on the same xp configuration? Spammers will mix and match names and domains from e-mail addresses found on the internet and possibly on machines infected with worms. So if a if you have usernames that are in common use, and one user in a domain gets a spam, chances are that the others will eventually get some spam. If a machine on your network is infected with a virus, the spammers and other malware writers may have a copy of every document that was on that computer or the users of that computer were authorized to access. Note that virus and spyware scanners only find previously discovered infections, not all possible infections. Such scanners are usually 8 hours behind the latest discovered worm in their definitions. Depending on a virus scanner is like leaving your house unlocked and depending on a burglar to trip an alarm that they are looking for. The web browsers on many machines will give out a ton of personal information on request of a website. If the e-mail is HTML enabled, and automatically opens external links when you read the e-mail, then it is a gold mine to the spammers, as this has confirmed that their e-mail was read, confirms that they got through your network spam filtering, and have reached an exploitable computer. For keeping spam out, the only thing that has been found to cause many networks to clean up security problems or deliberate hosting of spam is when all e-mail from those addresses is refused by either a number of small networks or a large ISP or network. This practice has been going on for so long, it is rare that an I.P. address (considering all the internet) that sends a noticeable amount of spam will actually be sending any real e-mail. Because of that, the use of conservative blocking lists to keep spam out of an e-mail server is far more accurate in both blocking and false positives than any system that tries to content analyze all mail and separate the spam from the real mail. The difference is that in most cases, when a real mail is stopped by a blocking list, the sender usually gets notified by their mail server. This visible indication horrifies some people who would rather shoot messengers than know about security / configuration problems in a mail server and get the real problem fixed. With user spam filters or most content type spam filters, when a real e-mail is detected as spam it is silently deleted with both the sender and the receiver ignorant of the problem. For some strange reason, that is the currently the preferred way of doing commercial and corporate spam filtering, where potentially important e-mails will be tossed with out a trace. With no spam filtering at all, real mails are even more likely to get lost in the mess either from human errors or from mail server/network overloads. Again because the problems are usually invisible, they appear to be less than in the case that gives a true indication of what is going on. -John wb8tyw@qsl.network Personal Opinion Only From MikeE at ster.invalid Thu Oct 13 22:30:56 2005 From: MikeE at ster.invalid (Mike Easter) Date: Fri Oct 14 00:35:04 2005 Subject: [SC-Help] Re: Spammer Redirection Trick References: Message-ID: Posted to .help and .spam; f/ups to .help Glenn Daniels wrote: > "El Guapo" wrote: > >> What is the spammer doing with redirection in this spam and how does >> it work? If you go to the website, it redirects people to >> http://freewebcamangels.com/brookewebcam, but that url is not listed >> anywhere in the spam. > > The answer is in the code found here: > You should be redirect to my new home page in 5 seconds... If for some > reason > your not please click href="http://www.freewebcamangels.com/brookewebcam">here >> Also, why is Yahoo Music listed in there? My e-mail address is not >> munged/at/yahoo.com, so they must have BCC-ed me. >> > > Why not put Yahoo Music in there? You think > Yahoo! will take a hit for spamvertising? I don't > theenk so! Is like pinning a URL for a CNN > newsitem to a Pimp'nDump scam to give it a > flavor of legitimacy. Without the Yahoo! link > spamitem is pure unadulterated crap! Personally, I thought the yahoo music spamvertising was put in there 'automatically' or additionally by the yahoo webmailer, not by the spammer, but that isn't the main reason I'm commenting. This is a small housekeeping editorial of my opinion about posting spam in spamcop.spam and then discussing the item here.. First, I believe that it is better to post a tracker to a spam than to post a spam in spamcop.spam, which /is/ in fact a group 'dedicated' for posting spam. This is the tracker for the spam you pasted here http://www.spamcop.net/sc?id=z815433831z44ddb89537edfd1d85937c9ddde1a64az You get that tracker by submitting the spam to the parser, copying its tracker from the top of the parse before reporting or cancelling - where it says "Here is your TRACKING URL - it may be saved for future reference:" - and then approving or cancelling the report as appropriate. The spam you pasted into .spam got 'bent' by linewraps caused by your newsreader's automatic linewrapping functions, and therefore it isn't as valuable 'experimentally' to someone who wants to look at your spam, because the bent spam has to somehow be restored to its original condition by manually removing the linewraps. Second, if you paste a spam in .spam, the 'natural' and simplest thing for someone to do is to answer the question there, instead of 'moving' the discussion somewhere else by messing with the headers of the answering post and putting it in .spam and some other 'normal' discussion group -- like I'm doing now. The problem with discussing a spam pasted into .spam is that 'no one' reads in .spam because it is traditionally just a place for pasting spam which is being discussed in a discussion group. Who wants to go to .spam and read raw spam? So, IMO, the better thing to do for all purposes is to make a tracker of a spam and to paste the tracker into a normal discussion group like spamcop or spamcop.help along with your questions. Then the spam remains intact at the tracker, and the discussion can happen in a normal discussion group where more people will see it and benefit from it -- Mike Easter kibitzer, not SC admin From nobody at devnull.spamcop.net Fri Oct 14 02:48:53 2005 From: nobody at devnull.spamcop.net (Glenn Daniels) Date: Fri Oct 14 01:50:06 2005 Subject: [SC-Help] Re: Spammer Redirection Trick References: Message-ID: "Mike Easter" wrote in message > Posted to .help and .spam; f/ups to .help > > Glenn Daniels wrote: > > "El Guapo" wrote: > > > >> What is the spammer doing with redirection in this spam and how does > >> it work? If you go to the website, it redirects people to ... > Second, if you paste a spam in .spam, the 'natural' and simplest thing > for someone to do is to answer the question there, instead of 'moving' > the discussion somewhere else by messing with the headers of the > answering post and putting it in .spam and some other 'normal' > discussion group -- like I'm doing now. Sorry, Mike. I was caught up in the responding and neglected the housekeeping. My bad... > The problem with discussing a spam pasted into .spam is that 'no one' > reads in .spam because it is traditionally just a place for > pasting spam which is being discussed in a discussion group. Who wants > to go to .spam and read raw spam? uilty? I dint look at the spam, I looked at the question being posed . > So, IMO, the better thing to do for all purposes is to make a tracker of > a spam and to paste the tracker into a normal discussion group like > spamcop or spamcop.help along with your questions. Then the spam > remains intact at the tracker, and the discussion can happen in a normal > discussion group where more people will see it and benefit from it Agreed: .spam is as a last resort when one can't obtain a parse tracker. Thanks for the fups. Glenn From nobody at spamcop.net Fri Oct 14 11:56:29 2005 From: nobody at spamcop.net (N. Miller) Date: Fri Oct 14 14:00:03 2005 Subject: [SC-Help] Re: Windows xp spam question References: Message-ID: <1g4bq5jdtsan8$.dlg@news.spamcop.net> On Thu, 13 Oct 2005 10:11:54 +0200, Stephen Johnston wrote: > Does spam travel across different users in Windows XP? In other words, if > somebody gets my email address and starts spamming me, will they also spam > another user account on the same xp configuration? The operating system has nothing to do with spam. Spammers send email to email addresses. Those are assigned by email providers, and in most cases involve remote email servers. If you have to different users sharing one Windows XP system, and they don't share an email account with a second email address as an alias, then they won't get the same spam. However, if you have two users who are sharing an email account with aliases, then the spam always goes to the same Inbox on the mail provider's server. It will then appear to be spammed to different users on the same Windows XP system. Or the same Windows 95 system. Or the same Redhat Linux system. -- Norman ~Shine, bright morning light, ~now in the air the spring is coming. ~Sweet, blowing wind, ~singing down the hills and valleys. From jamessalisburyspam at salisbury.org.uk Sat Oct 15 21:02:46 2005 From: jamessalisburyspam at salisbury.org.uk (James Salisbury) Date: Sat Oct 15 15:05:03 2005 Subject: [SC-Help] How to set up filters Message-ID: Hi, How should I set up my filters to drop southern@jsalisbury......... co.uk (most of the dots come out!!) Thanks From nobody at devnull.spamcop.net Sat Oct 15 16:00:17 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Sat Oct 15 16:05:25 2005 Subject: [SC-Help] Re: How to set up filters References: Message-ID: "James Salisbury" wrote in message news:dirjoo$a50$1@news.spamcop.net... > > How should I set up my filters to drop southern@jsalisbury......... co.uk > (most of the dots come out!!) ???? Outlook, Outlook Express, Thunderbird ??? A SpamCop Filtered E-mail Account? Sources for help (if one makes the flying assumption that your posting to one SpamCop newsgroup implies that this is a SpamCop E-mail account question (funny, was just working on this entry for a KnowledgeBase thing I'm working on) news://news.spamcop.net/spamcop.mail http://forum.spamcop.net/forums/ http://forum.spamcop.net/forums/index.php?act=faq&article=20 From jamessalisburyspam at salisbury.org.uk Sat Oct 15 22:36:51 2005 From: jamessalisburyspam at salisbury.org.uk (James Salisbury) Date: Sat Oct 15 16:40:02 2005 Subject: [SC-Help] Re: How to set up filters References: Message-ID: "WazoO" wrote in message news:dirn4h$c0i$1@news.spamcop.net... > "James Salisbury" wrote in message > news:dirjoo$a50$1@news.spamcop.net... >> >> How should I set up my filters to drop southern@jsalisbury......... > co.uk >> (most of the dots come out!!) > > ???? Outlook, Outlook Express, Thunderbird ??? > A SpamCop Filtered E-mail Account? > > Sources for help (if one makes the flying assumption that > your posting to one SpamCop newsgroup implies that this > is a SpamCop E-mail account question (funny, was just > working on this entry for a KnowledgeBase thing I'm > working on) > > news://news.spamcop.net/spamcop.mail > http://forum.spamcop.net/forums/ > http://forum.spamcop.net/forums/index.php?act=faq&article=20 > > yes it is my spam cop account so I have under mail filters to contains southern@jsalisbury.clara etc discard but I am sure mail is still getting through What could be wrong? From nobody at devnull.spamcop.net Sat Oct 15 17:54:51 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Sat Oct 15 17:55:04 2005 Subject: [SC-Help] Re: How to set up filters References: Message-ID: "James Salisbury" wrote in message news:dirp96$d58$1@news.spamcop.net... > > "WazoO" wrote in message > news:dirn4h$c0i$1@news.spamcop.net... > > > > Sources for help (if one makes the flying assumption that > > your posting to one SpamCop newsgroup implies that this > > is a SpamCop E-mail account question (funny, was just > > working on this entry for a KnowledgeBase thing I'm > > working on) > > > > news://news.spamcop.net/spamcop.mail > > http://forum.spamcop.net/forums/ > > http://forum.spamcop.net/forums/index.php?act=faq&article=20 > > yes it is my spam cop account > > so I have under mail filters > > to contains southern@jsalisbury.clara etc > discard but I am sure mail is still getting through > > What could be wrong? How do I know? ... I suggested, hinted, pointed to where you might get help ... Technically, you are in the wrong newsgroup for a SpamCop e-mail account issue .. though someone may provide an answer ... it'd be much quicker if you walked over to one of the actual support points ... From me at privacy.net Tue Oct 18 09:23:31 2005 From: me at privacy.net (Kyle Atmore) Date: Tue Oct 18 08:25:03 2005 Subject: [SC-Help] How many reports are there? Message-ID: You know what would be incredibly useful? I'm a non-paid user--I just report my spam using MailWasher, then come to spamcop to complete the reports. Problem is, once I log in, that screen says: Unreported Spam Saved: >Report Now< You have submitted spam which has not yet been reported. Please avoid re-reporting spam. If you have already reported this spam or do not want to report it, please make sure to click "cancel" instead of submitting the report! Great. But how many do I have sitting out there? The link >Report Now< takes me to one of them seemingly at random. Would it be REALLY hard to have it say: You have submitted 48 spams which have not yet been reported. Or something along those lines? Just suggestin'.... From dwvbo91q4001 at sneakemail.com Tue Oct 18 15:19:47 2005 From: dwvbo91q4001 at sneakemail.com (Tim P.) Date: Tue Oct 18 10:20:05 2005 Subject: [SC-Help] Blocklists not being checked? Message-ID: Blocklists not being querried today? I found almost all my spam this morning tagged by spamassassin and not anything else. I use all the blocklists so this is unusual considering that most of the junk is normally listed by them. -- Tim P Very content SpamCop Subscriber since 4/2002 From MikeE at ster.invalid Tue Oct 18 11:34:39 2005 From: MikeE at ster.invalid (Mike Easter) Date: Tue Oct 18 13:35:03 2005 Subject: [SC-Help] Re: Blocklists not being checked? References: Message-ID: posted to .help & .mail; f/ups to .mail Tim P. wrote: > Blocklists not being querried today? I found almost all my spam this > morning tagged by spamassassin and not anything else. I use all the > blocklists so this is unusual considering that most of the junk is > normally listed by them. This .help ng and the spamcop ng are principally for 'general' spamcop questions. The old musty ng spamcop.mail was originally for help with spamcop mail account related issues, but that ng is hidden away from public view except when you access the spamcop newsserver at news://news.spamcop.net which will provide a view of all of the newsgroups, including control.cancel and routing and such, including spamcop.mail. Someone familiar with mail may come along here, or I can post this in .mail and .help and make f/ups to .mail, or, if you are not averse webforums, you can look in there; or if you /really/ like webforums, you can register and post a question in there. http://forum.spamcop.net/forums/index.php?showforum=4 SpamCop Email System & Accounts -- Mike Easter kibitzer, not SC admin From nobody at spamcop.net Tue Oct 18 11:51:48 2005 From: nobody at spamcop.net (N. Miller) Date: Tue Oct 18 13:55:04 2005 Subject: [SC-Help] Re: How many reports are there? References: Message-ID: <1txy59axejzgv$.dlg@news.spamcop.net> On Tue, 18 Oct 2005 08:23:31 -0400, Kyle Atmore wrote: > I'm a non-paid user--I just report my spam using MailWasher, then come > to spamcop to complete the reports. > > Problem is, once I log in, that screen says: > > Unreported Spam Saved: >Report Now< > You have submitted spam which has not yet been reported. Please avoid > re-reporting spam. If you have already reported this spam or do not want > to report it, please make sure to click "cancel" instead of submitting > the report! > > Great. But how many do I have sitting out there? As many as the email acknowledgment that SpamCop sends when the reports are ready for action. In my experience, anyway, as a non-paid reporter. Of course, I route all spam to a "spam handling" account, and I work out of that account in my mail client when I am reporting spam. -- Norman ~Shine, bright morning light, ~now in the air the spring is coming. ~Sweet, blowing wind, ~singing down the hills and valleys. From amenex at amenex.com Tue Oct 18 17:43:36 2005 From: amenex at amenex.com (George Langford, Sc.D.) Date: Tue Oct 18 16:43:38 2005 Subject: [SC-Help] Connecting to earthlink's popmail server Message-ID: <20051018164336.zzu4o44g00kk8c40@webmail.spamcop.net> SpamCop's mail server isn't having any luck popping messages from my earthlink.net account. After talking with a helpful Earthlink Tech Support person, I was given to understand that I should tell SpamCop's popmail server to use port 587 and that I should check the box pertaining to requiring authentication. However, the only choices I have with the Options menu in SpamCop's email client are POP server name, username, password, and use SSL. What is the magic word ? George Langford, Sc.D. Principal Consultant Amenex Associates, Inc. amenex@amenex.com http://www.amenex.com/ From MikeE at ster.invalid Tue Oct 18 15:16:23 2005 From: MikeE at ster.invalid (Mike Easter) Date: Tue Oct 18 17:20:04 2005 Subject: [SC-Help] Re: Connecting to earthlink's popmail server References: Message-ID: George Langford, Sc.D. wrote: > SpamCop's mail server isn't having any luck popping messages from > my earthlink.net account. Remember that 'pop/ing' is about receiving mail, not sending it. > After talking with a helpful Earthlink > Tech Support person, If you actually talked to a /helpful/ EL techsupport, that is an exceedingly rare occurrence. You should go out and try to sight the ivory billed woodpecker. > I was given to understand that I should tell > SpamCop's popmail server to use port 587 and that I should check > the box pertaining to requiring authentication. The business about port 587 has to do with EL's smtp authentication for *sending* email, not *receiving* it. I think you have probably talked to one of the same .in or .ph barnswallows pretending to be EL support that everyone else gets, not the rare woodpecker^1. If you were sending mail you would use smtpauth for the smtp server and port 587 and configure to authenticate. If you are receiving mail you use the normal port 110 > However, the only > choices I have with the Options menu in SpamCop's email client are > POP server name, username, password, and use SSL. What is the > magic word ? EL's servers consider your account name to be your email address, not just the front end username section. I'm not familiar with SC's configurations, but if SC wants to call the account name 'username' then you would be putting your whole EL address in there, not just the front part. EL doesn't want you to use SSL. So the settings are: server name = pop.earthlink.net; username = EL email address; pw = pw; port = 110 [normal]; negative on the SSL. If you are going to mail out: servername = smtpauth.earthlink.net; username = EL mail address; check YES server requires authentication [which are the same settings as your incoming], negative on SSL or secure password authorization, port = 587 [it will also work on the normal 25, except when it doesn't for some people]. ^1 Campephilus principalis -- Mike Easter kibitzer, not SC admin From devnull at spamcop.net Wed Oct 19 13:59:31 2005 From: devnull at spamcop.net (Frog Prince) Date: Wed Oct 19 13:30:03 2005 Subject: [SC-Help] Re: How many reports are there? References: Message-ID: "Kyle Atmore" wrote in message news:dj2pg3$plp$1@news.spamcop.net... | You know what would be incredibly useful? | | I'm a non-paid user--I just report my spam using MailWasher, then come | to spamcop to complete the reports. | | Problem is, once I log in, that screen says: | | Unreported Spam Saved: >Report Now< | You have submitted spam which has not yet been reported. Please avoid | re-reporting spam. If you have already reported this spam or do not want | to report it, please make sure to click "cancel" instead of submitting | the report! | | Great. But how many do I have sitting out there? The link >Report Now< | takes me to one of them seemingly at random. Would it be REALLY hard to | have it say: | | You have submitted 48 spams which have not yet been reported. | | Or something along those lines? | | Just suggestin' good idea and one that has been requested in the past. It would be a lot more useful and likely use less CPU time that the average time of reports. From edb2000 at spamcop.net Wed Oct 19 21:35:14 2005 From: edb2000 at spamcop.net (Don Wannit) Date: Wed Oct 19 23:40:03 2005 Subject: [SC-Help] Re: How many reports are there? In-Reply-To: References: Message-ID: Frog Prince wrote: > "Kyle Atmore" wrote in message > news:dj2pg3$plp$1@news.spamcop.net... > | Great. But how many do I have sitting out there? The link >Report Now< > | takes me to one of them seemingly at random. Would it be REALLY hard to > | have it say: > | > | You have submitted 48 spams which have not yet been reported. > | > | Or something along those lines? > | > | Just suggestin' > > good idea and one that has been requested in the past. It would be a lot > more useful and likely use less CPU time that the average time of reports. Truly. Requested many times by many people, myself included. Some speculation has been that the extra processing required to count 'em up for everyone would be excessive. No one in a real position to know (i.e. Julian) has said one way or another. A useful hint for paid members: use the "Past Reports" link at the top of your logged-in page. You can estimate the number of pending spams by paging through screenfulls (screens full?) of "No reports filed" submitted spams. They seem to be shown 10 to a page, so keep hitting the "Older reports" link at the bottom until you get to some spams with links to reports. It's tedious, and you don't want to do it every time, but if you REALLY want to know, it's possible to get a close estimate. NOTE: if you click the Cancel button, that spam will still show up as "No reports filed" in the list of your Past Reports. That's why I say this is an estimate of pending spams. HTH... -- Don Wannit A paid SpamCop user since 1999 From digno at pacific.net.ph Thu Oct 20 17:29:29 2005 From: digno at pacific.net.ph (digno asuncion) Date: Thu Oct 20 04:29:45 2005 Subject: [SC-Help] Re: How many reports are there? References: Message-ID: <000c01c5d550$64934440$14ac17d2@homeasuncion> Please stop sending me email. ----- Original Message ----- From: "Don Wannit" Newsgroups: spamcop.help To: "digno asucnion" Sent: Thursday, October 20, 2005 11:35 AM Subject: [SC-Help] Re: How many reports are there? > Frog Prince wrote: >> "Kyle Atmore" wrote in message >> news:dj2pg3$plp$1@news.spamcop.net... >> | Great. But how many do I have sitting out there? The link >Report Now< >> | takes me to one of them seemingly at random. Would it be REALLY hard >> to >> | have it say: >> | >> | You have submitted 48 spams which have not yet been reported. >> | >> | Or something along those lines? >> | >> | Just suggestin' >> >> good idea and one that has been requested in the past. It would be a lot >> more useful and likely use less CPU time that the average time of >> reports. > > > Truly. Requested many times by many people, myself included. Some > speculation has been that the extra processing required to count 'em up > for everyone would be excessive. No one in a real position to know > (i.e. Julian) has said one way or another. > > A useful hint for paid members: use the "Past Reports" link at the > top of your logged-in page. You can estimate the number of pending > spams by paging through screenfulls (screens full?) of "No reports > filed" submitted spams. They seem to be shown 10 to a page, so > keep hitting the "Older reports" link at the bottom until you > get to some spams with links to reports. > > It's tedious, and you don't want to do it every time, but if you > REALLY want to know, it's possible to get a close estimate. > > NOTE: if you click the Cancel button, that spam will still show > up as "No reports filed" in the list of your Past Reports. That's > why I say this is an estimate of pending spams. > > HTH... > > -- > Don Wannit > A paid SpamCop user since 1999 > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From MikeE at ster.invalid Thu Oct 20 03:49:12 2005 From: MikeE at ster.invalid (Mike Easter) Date: Thu Oct 20 05:50:02 2005 Subject: [SC-Help] Re: How many reports are there? References: Message-ID: digno asuncion wrote: > Please stop sending me email. Silly person. Only you can unsubscribe yourself from what you subscribed to and then confirmed that you subscribed to it. When you subscribe to a mailing list, you will continue to receive mail from the list until you properly unsubscribe. You can't simply post a message or an email to the list and expect that to unsubscribe you. >> _______________________________________________ >> SpamCop-Help mailing list >> SpamCop-Help@news.spamcop.net >> http://news.spamcop.net/mailman/listinfo/spamcop-help List-Unsubscribe: , Once upon a time you went to the link above http://news.spamcop.net/mailman/listinfo/spamcop-help and there you filled in your name and email address and requested to be on the spamcop.help mailing list. Then you were sent a confirmatory mail according to the instructions: "You will be sent email requesting confirmation, to prevent others from gratuitously subscribing you." That same page instructs you in the unsubscribe process which is on the same page: "To unsubscribe from SpamCop-Help, get a password reminder, or change your subscription options enter your subscription email address..." where you can fill in your email addy and click the button. You can also click the unsub mailto link I've provided for you above. Posted only, not emailed. I might spoonfeed, but I'm not going to spoonfeed with a baby spoon with a handle. -- Mike Easter kibitzer, not SC admin From amenex at amenex.com Thu Oct 20 17:06:11 2005 From: amenex at amenex.com (George Langford,Sc.D.) Date: Thu Oct 20 08:30:57 2005 Subject: [SC-Help] Re: Connecting to earthlink's popmail server Message-ID: <4357F8B3.3040906@amenex.com> I originally inquired as to how SpamCop's might retrieve emails from my earthlink.net email account: > > However, the only choices I have with the Options menu in SpamCop's email > > client are POP server name, username, password, and use SSL. What is the > > magic word ? To which Mike Easter answered: > EL's servers consider your account name to be your email address, not > just the front end username section. I'm not familiar with SC's > configurations, but if SC wants to call the account name 'username' then > you would be putting your whole EL address in there, not just the front > part. That's my experience, too. That's how it's been set for my attempts to pop mail from the earthlink server from my SpamCop account. Additionally, Mike said: > So the settings are: server name = pop.earthlink.net; username = EL > email address; pw = pw; port = 110 [normal]; negative on the SSL. I'm baffled; where do I put that port number? What about: pop.earthlink.net:110 ? Nope; that's not it ... Mike didn't give the full citation: > ^1 Campephilus principalis http://www.birds.cornell.edu/programs/AllAboutBirds/BirdGuide/Ivory-billed_Woodpecker_dtl.html Amenex From devnull at spamcop.net Thu Oct 20 09:25:46 2005 From: devnull at spamcop.net (Frog Prince) Date: Thu Oct 20 08:55:02 2005 Subject: [SC-Help] Re: How many reports are there? References: Message-ID: "Don Wannit" wrote in message news:dj739j$d5q$1@news.spamcop.net... | Frog Prince wrote: | > "Kyle Atmore" wrote in message | > news:dj2pg3$plp$1@news.spamcop.net... | > | Great. But how many do I have sitting out there? The link >Report Now< | > | takes me to one of them seemingly at random. Would it be REALLY hard to | > | have it say: | > | | > | You have submitted 48 spams which have not yet been reported. | > | | > | Or something along those lines? | > | | > | Just suggestin' | > | > good idea and one that has been requested in the past. It would be a lot | > more useful and likely use less CPU time that the average time of reports. | | | Truly. Requested many times by many people, myself included. Some | speculation has been that the extra processing required to count 'em up | for everyone would be excessive. No one in a real position to know | (i.e. Julian) has said one way or another. You have to count/total before you can average. Drop the average function = fewer CPU cycles. From MikeE at ster.invalid Thu Oct 20 07:04:07 2005 From: MikeE at ster.invalid (Mike Easter) Date: Thu Oct 20 09:05:04 2005 Subject: [SC-Help] Re: Connecting to earthlink's popmail server References: Message-ID: George Langford,Sc.D. wrote: > Additionally, Mike said: > >> So the settings are: server name = pop.earthlink.net; username = EL >> email address; pw = pw; port = 110 [normal]; negative on the SSL. > > I'm baffled; where do I put that port number? Why do you have to put it anywhere? > What about: pop.earthlink.net:110 ? Nope; that's not it ... The only reason I mentioned the port 110 was because of where your EL 'tech' advice was trying to lead you about the smtpauth sending port number information. Port 110 is 'normal' for pop servers. I've never even seen this place you are talking about trying to fill out. You said "Options menu in SpamCop's email client are POP server name, username, password, and use SSL. What is the magic word ?" popservername = pop.earthlink.net username = ELemailaddy pw = pw useSSL = negative Spamcop.help and spamcop are for 'general' spamcop discussions. spamcop.mail and the spamcop mail forum are for discussing spamcop mail problems. -- Mike Easter kibitzer, not SC admin From edb2000 at spamcop.net Thu Oct 20 08:12:38 2005 From: edb2000 at spamcop.net (Don Wannit) Date: Thu Oct 20 10:15:04 2005 Subject: [SC-Help] Re: How many reports are there? In-Reply-To: References: Message-ID: Frog Prince wrote: > "Don Wannit" wrote in message > | Truly. Requested many times by many people, myself included. Some > | speculation has been that the extra processing required to count 'em up > | for everyone would be excessive. No one in a real position to know > | (i.e. Julian) has said one way or another. > > You have to count/total before you can average. Drop the average function = > fewer CPU cycles. > ?? what average function? Aren't we talking about counting the total number of pending spams for each individual user and displaying it on their own personal login/reporting page? -- Don Wannit A paid SpamCop user since 1999 From nobody at spamcop.net Fri Oct 21 15:58:40 2005 From: nobody at spamcop.net (Ellen) Date: Fri Oct 21 15:05:03 2005 Subject: [SC-Help] Maintenance Window 10/21/2005 -- Effective Immediately Message-ID: We are starting a maintenance window to update portions of the reporting system. This will not effect the SpamCop mail system. We expect this to take less than 2 hours. The maintenance will start shortly. Thank you for your patience. Ellen SpamCop Follow'ups to Spamcop Please propagate to the forums From nobody at spamcop.net Sat Oct 22 10:59:45 2005 From: nobody at spamcop.net (Ellen) Date: Sat Oct 22 10:10:04 2005 Subject: [SC-Help] Maintenance Window 10/25/2005 Message-ID: Maintenance Window Tuesday, October 25, 2005 14:00 -0400 The reporting system will be down for maintenance 12/25/05. We anticipate that this will take less than 2 hours. Your submitted spam will be queued by the mailservers and processed when the system is back up. There may be slight delays in processing spam as the system works through the backlog. Thank you for your patience. The email system is not affected and will operate as usual. Ellen SpamCop Followups to spamcop Please propagate to the forums. From nobody at spamcop.net Sat Oct 22 18:04:48 2005 From: nobody at spamcop.net (Ellen) Date: Sat Oct 22 17:15:02 2005 Subject: [SC-Help] Maintenance Window -- 10/25/2005 correction Message-ID: Maintenance Window Tuesday, October 25, 2005 14:00 -0400 The reporting system will be down for maintenance *****10/25/05.****** We anticipate that this will take less than 2 hours. Your submitted spam will be queued by the mailservers and processed when the system is back up. There may be slight delays in processing spam as the system works through the backlog. Thank you for your patience. The email system is not affected and will operate as usual Sorry the original text had a fat finger -- the maint window is not 12/25 but 10/25 -- sigh. And I really *do* read this stuff before I post it :-( Ellen SpamCop From 96q7vwa02 at sneakemail.com Mon Oct 24 19:10:15 2005 From: 96q7vwa02 at sneakemail.com (Fred K.) Date: Mon Oct 24 22:15:03 2005 Subject: [SC-Help] Inbound UDP Message-ID: I got this and am wondering what to do besides nothing. 10/24/2005 2:11:55 PM,"Rule ""Default Block Bla Trojan horse"" blocked (169.254.249.73,1042).","Rule ""Default Block Bla Trojan horse"" blocked (169.254.249.73,1042). Inbound UDP packet. Local address,service is (localhost,1042). Remote address,service is (169.254.249.73,1042). Process name is ""N/A""." NetRange: 169.254.0.0 - 169.254.255.255 CIDR: 169.254.0.0/16 NetName: LINKLOCAL NetHandle: NET-169-254-0-0-1 Parent: NET-169-0-0-0-0 NetType: IANA Special Use NameServer: BLACKHOLE-1.IANA.ORG NameServer: BLACKHOLE-2.IANA.ORG Comment: Please see RFC 3330 for additional information. RegDate: 1998-01-27 Updated: 2002-10-14 Is Blachole compromised? what significance does ",1042" at the end of the IP have? Thanks Fred k From MikeE at ster.invalid Mon Oct 24 20:45:57 2005 From: MikeE at ster.invalid (Mike Easter) Date: Mon Oct 24 22:50:03 2005 Subject: [SC-Help] Re: Inbound UDP References: Message-ID: Fred K. wrote: > I got this and am wondering what to do besides nothing. > > > 10/24/2005 2:11:55 PM,"Rule ""Default Block Bla Trojan horse"" blocked > (169.254.249.73,1042).","Rule ""Default Block Bla Trojan horse"" Many so-called software or personal 'firewalls' 'name' something [Bla Trojan horse] by some kind of characteristic, such as the port 1042, which isn't necessarily or even likely specific. There's a real problem with my using a term like 'firewall' which has one kind of popular usage about software which is unacceptable to firewall professionals. They want that term to refer to a seriously competent hardware based firewall which has also been 'officially' tested by an approved firewall 'agency'. They aren't even happy about hardware NAT devices and other 'homemade' linux firewall boxen being called 'firewalls'. Thus anytime you or 'we' use the term, I/we/you should either get into some long ezplanation of what is really meant, or not use the term at all. Like 'bounce' - which means such widely disparate things that its ambiguity makes it useless without a definition of the meaning of the term in the actual context in which it is used. Back to your alleged 'firewall' information.... > blocked (169.254.249.73,1042). Inbound UDP packet. Local > address,service is (localhost,1042). Remote address,service is > (169.254.249.73,1042). Process name is ""N/A""." > > NetRange: 169.254.0.0 - 169.254.255.255 That family of IPs is non-routable because IANA sez this in RFC 3330: // 169.254.0.0/16 - This is the "link local" block. It is allocated for communication between hosts on a single link. Hosts obtain these addresses by auto-configuration, such as when a DHCP server may not be found. // Since I *hate* to read RFCian, I can't really tell you what those words mean. But, all my WallWatcher who is keeping logs for my NAT device would do with that information would be to compile it in its logs, the NAT would block the ingress, and my WallWatcher to DShield program would automatically send the information to DShield to be compiled with the over 1 billion reports which are submitted to DShield each month. > Is Blachole compromised? Anything is possible, but I doubt it. > what significance does ",1042" at the end of > the IP have? That's the port; neohapsis db calls that udp and tcp probe 'BLAtrojan' which is what your firewall is telling you. It is also afrog subnet roaming according to IANA. -- Mike Easter kibitzer, not SC admin From digno at pacific.net.ph Tue Oct 25 18:40:08 2005 From: digno at pacific.net.ph (digno asuncion) Date: Tue Oct 25 05:40:48 2005 Subject: [SC-Help] Inbound UDP References: Message-ID: <001801c5d948$174815c0$91ab17d2@homeasuncion> Please delete me from your address book. ----- Original Message ----- From: "Fred K." <96q7vwa02@sneakemail.com> Newsgroups: spamcop.help To: "digno asucnion" Sent: Tuesday, October 25, 2005 10:10 AM Subject: [SC-Help] Inbound UDP >I got this and am wondering what to do besides nothing. > > > 10/24/2005 2:11:55 PM,"Rule ""Default Block Bla Trojan horse"" blocked > (169.254.249.73,1042).","Rule ""Default Block Bla Trojan horse"" blocked > (169.254.249.73,1042). Inbound UDP packet. Local address,service is > (localhost,1042). Remote address,service is (169.254.249.73,1042). > Process name is ""N/A""." > > NetRange: 169.254.0.0 - 169.254.255.255 > CIDR: 169.254.0.0/16 > NetName: LINKLOCAL > NetHandle: NET-169-254-0-0-1 > Parent: NET-169-0-0-0-0 > NetType: IANA Special Use > NameServer: BLACKHOLE-1.IANA.ORG > NameServer: BLACKHOLE-2.IANA.ORG > Comment: Please see RFC 3330 for additional information. > RegDate: 1998-01-27 > Updated: 2002-10-14 > > Is Blachole compromised? what significance does ",1042" at the end of the > IP have? > > Thanks > Fred k > > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From digno at pacific.net.ph Tue Oct 25 18:45:07 2005 From: digno at pacific.net.ph (digno asuncion) Date: Tue Oct 25 05:45:14 2005 Subject: [SC-Help] Re: Inbound UDP References: Message-ID: <003d01c5d948$c9576db0$91ab17d2@homeasuncion> Please delete me from your address book. ----- Original Message ----- From: "Mike Easter" Newsgroups: spamcop.help To: "digno asucnion" Sent: Tuesday, October 25, 2005 10:45 AM Subject: [SC-Help] Re: Inbound UDP > Fred K. wrote: >> I got this and am wondering what to do besides nothing. >> >> >> 10/24/2005 2:11:55 PM,"Rule ""Default Block Bla Trojan horse"" blocked >> (169.254.249.73,1042).","Rule ""Default Block Bla Trojan horse"" > > Many so-called software or personal 'firewalls' 'name' something [Bla > Trojan horse] by some kind of characteristic, such as the port 1042, > which isn't necessarily or even likely specific. > > There's a real problem with my using a term like 'firewall' which has > one kind of popular usage about software which is unacceptable to > firewall professionals. They want that term to refer to a seriously > competent hardware based firewall which has also been 'officially' > tested by an approved firewall 'agency'. They aren't even happy about > hardware NAT devices and other 'homemade' linux firewall boxen being > called 'firewalls'. > > Thus anytime you or 'we' use the term, I/we/you should either get into > some long ezplanation of what is really meant, or not use the term at > all. > > Like 'bounce' - which means such widely disparate things that its > ambiguity makes it useless without a definition of the meaning of the > term in the actual context in which it is used. > > Back to your alleged 'firewall' information.... > >> blocked (169.254.249.73,1042). Inbound UDP packet. Local >> address,service is (localhost,1042). Remote address,service is >> (169.254.249.73,1042). Process name is ""N/A""." >> >> NetRange: 169.254.0.0 - 169.254.255.255 > > That family of IPs is non-routable because IANA sez this in RFC 3330: > > // 169.254.0.0/16 - This is the "link local" block. It is allocated for > communication between hosts on a single link. Hosts obtain these > addresses by auto-configuration, such as when a DHCP server may not be > found. // > > Since I *hate* to read RFCian, I can't really tell you what those words > mean. > > But, all my WallWatcher who is keeping logs for my NAT device would do > with that information would be to compile it in its logs, the NAT would > block the ingress, and my WallWatcher to DShield program would > automatically send the information to DShield to be compiled with the > over 1 billion reports which are submitted to DShield each month. > >> Is Blachole compromised? > > Anything is possible, but I doubt it. > >> what significance does ",1042" at the end of >> the IP have? > > That's the port; neohapsis db calls that udp and tcp probe 'BLAtrojan' > which is what your firewall is telling you. > > It is also afrog subnet roaming according to IANA. > > > -- > Mike Easter > kibitzer, not SC admin > > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From bar_n0ne at hotmail.com Tue Oct 25 15:24:00 2005 From: bar_n0ne at hotmail.com (Berny) Date: Tue Oct 25 06:25:23 2005 Subject: [SC-Help] Re: Inbound UDP References: Message-ID: Hey Troll, unsubscribe yourself, you had to subscribe and then answer a confirmation to get this, so go and remove yourself from the mailing list, every piece you get has instructions on how to do that. Only you can do that yourself. Now go away. "digno asuncion" wrote in message news:mailman.106.1130233514.169.spamcop-help@news.spamcop.net... > Please delete me from your address book. > ----- Original Message ----- > From: "Mike Easter" > Newsgroups: spamcop.help > To: "digno asucnion" > Sent: Tuesday, October 25, 2005 10:45 AM > Subject: [SC-Help] Re: Inbound UDP > > _______________________________________________ > > SpamCop-Help mailing list > > SpamCop-Help@news.spamcop.net > > http://news.spamcop.net/mailman/listinfo/spamcop-help > > > From nobody at spamcop.net Tue Oct 25 09:03:28 2005 From: nobody at spamcop.net (Ellen) Date: Tue Oct 25 08:55:03 2005 Subject: [SC-Help] Re: Inbound UDP References: Message-ID: "Fred K." <96q7vwa02@sneakemail.com> wrote in message news:djk46j$559$1@news.spamcop.net... > I got this and am wondering what to do besides nothing. > > > 10/24/2005 2:11:55 PM,"Rule ""Default Block Bla Trojan horse"" blocked > (169.254.249.73,1042).","Rule ""Default Block Bla Trojan horse"" blocked > (169.254.249.73,1042). Inbound UDP packet. Local address,service is > (localhost,1042). Remote address,service is (169.254.249.73,1042). Process > name is ""N/A""." > > NetRange: 169.254.0.0 - 169.254.255.255 > CIDR: 169.254.0.0/16 > NetName: LINKLOCAL > NetHandle: NET-169-254-0-0-1 > Parent: NET-169-0-0-0-0 > NetType: IANA Special Use > NameServer: BLACKHOLE-1.IANA.ORG > NameServer: BLACKHOLE-2.IANA.ORG > Comment: Please see RFC 3330 for additional information. > RegDate: 1998-01-27 > Updated: 2002-10-14 > > Is Blachole compromised? what significance does ",1042" at the end of the IP > have? > FWIW : "Also, the 169.254 address space is a link local block that is mainly used by DHCP clients that cannot find a DHCP server. As a last resort, they issue themselves a random number from the 169.254 space. Recent versions of Windows and the Mac OS do this. It lets you plug a bunch of computers into a bunch of cable and create a LAN without any configuration at all. They will all end up on the same address space and will be able to talk to each other, even though they can't reach the outside world. You could configure your home network to use this space (that's perfectly legitimate: it's what that block is for), unless your ISP is so incompetent that they even route that address block -- and it appears that some do. The 169.254 address space should not be routed at all, not even internally within a network. So anyone seeing packets from that address space should be able to assume that someone has installed a new computer on their LAN, and it was unable to find a DHCP server. If you are seeing 169.254 addresses coming from outside your personal LAN, your ISP is running a broken (and insecure) network."http://lists.sans.org/pipermail/list/2001-July/000703.htmlEllen From nobody at spamcop.net Tue Oct 25 13:27:41 2005 From: nobody at spamcop.net (N. Miller) Date: Tue Oct 25 15:30:03 2005 Subject: [SC-Help] Re: Inbound UDP References: Message-ID: <128txdyh8tooc$.dlg@news.spamcop.net> On Tue, 25 Oct 2005 08:03:28 -0400, Ellen wrote: > The 169.254 address space should not be routed at all, not even > internally within a network. So anyone seeing packets from that > address space should be able to assume that someone has installed > a new computer on their LAN, and it was unable to find a DHCP > server. If you are seeing 169.254 addresses coming from outside your > personal LAN, your ISP is running a broken (and insecure) > network. If you are seeing external sources, and UDP packets, more likely you are seeing spoofed packets. -- Norman ~Shine, bright morning light, ~now in the air the spring is coming. ~Sweet, blowing wind, ~singing down the hills and valleys. From 96q7vwa02 at sneakemail.com Tue Oct 25 16:15:40 2005 From: 96q7vwa02 at sneakemail.com (Fred K.) Date: Tue Oct 25 19:20:18 2005 Subject: [SC-Help] Re: Inbound UDP References: Message-ID: "Fred K." <96q7vwa02@sneakemail.com> wrote in message news:djk46j$559$1@news.spamcop.net... >I got this and am wondering what to do besides nothing. Thanks to everyone that contributed to my education....... > Fred k > From nobody at spamcop.net Sat Oct 29 15:02:04 2005 From: nobody at spamcop.net (Ellen) Date: Sat Oct 29 14:05:02 2005 Subject: [SC-Help] Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: wrote in message news:1130606219.051323.44580@g44g2000cwa.googlegroups.com... The following is a chronicle of activity concerning my website being disconnected! The first is where I am at now! Apologetic! The second is denial, shock, disbelief and defiance! Please many people use my website which is a free public service DOING GOOD! ******** Let me see if I completely understand this. You advertised your website on some maillists where apparently advertising is not allowed. That resulted in complaints to your website provider and who took down your website. So for some reason that is not apparent to me, you decided that posting your website HTML to a SpamCop newsgroup and ask for comments to be sent to sagonet saying something positive? I think you are confused ... You have now spammed your webpage to a private usenet group whose raison d'etre is stopping spam. Spam is a matter of conSENT and not conTENT. Your desire to have some number of new visitors to your website does not mean that you can impose yourself on the world by spamming your urls to their mailboxes via email, via maillists or via newsgroups *regardless* of the content of your website. Ellen SpamCop From MikeE at ster.invalid Sat Oct 29 12:30:47 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sat Oct 29 14:35:14 2005 Subject: [SC-Help] Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: cccharlee@yahoo.com wrote: > The following is a chronicle of activity concerning my website being > disconnected! I think your website should have been disconnected for violation of your website provider's AUP, acceptable usage policy. > The first is where I am at now! Apologetic! Your apologies should also be 'enhanced' by your atonement. Your atonement should be that you lose your website either permanently or for a long enough time for you to learn some lessons you haven't learned yet because you are still acting in a boorish and self-centered manner. Your atonement should also include that you be banned from the mailing list which you spammed, either permanently or for a long enough time for you to learn some lessons which you haven't learned yet because you are still acting here in a boorish and self-centered manner. > The second is denial, shock, disbelief and defiance! That is further evidence that you haven't learned any lessons yet and it is likely that your defiance is going to get you into some more trouble. Some webforums or other private public newsservers might choose to ban you from their site or server for your churlish behavior. > Please many people use my website which is a free public service DOING > GOOD! I have no idea whether your site is any good, but IMO you are a stupidly behaving dolt. However, it is highly unlikely that you will see my opinion, because you posted into the spamcop.help newsgroup on the spamcop newsserver by posting to a GG googlegroups webforum which doesn't propagate 'normally' -- so, altho' your post happened to propagate onto the newsserver and thence also to the spamcop.help mailing list, my post will not be propagating back to the GG where you posted and so you won't see my remarks or Ellen's remarks, unless I decide to copy and paste them into GG. Which I am considering. -- Mike Easter kibitzer, not SC admin From nobody at devnull.spamcop.net Sat Oct 29 15:29:28 2005 From: nobody at devnull.spamcop.net (WazoO) Date: Sat Oct 29 15:30:37 2005 Subject: [SC-Help] Munging "User Notification" Reports Message-ID: No sure why data not presented here, so I'm doing that. Way back when, there was a thread titled: tekcom & dtag I had a link: http://news.spamcop.net/pipermail/spamcop-list/2005-August/thread.html#103719 bit noted that I didn't drop into the specific post, and dates aren't part of the display ... so title on that page is: [SpamCop-List] tekcom & dtag, later changed to; [SpamCop-List] 3rd party SC reports [was Re: tekcom & dtag] Anyway, discussion occurred there, I also made an Announcement of that issue in the Forum, found at Munged/Unmunged 3rd party reports http://forum.spamcop.net/forums/index.php?showtopic=4673 Don made a posting "over there" yesterday, seen at; Munging "User Notification" Reports, Starting Soon http://forum.spamcop.net/forums/index.php?showtopic=5250 Some confusion followed, some editing done, some more conversation, and another Forum user helped out by finding the "lost" Topic/Discussion ... (a bit embarrassing to see that it turned out to be my Announcement posting) ... I'm thinking that this was posted to the Forum, based on my dialog, which included Forum data ... after tracing things back, re-reading my own post, I'm bringing back to the newsgroups. Once again, noting that some data does not exist in the newsgroup archives due to use of the X-NoArchive bit settings/inclusion ... the original newsgroup traffic is just about ready to age off ... (I'm showing Message-ID: as my "first" link into the 'situation', dated 8/6/05) While I'm at it, Don's current/edited posted data; -=-=-=-=-=-=- Starting soon, possibly tomorrow, SpamCop will no longer send un-munged User Notification reports to abuse addresses that refuse to accept munged reports unless the user gives specific permission. Below my signature is what the user will see when he tries to send the report. If he 're-confirms' he is presented with a pop-up dialog telling him that he can send the un-munged report if he wants to. - Don D'Minion - SpamCop Admin - There is a problem: At least one User Defined Recipient refuses munged reports. Please re-confirm all recipients. Report Spam to: Using abuse#address.com[at]devnull.spamcop.net for statistical tracking. -=-=-=-=-=-=- From nobody at devnull.spamcop.net Sat Oct 29 18:41:36 2005 From: nobody at devnull.spamcop.net (Pop) Date: Sat Oct 29 17:45:03 2005 Subject: [SC-Help] OT: Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: OH, please, please, puhlease, I apologize for thinking you are a dolt and an inconsiderate spammer of newgroups to boot! I sincerely apologize for thinking you are a loutish and pretty ignorant person, who possibly should have his right-to-humanity revoked. Please don't think any the worse of me for that, and I hope you can forgive me for continuing to feel that way about you and your site! So if you plonked me, please, please unplonk me, because I sincerely apologize for what I think of you! OK? HTDH, Pop --- PS I actually read your tripe all the way thru because I couldn't get past going "HUH?" and not believing I'd read it right. Sure am sorry for what I think of you! Boy, do YOU have a lot to learn! That is, assuming you're not trolling. So, please forgive me if I should decide you're a troll; OK? wrote in message news:1130606219.051323.44580@g44g2000cwa.googlegroups.com... The following is a chronicle of activity concerning my website being disconnected! From SC.10.myspamgobbler at spamcowboy.net Sat Oct 29 16:17:38 2005 From: SC.10.myspamgobbler at spamcowboy.net (Brian) Date: Sat Oct 29 18:20:03 2005 Subject: [SC-Help] Re: How about frying up some spam? In-Reply-To: References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: Pop wrote: > OH, please, please, puhlease, I apologize for thinking you are a > dolt and an inconsiderate spammer of newgroups to boot! I > sincerely apologize for thinking you are a loutish and pretty > ignorant person, who possibly should have his right-to-humanity > revoked. Please don't think any the worse of me for that, and I > hope you can forgive me for continuing to feel that way about you > and your site! > So if you plonked me, please, please unplonk me, because I > sincerely apologize for what I think of you! > > OK? > > HTDH, > > Pop > --- > PS I actually read your tripe all the way thru because I couldn't > get past going "HUH?" and not believing I'd read it right. Sure > am sorry for what I think of you! Boy, do YOU have a lot to > learn! > That is, assuming you're not trolling. So, please forgive me > if I should decide you're a troll; OK? > > > wrote in message > news:1130606219.051323.44580@g44g2000cwa.googlegroups.com... > The following is a chronicle of activity concerning my website > being > disconnected! > > > > Looks like Chris C has been spamming a bunch of newsgroups, mail lists and forums. google search at - http://tinyurl.com/93dz6 canonical name drpcdr.ca. aliases addresses 66.111.62.170 Domain Whois record Queried whois.cira.ca with "drpcdr.ca"... Status: EXIST Registrar: DOT.CA (ca Internet Domain Name Registration) Registrar-no: 247 Registrant-no: 1078939 Domaine-no: 1078941 Subdomain: drpcdr.ca Renewal-Date: 2005/11/07 Date-Approved: 2004/11/07 Date-Modified: 2005/02/17 Organization: Christopher C. Charles Description: Admin-Name: Christopher C. Charles Admin-Title: Mr Admin-Postal: 7 Blaketon Court Brampton ON L6P 1G4 Canada Admin-Phone: (905) 794 4142 905 Admin-Fax: Admin-Mailbox: cccharlee@yahoo.com <<<======== I wonder what yahoo thinks of this? Network Whois record Queried whois.arin.net with "!NET-66-111-62-170-1"... CustName: Chris Brunner Address: 5448 Magnolia Trace City: Hoover StateProv: AK PostalCode: 35244 Country: US RegDate: 2004-06-30 Updated: 2004-06-30 NetRange: 66.111.62.170 - 66.111.62.179 CIDR: 66.111.62.170/31, 66.111.62.172/30, 66.111.62.176/30 NetName: SAGO-66-111-62-170 NetHandle: NET-66-111-62-170-1 Parent: NET-66-111-32-0-1 NetType: Reassigned Comment: NOCWorx SWIP Interface v1.5 - http://interworx.info RegDate: 2004-06-30 Updated: 2004-06-30 AbuseHandle: ABUSE185-ARIN AbuseName: Abuse AbusePhone: +1-888-993-9339 AbuseEmail: abuse@unitedcolo.com NOCHandle: INFO-ARIN NOCName: Info NOCPhone: +1-888-993-9339 NOCEmail: info@unitedcolo.com TechHandle: SYSAD4-ARIN TechName: Sysadmin-UCG TechPhone: +1-888-993-9339 TechEmail: sysadmin@unitedcolo.com OrgTechHandle: ZS203-ARIN OrgTechName: Sago Networks OrgTechPhone: +1-866-510-4000 OrgTechEmail: ipadmin@sagonet.com -- Brian SC.10.myspamgobbler@spamcowboy.net From digno at pacific.net.ph Sun Oct 30 10:12:17 2005 From: digno at pacific.net.ph (digno asuncion) Date: Sat Oct 29 22:12:26 2005 Subject: [SC-Help] Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: <000701c5dcf7$5abb3be0$ddab17d2@homeasuncion> Please delete my address from your address book. ----- Original Message ----- From: "Ellen" Newsgroups: spamcop.help To: "digno asucnion" Sent: Sunday, October 30, 2005 2:02 AM Subject: [SC-Help] Re: http://drpcdr.ca > > wrote in message > news:1130606219.051323.44580@g44g2000cwa.googlegroups.com... > The following is a chronicle of activity concerning my website being > disconnected! > > > The first is where I am at now! Apologetic! > > > The second is denial, shock, disbelief and defiance! > > > Please many people use my website which is a free public service DOING > GOOD! > > > > ******** > > Let me see if I completely understand this. You advertised your website on > some maillists where apparently advertising is not allowed. That resulted > in > complaints to your website provider and who took down your website. So for > some reason that is not apparent to me, you decided that posting your > website HTML to a SpamCop newsgroup and ask for comments to be sent to > sagonet saying something positive? > > I think you are confused ... You have now spammed your webpage to a > private > usenet group whose raison d'etre is stopping spam. Spam is a matter of > conSENT and not conTENT. Your desire to have some number of new visitors > to > your website does not mean that you can impose yourself on the world by > spamming your urls to their mailboxes via email, via maillists or via > newsgroups *regardless* of the content of your website. > > > Ellen > SpamCop > > > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From digno at pacific.net.ph Sun Oct 30 10:13:30 2005 From: digno at pacific.net.ph (digno asuncion) Date: Sat Oct 29 22:13:36 2005 Subject: [SC-Help] Re: How about frying up some spam? References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: <001b01c5dcf7$85d09780$ddab17d2@homeasuncion> Please cancel me from your address book. ----- Original Message ----- From: "Brian" Newsgroups: spamcop.help To: "digno asucnion" Sent: Sunday, October 30, 2005 6:17 AM Subject: [SC-Help] Re: How about frying up some spam? > Pop wrote: >> OH, please, please, puhlease, I apologize for thinking you are a >> dolt and an inconsiderate spammer of newgroups to boot! I >> sincerely apologize for thinking you are a loutish and pretty >> ignorant person, who possibly should have his right-to-humanity >> revoked. Please don't think any the worse of me for that, and I >> hope you can forgive me for continuing to feel that way about you >> and your site! >> So if you plonked me, please, please unplonk me, because I >> sincerely apologize for what I think of you! >> >> OK? >> >> HTDH, >> >> Pop >> --- >> PS I actually read your tripe all the way thru because I couldn't >> get past going "HUH?" and not believing I'd read it right. Sure >> am sorry for what I think of you! Boy, do YOU have a lot to >> learn! >> That is, assuming you're not trolling. So, please forgive me >> if I should decide you're a troll; OK? >> >> >> wrote in message >> news:1130606219.051323.44580@g44g2000cwa.googlegroups.com... >> The following is a chronicle of activity concerning my website >> being >> disconnected! >> >> >> >> > > Looks like Chris C has been spamming a bunch of newsgroups, mail lists > and forums. google search at - http://tinyurl.com/93dz6 > > > canonical name drpcdr.ca. > aliases > addresses 66.111.62.170 > Domain Whois record > > Queried whois.cira.ca with "drpcdr.ca"... > > Status: EXIST > Registrar: DOT.CA (ca Internet Domain Name Registration) > Registrar-no: 247 > Registrant-no: 1078939 > Domaine-no: 1078941 > Subdomain: drpcdr.ca > Renewal-Date: 2005/11/07 > Date-Approved: 2004/11/07 > Date-Modified: 2005/02/17 > Organization: Christopher C. Charles > Description: > Admin-Name: Christopher C. Charles > Admin-Title: Mr > Admin-Postal: 7 Blaketon Court > Brampton ON L6P 1G4 Canada > Admin-Phone: (905) 794 4142 905 > Admin-Fax: > Admin-Mailbox: cccharlee@yahoo.com <<<======== I wonder what > yahoo thinks of this? > > Network Whois record > > Queried whois.arin.net with "!NET-66-111-62-170-1"... > > CustName: Chris Brunner > Address: 5448 Magnolia Trace > City: Hoover > StateProv: AK > PostalCode: 35244 > Country: US > RegDate: 2004-06-30 > Updated: 2004-06-30 > > NetRange: 66.111.62.170 - 66.111.62.179 > CIDR: 66.111.62.170/31, 66.111.62.172/30, 66.111.62.176/30 > NetName: SAGO-66-111-62-170 > NetHandle: NET-66-111-62-170-1 > Parent: NET-66-111-32-0-1 > NetType: Reassigned > Comment: NOCWorx SWIP Interface v1.5 - http://interworx.info > RegDate: 2004-06-30 > Updated: 2004-06-30 > > AbuseHandle: ABUSE185-ARIN > AbuseName: Abuse > AbusePhone: +1-888-993-9339 > AbuseEmail: abuse@unitedcolo.com > > NOCHandle: INFO-ARIN > NOCName: Info > NOCPhone: +1-888-993-9339 > NOCEmail: info@unitedcolo.com > > TechHandle: SYSAD4-ARIN > TechName: Sysadmin-UCG > TechPhone: +1-888-993-9339 > TechEmail: sysadmin@unitedcolo.com > > OrgTechHandle: ZS203-ARIN > OrgTechName: Sago Networks > OrgTechPhone: +1-866-510-4000 > OrgTechEmail: ipadmin@sagonet.com > > -- > Brian > SC.10.myspamgobbler@spamcowboy.net > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From digno at pacific.net.ph Sun Oct 30 10:14:54 2005 From: digno at pacific.net.ph (digno asuncion) Date: Sat Oct 29 22:15:01 2005 Subject: [SC-Help] Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: <002a01c5dcf7$b824a7d0$ddab17d2@homeasuncion> Please cancel me from your address book. ----- Original Message ----- From: "Mike Easter" Newsgroups: spamcop.help To: "digno asucnion" Sent: Sunday, October 30, 2005 2:30 AM Subject: [SC-Help] Re: http://drpcdr.ca > cccharlee@yahoo.com wrote: > >> The following is a chronicle of activity concerning my website being >> disconnected! > > I think your website should have been disconnected for violation of your > website provider's AUP, acceptable usage policy. > >> The first is where I am at now! Apologetic! > > Your apologies should also be 'enhanced' by your atonement. Your > atonement should be that you lose your website either permanently or for > a long enough time for you to learn some lessons you haven't learned yet > because you are still acting in a boorish and self-centered manner. > > Your atonement should also include that you be banned from the mailing > list which you spammed, either permanently or for a long enough time for > you to learn some lessons which you haven't learned yet because you are > still acting here in a boorish and self-centered manner. > >> The second is denial, shock, disbelief and defiance! > > That is further evidence that you haven't learned any lessons yet and it > is likely that your defiance is going to get you into some more trouble. > Some webforums or other private public newsservers might choose to ban > you from their site or server for your churlish behavior. > >> Please many people use my website which is a free public service DOING >> GOOD! > > I have no idea whether your site is any good, but IMO you are a stupidly > behaving dolt. > > However, it is highly unlikely that you will see my opinion, because you > posted into the spamcop.help newsgroup on the spamcop newsserver by > posting to a GG googlegroups webforum which doesn't propagate > 'normally' -- so, altho' your post happened to propagate onto the > newsserver and thence also to the spamcop.help mailing list, my post > will not be propagating back to the GG where you posted and so you won't > see my remarks or Ellen's remarks, unless I decide to copy and paste > them into GG. Which I am considering. > > > -- > Mike Easter > kibitzer, not SC admin > > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From digno at pacific.net.ph Sun Oct 30 10:15:43 2005 From: digno at pacific.net.ph (digno asuncion) Date: Sat Oct 29 22:15:48 2005 Subject: [SC-Help] Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: <003301c5dcf7$d53a7ca0$ddab17d2@homeasuncion> Please cancel me from your address book. ----- Original Message ----- From: "Mike Easter" Newsgroups: spamcop.help To: "digno asucnion" Sent: Sunday, October 30, 2005 2:30 AM Subject: [SC-Help] Re: http://drpcdr.ca > cccharlee@yahoo.com wrote: > >> The following is a chronicle of activity concerning my website being >> disconnected! > > I think your website should have been disconnected for violation of your > website provider's AUP, acceptable usage policy. > >> The first is where I am at now! Apologetic! > > Your apologies should also be 'enhanced' by your atonement. Your > atonement should be that you lose your website either permanently or for > a long enough time for you to learn some lessons you haven't learned yet > because you are still acting in a boorish and self-centered manner. > > Your atonement should also include that you be banned from the mailing > list which you spammed, either permanently or for a long enough time for > you to learn some lessons which you haven't learned yet because you are > still acting here in a boorish and self-centered manner. > >> The second is denial, shock, disbelief and defiance! > > That is further evidence that you haven't learned any lessons yet and it > is likely that your defiance is going to get you into some more trouble. > Some webforums or other private public newsservers might choose to ban > you from their site or server for your churlish behavior. > >> Please many people use my website which is a free public service DOING >> GOOD! > > I have no idea whether your site is any good, but IMO you are a stupidly > behaving dolt. > > However, it is highly unlikely that you will see my opinion, because you > posted into the spamcop.help newsgroup on the spamcop newsserver by > posting to a GG googlegroups webforum which doesn't propagate > 'normally' -- so, altho' your post happened to propagate onto the > newsserver and thence also to the spamcop.help mailing list, my post > will not be propagating back to the GG where you posted and so you won't > see my remarks or Ellen's remarks, unless I decide to copy and paste > them into GG. Which I am considering. > > > -- > Mike Easter > kibitzer, not SC admin > > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From digno at pacific.net.ph Sun Oct 30 10:16:13 2005 From: digno at pacific.net.ph (digno asuncion) Date: Sat Oct 29 22:16:18 2005 Subject: [SC-Help] OT: Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: <003a01c5dcf7$e74bbb20$ddab17d2@homeasuncion> Please cancel me from your address book. ----- Original Message ----- From: "Pop" Newsgroups: spamcop.help To: "digno asucnion" Sent: Sunday, October 30, 2005 5:41 AM Subject: [SC-Help] OT: Re: http://drpcdr.ca > OH, please, please, puhlease, I apologize for thinking you are a > dolt and an inconsiderate spammer of newgroups to boot! I > sincerely apologize for thinking you are a loutish and pretty > ignorant person, who possibly should have his right-to-humanity > revoked. Please don't think any the worse of me for that, and I > hope you can forgive me for continuing to feel that way about you > and your site! > So if you plonked me, please, please unplonk me, because I > sincerely apologize for what I think of you! > > OK? > > HTDH, > > Pop > --- > PS I actually read your tripe all the way thru because I couldn't > get past going "HUH?" and not believing I'd read it right. Sure > am sorry for what I think of you! Boy, do YOU have a lot to > learn! > That is, assuming you're not trolling. So, please forgive me > if I should decide you're a troll; OK? > > > wrote in message > news:1130606219.051323.44580@g44g2000cwa.googlegroups.com... > The following is a chronicle of activity concerning my website > being > disconnected! > > > > > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From digno at pacific.net.ph Sun Oct 30 10:16:52 2005 From: digno at pacific.net.ph (digno asuncion) Date: Sat Oct 29 22:16:59 2005 Subject: [SC-Help] Munging "User Notification" Reports References: Message-ID: <003f01c5dcf7$fe2b4a90$ddab17d2@homeasuncion> Please cancel me from your address book. ----- Original Message ----- From: "WazoO" Newsgroups: spamcop,spamcop.help,spamcop.mail To: "digno asucnion" Sent: Sunday, October 30, 2005 3:29 AM Subject: [SC-Help] Munging "User Notification" Reports > No sure why data not presented here, so I'm doing that. > Way back when, there was a thread titled: tekcom & dtag > I had a link: > http://news.spamcop.net/pipermail/spamcop-list/2005-August/thread.html#103719 > bit noted that I didn't drop into the specific post, and > dates aren't part of the display ... so title on that page > is: [SpamCop-List] tekcom & dtag, later changed to; > [SpamCop-List] 3rd party SC reports [was Re: tekcom & dtag] > > Anyway, discussion occurred there, I also made an > Announcement of that issue in the Forum, found at > Munged/Unmunged 3rd party reports > http://forum.spamcop.net/forums/index.php?showtopic=4673 > > Don made a posting "over there" yesterday, seen at; > Munging "User Notification" Reports, > Starting Soon > http://forum.spamcop.net/forums/index.php?showtopic=5250 > > Some confusion followed, some editing done, some more > conversation, and another Forum user helped out by finding > the "lost" Topic/Discussion ... (a bit embarrassing to see that > it turned out to be my Announcement posting) ... I'm thinking > that this was posted to the Forum, based on my dialog, which > included Forum data ... after tracing things back, re-reading my > own post, I'm bringing back to the newsgroups. > > Once again, noting that some data does not exist in the newsgroup > archives due to use of the X-NoArchive bit settings/inclusion ... > the original newsgroup traffic is just about ready to age off ... > (I'm showing Message-ID: > as my "first" link into the 'situation', dated 8/6/05) > > While I'm at it, Don's current/edited posted data; > -=-=-=-=-=-=- > Starting soon, possibly tomorrow, SpamCop will no longer send un-munged > User > Notification reports to abuse addresses that refuse to accept munged > reports > unless the user gives specific permission. > > Below my signature is what the user will see when he tries to send the > report. If he 're-confirms' he is presented with a pop-up dialog telling > him > that he can send the un-munged report if he wants to. > > - Don D'Minion - SpamCop Admin - > > There is a problem: At least one User Defined Recipient refuses munged > reports. > Please re-confirm all recipients. > Report Spam to: > Using abuse#address.com[at]devnull.spamcop.net for statistical tracking. > -=-=-=-=-=-=- > > > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From post.please.this.email.is.not.valid at example.com Sat Oct 29 23:12:24 2005 From: post.please.this.email.is.not.valid at example.com (DougW) Date: Sat Oct 29 23:15:06 2005 Subject: [SC-Help] Munging "User Notification" Reports References: Message-ID: digno asuncion did pass the time by typing: > Please cancel me from your address book. you have to do it yourself at the url below http://news.spamcop.net/mailman/listinfo/spamcop-help -- DougW From MikeE at ster.invalid Sat Oct 29 21:56:55 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sun Oct 30 00:00:02 2005 Subject: [SC-Help] Munging "User Notification" Reports References: Message-ID: DougW wrote: >> Please cancel me from your address book. > you have to do it yourself at the url below > http://news.spamcop.net/mailman/listinfo/spamcop-help He's incompetent. He has been provided everything from the actual mailto unsub link to a 'discussion' of your link. news:dj7p6g$ord$1@news.spamcop.net I suppose someone could email him separately from the ng/mailman mailing list feed, if you are in such a spoonfeeding mood. -- Mike Easter kibitzer, not SC admin From digno at pacific.net.ph Sun Oct 30 10:18:17 2005 From: digno at pacific.net.ph (digno asuncion) Date: Sun Oct 30 02:59:03 2005 Subject: [SC-Help] Re: How about frying up some spam? References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: <000001c5dd27$c5a84710$28ab17d2@homeasuncion> Please cancel me from your address book, ----- Original Message ----- From: "Brian" Newsgroups: spamcop.help To: "digno asucnion" Sent: Sunday, October 30, 2005 6:17 AM Subject: [SC-Help] Re: How about frying up some spam? > Pop wrote: >> OH, please, please, puhlease, I apologize for thinking you are a >> dolt and an inconsiderate spammer of newgroups to boot! I >> sincerely apologize for thinking you are a loutish and pretty >> ignorant person, who possibly should have his right-to-humanity >> revoked. Please don't think any the worse of me for that, and I >> hope you can forgive me for continuing to feel that way about you >> and your site! >> So if you plonked me, please, please unplonk me, because I >> sincerely apologize for what I think of you! >> >> OK? >> >> HTDH, >> >> Pop >> --- >> PS I actually read your tripe all the way thru because I couldn't >> get past going "HUH?" and not believing I'd read it right. Sure >> am sorry for what I think of you! Boy, do YOU have a lot to >> learn! >> That is, assuming you're not trolling. So, please forgive me >> if I should decide you're a troll; OK? >> >> >> wrote in message >> news:1130606219.051323.44580@g44g2000cwa.googlegroups.com... >> The following is a chronicle of activity concerning my website >> being >> disconnected! >> >> >> >> > > Looks like Chris C has been spamming a bunch of newsgroups, mail lists > and forums. google search at - http://tinyurl.com/93dz6 > > > canonical name drpcdr.ca. > aliases > addresses 66.111.62.170 > Domain Whois record > > Queried whois.cira.ca with "drpcdr.ca"... > > Status: EXIST > Registrar: DOT.CA (ca Internet Domain Name Registration) > Registrar-no: 247 > Registrant-no: 1078939 > Domaine-no: 1078941 > Subdomain: drpcdr.ca > Renewal-Date: 2005/11/07 > Date-Approved: 2004/11/07 > Date-Modified: 2005/02/17 > Organization: Christopher C. Charles > Description: > Admin-Name: Christopher C. Charles > Admin-Title: Mr > Admin-Postal: 7 Blaketon Court > Brampton ON L6P 1G4 Canada > Admin-Phone: (905) 794 4142 905 > Admin-Fax: > Admin-Mailbox: cccharlee@yahoo.com <<<======== I wonder what > yahoo thinks of this? > > Network Whois record > > Queried whois.arin.net with "!NET-66-111-62-170-1"... > > CustName: Chris Brunner > Address: 5448 Magnolia Trace > City: Hoover > StateProv: AK > PostalCode: 35244 > Country: US > RegDate: 2004-06-30 > Updated: 2004-06-30 > > NetRange: 66.111.62.170 - 66.111.62.179 > CIDR: 66.111.62.170/31, 66.111.62.172/30, 66.111.62.176/30 > NetName: SAGO-66-111-62-170 > NetHandle: NET-66-111-62-170-1 > Parent: NET-66-111-32-0-1 > NetType: Reassigned > Comment: NOCWorx SWIP Interface v1.5 - http://interworx.info > RegDate: 2004-06-30 > Updated: 2004-06-30 > > AbuseHandle: ABUSE185-ARIN > AbuseName: Abuse > AbusePhone: +1-888-993-9339 > AbuseEmail: abuse@unitedcolo.com > > NOCHandle: INFO-ARIN > NOCName: Info > NOCPhone: +1-888-993-9339 > NOCEmail: info@unitedcolo.com > > TechHandle: SYSAD4-ARIN > TechName: Sysadmin-UCG > TechPhone: +1-888-993-9339 > TechEmail: sysadmin@unitedcolo.com > > OrgTechHandle: ZS203-ARIN > OrgTechName: Sago Networks > OrgTechPhone: +1-866-510-4000 > OrgTechEmail: ipadmin@sagonet.com > > -- > Brian > SC.10.myspamgobbler@spamcowboy.net > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From digno at pacific.net.ph Sun Oct 30 15:59:14 2005 From: digno at pacific.net.ph (digno asuncion) Date: Sun Oct 30 02:59:19 2005 Subject: [SC-Help] OT: Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: <000501c5dd27$d28260b0$28ab17d2@homeasuncion> Please cancel me from your address book. ----- Original Message ----- From: "Pop" Newsgroups: spamcop.help To: "digno asucnion" Sent: Sunday, October 30, 2005 5:41 AM Subject: [SC-Help] OT: Re: http://drpcdr.ca > OH, please, please, puhlease, I apologize for thinking you are a > dolt and an inconsiderate spammer of newgroups to boot! I > sincerely apologize for thinking you are a loutish and pretty > ignorant person, who possibly should have his right-to-humanity > revoked. Please don't think any the worse of me for that, and I > hope you can forgive me for continuing to feel that way about you > and your site! > So if you plonked me, please, please unplonk me, because I > sincerely apologize for what I think of you! > > OK? > > HTDH, > > Pop > --- > PS I actually read your tripe all the way thru because I couldn't > get past going "HUH?" and not believing I'd read it right. Sure > am sorry for what I think of you! Boy, do YOU have a lot to > learn! > That is, assuming you're not trolling. So, please forgive me > if I should decide you're a troll; OK? > > > wrote in message > news:1130606219.051323.44580@g44g2000cwa.googlegroups.com... > The following is a chronicle of activity concerning my website > being > disconnected! > > > > > _______________________________________________ > SpamCop-Help mailing list > SpamCop-Help@news.spamcop.net > http://news.spamcop.net/mailman/listinfo/spamcop-help > From bar_n0ne at hotmail.com Sun Oct 30 12:22:09 2005 From: bar_n0ne at hotmail.com (Berny) Date: Sun Oct 30 03:25:04 2005 Subject: [SC-Help] OT: Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: "digno asuncion" wrote in message news:mailman.114.1130659159.169.spamcop-help@news.spamcop.net... > Please cancel me from your address book. > ----- Original Message ----- > SNIPPED Someone please report digno for spamming. Thiss Ass asked for the email, got an email asking if s/he/it really wanted this email and replied yes, and now bitches about recieving email from the help list. I don't feel motivated enough to hold his/her hand while s/he/it unsubscribes. From bar_n0ne at hotmail.com Sun Oct 30 12:39:01 2005 From: bar_n0ne at hotmail.com (Berny) Date: Sun Oct 30 03:40:04 2005 Subject: [SC-Help] OT: Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: "Berny" wrote in message news:dk1vrk$ch6$1@news.spamcop.net... > "digno asuncion" wrote in message > news:mailman.114.1130659159.169.spamcop-help@news.spamcop.net... > > Please cancel me from your address book. > > ----- Original Message ----- > > SNIPPED > > Someone please report digno for spamming. > I wondere if this is one of those auto-unsubscribe bots I've read about in some NG. (Another doomed to failure type of anti-spam retaliation) Perhaps a spammer has either set one up or deliberately subscribed one to this list somehow. Since I read this as a NG, I don't know what form the acknowledgement to a subsription confirmation request must take for the listbot to subscribe a user. From nobody at spamcop.net Sun Oct 30 08:34:19 2005 From: nobody at spamcop.net (Ellen) Date: Sun Oct 30 12:15:02 2005 Subject: [SC-Help] OT: Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: "digno asuncion" wrote in message news:mailman.114.1130659159.169.spamcop-help@news.spamcop.net... > Please cancel me from your address book. I wrote to him and sent the unsub link -- lets see if that helps. Ellen SpamCop From big_mart_98 at yahoo.com Sun Oct 30 19:06:19 2005 From: big_mart_98 at yahoo.com (Martin Edwards) Date: Sun Oct 30 14:10:03 2005 Subject: [SC-Help] OT: Re: http://drpcdr.ca In-Reply-To: References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: Ellen wrote: > "digno asuncion" wrote in message > news:mailman.114.1130659159.169.spamcop-help@news.spamcop.net... > >>Please cancel me from your address book. > > > > I wrote to him and sent the unsub link -- lets see if that helps. > > Ellen > SpamCop > > While I was reading this thread my computer cut out. Is there something nasty in it? From post.please.this.email.is.not.valid at example.com Sun Oct 30 13:13:39 2005 From: post.please.this.email.is.not.valid at example.com (DougW) Date: Sun Oct 30 14:15:02 2005 Subject: [SC-Help] OT: Re: http://drpcdr.ca References: <1130606219.051323.44580@g44g2000cwa.googlegroups.com> Message-ID: Martin Edwards did pass the time by typing: > Ellen wrote: >> "digno asuncion" wrote in message >> news:mailman.114.1130659159.169.spamcop-help@news.spamcop.net... >> >>> Please cancel me from your address book. >> >> >> >> I wrote to him and sent the unsub link -- lets see if that helps. >> >> Ellen >> SpamCop >> >> > While I was reading this thread my computer cut out. Is there something > nasty in it? Thread cooties. -- DougW From h9vzc2i02 at sneakemail.com Sun Oct 30 11:21:57 2005 From: h9vzc2i02 at sneakemail.com (Anon_) Date: Sun Oct 30 14:25:02 2005 Subject: [SC-Help] Munging "User Notification" Reports References: Message-ID: "Mike Easter" wrote in message news:dk1g9k$4ap$1@news.spamcop.net... > DougW wrote: > >> Please cancel me from your address book. > > > you have to do it yourself at the url below > > http://news.spamcop.net/mailman/listinfo/spamcop-help > > He's incompetent. He has been provided everything from the actual > mailto unsub link to a 'discussion' of your link. > news:dj7p6g$ord$1@news.spamcop.net **** As someone else mentioned, he probably has not read anything on this newsgroup - not (necessarily) incompetent, just not getting the messages. -- A SpamCop user and forum reader, Not Admin *** > > I suppose someone could email him separately from the ng/mailman mailing > list feed, if you are in such a spoonfeeding mood. > > -- > Mike Easter > kibitzer, not SC admin > From MikeE at ster.invalid Sun Oct 30 12:29:36 2005 From: MikeE at ster.invalid (Mike Easter) Date: Sun Oct 30 15:30:08 2005 Subject: [SC-Help] Munging "User Notification" Reports References: Message-ID: Anon_ wrote: > "Mike Easter" >> He's incompetent. He has been provided everything from the actual >> mailto unsub link to a 'discussion' of your link. >> news:dj7p6g$ord$1@news.spamcop.net > > **** > As someone else mentioned, he probably has not read anything on this > newsgroup - not (necessarily) incompetent, just not getting the > messages. Here is my scorecard for his incompetence points: o he filled out an application on a page that tells you how to subscribe and unsubscribe o he received a confirminational reply to the application to get the mailing list confirming his application and giving him directions for how to unsub or make other changes to which he *again* responded o every time he got an item in his mailbox, it contained unsub instructions o every time he posted in here to ask to be unsubbed, he was posting over the included instructions for making the changes which had been described to him in items 1, 2, and 3 above The business about what he read and didn't read in the above items which were right in front of his eyeballs counts on my scorecard as points for his incompetence. It does not count toward any points for competence. The pertinent information was sitting in front of him and 'handled' every step of the way. Competence in this context refers to the ability to read and comprehend the words in front of you on a 'form' you are 'writing on'. -- Mike Easter kibitzer, not SC admin From 96q7vwa02 at sneakemail.com Sun Oct 30 17:13:00 2005 From: 96q7vwa02 at sneakemail.com (Fred K.) Date: Sun Oct 30 21:15:03 2005 Subject: [SC-Help] Munging "User Notification" Reports References: Message-ID: "Mike Easter" wrote in message news:dk3aev$1gj$1@news.spamcop.net... > Anon_ wrote: >> "Mike Easter" > Competence in this context refers to the ability to read and comprehend > the words in front of you on a 'form' you are 'writing on'. Mike Are you really surprised about this in this day and age where persons cannot even make change without the cashregister/computer telling them how much? Fred k. From user at domain.invalid Mon Oct 31 15:27:27 2005 From: user at domain.invalid (user@domain.invalid) Date: Mon Oct 31 09:30:26 2005 Subject: [SC-Help] No email acknowledgment Message-ID: I do not receive email acknowledgment anymore after I have made a spam report. I have to log into my account to report spams. What's going wrong ? From MikeE at ster.invalid Mon Oct 31 15:39:04 2005 From: MikeE at ster.invalid (Mike Easter) Date: Mon Oct 31 18:40:32 2005 Subject: [SC-Help] Re: No email acknowledgment References: Message-ID: user@domain.invalid wrote: > I do not receive email acknowledgment anymore after I have made a spam > report. I have to log into my account to report spams. What's going > wrong ? There is a laundry list of things that can go wrong. There can be a problem on SC's end in which it is just slow or delayed, there can be a problem on SC's end in which it is actually broken, there can be a problem with your address that SC mails to, and there can be a problem in your getting SC mail from your provider. I don't see any announcments -- Mike Easter kibitzer, not SC admin From jeffg at spamcop.net Mon Oct 31 22:04:12 2005 From: jeffg at spamcop.net (Jeff G.) Date: Mon Oct 31 22:05:02 2005 Subject: [SC-Help] "User defined recipient" Checkboxes Now Checked By Default Message-ID: Every potential Reportee under the "Re: Forwarded Spam (User defined recipient)" heading is now checked by default, despite any setting of "3rd party report default" to the contrary. On the other hand, "(Third party interested in email source)" (in most cases, "Cyveillance spam collection") DOES respect that setting. I renew my call for a User Defined Recipient Report Default section in User Defined Recipient Report Default capability at http://forum.spamcop.net/forums/index.php?showtopic=5152. I have emailed SpamCop Deputies and SpamCop Admin, and posted about this in the "Reporting defaults have changed" Topic at http://forum.spamcop.net/forums/index.php?showtopic=5277 . -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please contact me via Forum only. From jeffg at spamcop.net Mon Oct 31 22:47:12 2005 From: jeffg at spamcop.net (Jeff G.) Date: Mon Oct 31 23:10:08 2005 Subject: [SC-Help] Re: "User defined recipient" Checkboxes Now Checked By Default References: Message-ID: Deputy Richard W posted the following in http://forum.spamcop.net/forums/index.php?showtopic=5277&view=findpost&p=35300 at 10:13 PM EST -0500 (about half an hour ago): I added a user defined address into my preferences and the box is in fact checked by default, which IIRC is opposite of what used to be done. Changes to the user-defined report handling went live today after about a week of testing on the beta system. Obviously the changes (which I think Don posted about earlier) did change the default behaviour. I'll put through a bug report on that. Richard -- Best Regards, Jeff G. I have been a SpamCop User/Member/Customer since 1999 and am a Moderator of the new web-based forums (now the primary method for getting help, http://forum.spamcop.net). Please contact me via Forum only"Jeff G." wrote in message news:dk6m0a$rcr$2@news.spamcop.net... > Every potential Reportee under the "Re: Forwarded Spam (User defined > recipient)" heading is now checked by default, despite any setting of > "3rd party report default" to the contrary. On the other hand, "(Third > party interested in email source)" (in most cases, "Cyveillance spam > collection") DOES respect that setting. I renew my call for a User > Defined Recipient Report Default section in User Defined Recipient > Report Default capability at > http://forum.spamcop.net/forums/index.php?showtopic=5152. > > I have emailed SpamCop Deputies and SpamCop Admin, and posted about this > in the "Reporting defaults have changed" Topic at > http://forum.spamcop.net/forums/index.php?showtopic=5277 . > > -- > Best Regards, Jeff G. > I have been a SpamCop User/Member/Customer since 1999 and am a > Moderator of the new web-based forums (now the primary method for > getting help, http://forum.spamcop.net). Please contact me via Forum > only. >