From mikeyhsd at lamparty.net Thu Oct 2 09:53:53 2008 From: mikeyhsd at lamparty.net (mikeyhsd) Date: Thu Oct 2 09:55:02 2008 Subject: [Schelp] email address change Message-ID: so far have received NO assistance in getting my email address changed. have posted several times on the difficulty on changing email address. since sprint is soon dropping email severs it is absolutely necessary that I change the address the reports are sent to to complete filing. have succeeded in getting everything else changed but spam cop. -- mikeyhsd@lamparty.net From nobody at spamcop.net Thu Oct 2 10:20:09 2008 From: nobody at spamcop.net (Bar0) Date: Thu Oct 2 10:25:03 2008 Subject: [Schelp] Re: email address change References: Message-ID: "mikeyhsd" wrote in message news:gc2jq0$582$1@news.spamcop.net... > so far have received NO assistance in getting my email address changed. > > have posted several times on the difficulty on changing email address. > > since sprint is soon dropping email severs it is absolutely necessary that > I change the address the > reports are sent to to complete filing. > > have succeeded in getting everything else changed but spam cop. I don't remember the earlier details, was this a SC Mail account, or, a paid reporting account, or a free reporting account? If the latter, simply open up a new reporting account tied to your new email. That's always been the solution recommended in the past. From nobody at devnull.spamcop.net Thu Oct 2 17:55:22 2008 From: nobody at devnull.spamcop.net (Wazoo) Date: Thu Oct 2 18:00:03 2008 Subject: [Schelp] Re: email address change References: Message-ID: "mikeyhsd" wrote in message news:gc2jq0$582$1@news.spamcop.net... > so far have received NO assistance in getting my email address > changed. Odd. http://zeta.cesmail.net/pipermail/scspamcop/2008-September/007349.html seems to suggest that this was "done" ?? > have posted several times on the difficulty on changing email > address. Funny .. I can't seem to find those "several" posts. http://zeta.cesmail.net/pipermail/scspamcop/2008-September/thread.html#7321 shows some previous dialog .... use of X-NoArchive flags result in lost traffic/data, to include Don's answer to you (which is what you replied to in the previous link) One of the primary issues I see in your original post is that you seem to be confusing "e-mail accounts" and the folks that provide them. You seem to be talking about your Registered Reporting e-mail address, but you then state that you had e-mailed "support" twice. The problem there is that the "support" address would translate to JT, who is the owner and manager of the system that provides SpamCop.net e-mail accounts. As Don provided, the various FAQ and WIki entries state, the address you'd want to use for a Reporting Account address issue would be "service" Ellen has recently stated that things can happen to e-mail sent to that address due to the massive spam load involved, so she repeated the details provided in the Forum version of the FAQ and the Wiki ... use the provided web-form to contact them. Please see http://forum.spamcop.net/scwik/SpamCopWhereToGetHelp You have yet to mention whether this is a "free" reporting account or a "Premium/Fuel" type account. You have not explained why when logging into your www.spamcop.net web-page and the "Change Your E-mail Address" link under Preferences doesn't work for you. From mikeyhsd at lamparty.net Thu Oct 2 19:03:35 2008 From: mikeyhsd at lamparty.net (mikeyhsd) Date: Thu Oct 2 19:05:03 2008 Subject: [Schelp] Re: email address change In-Reply-To: References: Message-ID: the last post I had a response from someone who told me to mail them at spam cop and they would assist. been almost a week and nothing. I have a free reporting account. when trying to use the change email address at spam cop. it asks to provide logon information. my saved registered data does not work to logon. when using the send me a new password , it tell me no one logged on. have used the links there to email support for help. so far nothing. -- mikeyhsd@lamparty.net "Wazoo" wrote in message news:gc3g0g$mej$1@news.spamcop.net... > "mikeyhsd" wrote in message > news:gc2jq0$582$1@news.spamcop.net... >> so far have received NO assistance in getting my email address changed. > > Odd. > http://zeta.cesmail.net/pipermail/scspamcop/2008-September/007349.html > seems to suggest that this was "done" ?? > >> have posted several times on the difficulty on changing email address. > > Funny .. I can't seem to find those "several" posts. > > http://zeta.cesmail.net/pipermail/scspamcop/2008-September/thread.html#7321 > shows some previous dialog .... use of X-NoArchive flags result in lost > traffic/data, to include Don's answer to you (which is what you replied to > in the previous link) > > One of the primary issues I see in your original post is that you seem to > be confusing "e-mail accounts" and the folks that provide them. You seem > to be talking about your Registered Reporting e-mail address, but you then > state that you had e-mailed "support" twice. The problem there is that the > "support" address would translate to JT, who is the owner and manager of > the system that provides SpamCop.net e-mail accounts. As Don provided, > the various FAQ and WIki entries state, the address you'd want to use for > a Reporting Account address issue would be "service" > > Ellen has recently stated that things can happen to e-mail sent to that > address due to the massive spam load involved, so she repeated the details > provided in the Forum version of the FAQ and the Wiki ... use the provided > web-form to contact them. Please see > http://forum.spamcop.net/scwik/SpamCopWhereToGetHelp > > You have yet to mention whether this is a "free" reporting account or a > "Premium/Fuel" type account. You have not explained why when logging into > your www.spamcop.net web-page and the "Change Your E-mail Address" link > under Preferences doesn't work for you. > From MikeE at ster.invalid Thu Oct 2 19:22:24 2008 From: MikeE at ster.invalid (Mike Easter) Date: Thu Oct 2 19:25:03 2008 Subject: [Schelp] Re: email address change References: Message-ID: mikeyhsd wrote: > I have a free reporting account. One workaround is to do it the 'old' way. Once upon a time, the recommended approach was to simply register for a new account. http://www.spamcop.net/anonsignup.shtml Getting Started - please read the following - you are responsible! - Register for the Free Reporting Service That page used to say that you could re-register any time you like, but it doesn't say that anymore. In your case, you are registering a new address anyway; so you might as well create a new account and not fuss with trying to communicate with anyone. That is, IMO of course. -- Mike Easter kibitzer, not SC admin From mikeyhsd at lamparty.net Sat Oct 4 09:50:25 2008 From: mikeyhsd at lamparty.net (mikeyhsd) Date: Sat Oct 4 09:55:03 2008 Subject: [Schelp] Re: email address change References: Message-ID: sorry that you did not get it. I emailed back as well as reply to your message. have been mailing my spam with the submit address from the lamparty account for several weeks. finally this morning was able to get the system to send me a new password. will retrieve the mail and try . will post back on success or not. -- mikeyhsd@lamparty.net "SpamCop Admin" wrote in message news:p0iee454m3sgh2bcrhuqujmslkov3m3id2@4ax.com... > mikeyhsd wrote: >>-the last post I had a response from someone who told me to mail them at >>spam >>-cop and they would assist. >>-been almost a week and nothing. > > No mail from you has entered our system. None. > > I just wrote to you from my admin account. Hopefully, you will get it > and we can establish communication. > > Here's all the login information. Maybe it will help. > > Your username is the whole email address you registered with us for a > spam reporting account. > > Passwords use numbers and both upper-case and lower-case letters, are > cAse sENsiTive, and may contain lookalike digits such as, "one" and > "ell" or "Oh" and "zero." Our system will allow you to copy/paste in > your password if your browser will. After you log in, you can use the > "Preferences" link at the top of the page to change your password. > > Log in with the preferred Cookie method at: http://www.spamcop.net/ > > Log in without cookies here: http://members.spamcop.net/ > > If you can't remember your password, just use the "Forgot your > password? (click here)" link when login fails, and SpamCop will send > you a new one. > > Or use this link to get a new password: > http://www.spamcop.net/denied.shtml > > - Don D'Minion - SpamCop Admin - From mikeyhsd at lamparty.net Sat Oct 4 10:14:54 2008 From: mikeyhsd at lamparty.net (mikeyhsd) Date: Sat Oct 4 10:20:03 2008 Subject: [Schelp] Re: email address change References: Message-ID: success. got a new password finally. was able to logon and change my email/password combination. what was not able to change was my username for logon purposes. will be satisfied for the time being. thanx for the help. -- mikeyhsd@lamparty.net "mikeyhsd" wrote in message news:gc7sc6$bm3$1@news.spamcop.net... > sorry that you did not get it. > > I emailed back as well as reply to your message. > > have been mailing my spam with the submit address from the lamparty > account for several weeks. > > finally this morning was able to get the system to send me a new password. > > will retrieve the mail and try . > will post back on success or not. > > > > -- > > mikeyhsd@lamparty.net > > > > > > "SpamCop Admin" wrote in message > news:p0iee454m3sgh2bcrhuqujmslkov3m3id2@4ax.com... >> mikeyhsd wrote: >>>-the last post I had a response from someone who told me to mail them at >>>spam >>>-cop and they would assist. >>>-been almost a week and nothing. >> >> No mail from you has entered our system. None. >> >> I just wrote to you from my admin account. Hopefully, you will get it >> and we can establish communication. >> >> Here's all the login information. Maybe it will help. >> >> Your username is the whole email address you registered with us for a >> spam reporting account. >> >> Passwords use numbers and both upper-case and lower-case letters, are >> cAse sENsiTive, and may contain lookalike digits such as, "one" and >> "ell" or "Oh" and "zero." Our system will allow you to copy/paste in >> your password if your browser will. After you log in, you can use the >> "Preferences" link at the top of the page to change your password. >> >> Log in with the preferred Cookie method at: http://www.spamcop.net/ >> >> Log in without cookies here: http://members.spamcop.net/ >> >> If you can't remember your password, just use the "Forgot your >> password? (click here)" link when login fails, and SpamCop will send >> you a new one. >> >> Or use this link to get a new password: >> http://www.spamcop.net/denied.shtml >> >> - Don D'Minion - SpamCop Admin - > From Unknown.User at Invalid.Domain Mon Oct 6 11:54:39 2008 From: Unknown.User at Invalid.Domain (Jan M. Nelken) Date: Mon Oct 6 11:55:03 2008 Subject: [Schelp] I am confused ... Message-ID: Tracker for review: http://www.spamcop.net/sc?id=z2307960663zd3360ed8ebab36360e72767e0f1b10e5z Spamcop says: 0: Received: from d03relay03.boulder.ibm.com ([9.17.195.228]) by d25ml02.torolab.ibm.com (Lotus Domino Release 7.0.3FP1) with ESMTP id 2008100605560535-15385 ; Mon, 6 Oct 2008 05:56:05 -0400 No unique hostname found for source: 9.17.195.228 IBM received mail from IBM ( 9.17.195.228 ) ... but in step 4 Spamcop seems to be cinfused: 4: Received: from d03relay03.boulder.ibm.com [9.17.195.228] by BLDGATE.BOULDER.IBM.COM (IBM VM SMTP Level 530) via TCP with ESMTP ; Mon, 06 Oct 2008 03:27:39 MDT No unique hostname found for source: 9.17.195.228 Possible forgery. Supposed receiving system not associated with any of your mailhosts Will not trust anything beyond this header Why the same IP resolved to host name in step 0 and failed to resolve in step 4? Jan M. Nelken From MikeE at ster.invalid Mon Oct 6 13:47:34 2008 From: MikeE at ster.invalid (Mike Easter) Date: Mon Oct 6 13:50:04 2008 Subject: [Schelp] Re: I am confused ... References: Message-ID: Jan M. Nelken wrote: > Tracker for review: > www.spamcop.net/sc?id=z2307960663zd3360ed8ebab36360e72767e0f1b10e5z This is a mailhosted tracker which has a lot of - 9 - different tracelines, but they are almost all IBM. I think something is wrong with your mailhost (some of the 9 lines have changed somewhat), because SC breaks the chain instead of taking it all the way down to where the/your ibm system got it from a different/German ibm system, blueice1n1.de.ibm.com 195.212.29.163 > Spamcop says: This will be 'my' interpretation of what SC means when it sez (in this circumstance)... > 0: Received: from d03relay03.boulder.ibm.com ([9.17.195.228]) by > d25ml02.torolab.ibm.com (Lotus Domino Release 7.0.3FP1) with ESMTP id > 2008100605560535-15385 ; Mon, 6 Oct 2008 05:56:05 -0400 > No unique hostname found for source: 9.17.195.228 > IBM received mail from IBM ( 9.17.195.228 ) That means that 9.17.195.228 doesn't rDNS, but SC is OK with the way everything is going because it is part of your mailhost configuration. > but in step 4 Spamcop seems to be cinfused: > > 4: Received: from d03relay03.boulder.ibm.com [9.17.195.228] by > BLDGATE.BOULDER.IBM.COM (IBM VM SMTP Level 530) via TCP with ESMTP ; > Mon, 06 Oct 2008 03:27:39 MDT > No unique hostname found for source: 9.17.195.228 > Possible forgery. Supposed receiving system not associated with any of > your mailhosts > Will not trust anything beyond this header > > > Why the same IP resolved to host name in step 0 and failed to resolve in > step 4? The IP still doesn't resolve, and/but it isn't OK w/ SC any more because SC doesn't recognize those lines as being part of your mailhost. If I parse it as a human, I can see that the ibm system is handling the item all the way down to 195.212.29.163 -- I wouldn't break the chain like SC did. Abbreviated Received tracelines from d03relay03.boulder.ibm.com ([9.17.195.228]) by d25ml02.torolab.ibm.com from d03av03.boulder.ibm.com (d03av03.boulder.ibm.com [9.17.195.169]) by d03relay03.boulder.ibm.com from d03av03.boulder.ibm.com (loopback [127.0.0.1]) by d03av03.boulder.ibm.com from VMSDVM6.POK.IBM.COM (vmsdvm6.pok.ibm.com [9.57.5.25]) by d03av03.boulder.ibm.com from d03relay03.boulder.ibm.com [9.17.195.228] by BLDGATE.BOULDER.IBM.COM from d03av01.boulder.ibm.com (d03av01.boulder.ibm.com [9.17.195.167]) by d03relay03.boulder.ibm.com from d03av01.boulder.ibm.com (loopback [127.0.0.1]) by d03av01.boulder.ibm.com from [195.212.29.163] (IT58369.seg.it.ibm.com [9.71.100.219]) by d03av01.boulder.ibm.com from [195.212.29.163] by mail.bradburyco.com -- Mike Easter kibitzer, not SC admin From cfm743 at hotmail.com Thu Oct 9 18:20:10 2008 From: cfm743 at hotmail.com (Flicker) Date: Thu Oct 9 18:25:03 2008 Subject: [Schelp] Spam From Verizon Message-ID: I have just reviewed 300 messages and am still not familiar with much of the jargon, so please excuse my question if the answer appears within. I am considering subscribing to a spam cop email but could not determine if the following problem will be resolved: Daily I receive e-mails that make no sense at all and are not directly addressed to my address. The email address is with Verizon. The body of the messages does not contain my e-mail address. Explanation & Suggestion greatly Appreciated. Thanks in advance From MikeE at ster.invalid Thu Oct 9 20:09:24 2008 From: MikeE at ster.invalid (Mike Easter) Date: Thu Oct 9 20:10:03 2008 Subject: [Schelp] Re: Spam From Verizon References: Message-ID: Flicker wrote: > I have just reviewed 300 messages and am still not familiar with much of > the jargon, so please excuse my question if the answer appears within. There are various reasons that some spam comes along in big clumps. > I am considering subscribing to a spam cop email but could not > determine if the following problem will be resolved: Spamcop is a 'triple' entity. It maintains the spamcop blocklist, abbreviated scbl, which is an important blocklist for those who use blocklists to aid them in spam defense. It provides a free and paid reporting system which is a vehicle for individuals to notify providers about spamsources and spamvertisers. This is a motivation for reporters to feed their spam into the parsing and reporting system which enhances the value of the SCbl. In addition, spamcop is a provider of a filtered email service which helps the subscriber filter their mail with a combination of blocklists and regular expression tools based on SpamAssassin, and to conveniently perform SC reporting from their held spam mail. There are various methods by which one can filter their mail - some free and some pay. It is very important to not be mixing spam mail into your goodmail -- because that is both inconvenient and frustrating and even potentially dangerous depending on the (in)security of your configuration. It is not possible to guess at what benefit you might gain from subscribing to spamcop mail, except that filtering mail with a decent filter, free or pay, is a lot better than not filtering mail. > Daily I receive e-mails that make no sense at all and are not directly > addressed to my address. That is very typical for spam. You can also receive a bunch of spam indirectly if your email address was used in the From of the spam and the spam was hitting servers which misdirected spambounces to your address. > The email address is with Verizon. The body of the messages does not > contain my e-mail address. Spam email addresses are not often very helpful. Spam From is hardly ever true. Spam To does not have to contain the address of the recipient. > Explanation & Suggestion greatly Appreciated. You are speaking vaguely and generically. It is neither possible nor useful to try to describe a spam or even a whole bunch of spams. The best way to demonstrate a spam is to provide such as the readers here access to a copy of the spam after any necessary privatization. The best way for spamcop reporters who post messages here to demonstrate a spam is by posting a tracker to the spam. In order to post a tracker, one would have to be registered as a free spamcop reporter. If you are not so registered, you can register here: http://www.spamcop.net/anonsignup.shtml The SpamCop reporting service is free. That isn't the only way to demonstrate a spam. If you are able to access what is called the message source, you can also paste or attach that plaintext message source, which contains complete headers to a message in the newsgroup spamcop.spam -- but not in this group because this is a discussion group which doesn't allow pasting spam. > Thanks in advance Here are instructions for handling a tracker for posting here: How to make a tracker: 1 select and obtain the complete spam 2 privatize the header&body content 3 webparse it & copy the tracking URL 4 cancel the report & paste the tracker in here 1 ... in the manner described by the SC faq http://www.spamcop.net/fom-serve/cache/19.html How do I get my email program to reveal the full, unmodified email? 2 ... by modestly and unambiguously mungeing any private information you don't want to expose, such as your name or email address which might appear anywhere in the header or body. Avoid excessive or confusing mungeing. 3 login to the SC webparser, paste in the spam, and click Process Spam button; then copy the tracking URL from the top 'Here is your TRACKING URL' of the appearance http://www.spamcop.net/sc?id=z1505491930z5db2559eebcde98291b8e783c95d61cez 4 ... after parsing, the report is 'live' until the cancel button is used. After cancelling the tracker disappears; the munged spam report should be cancelled because it has been materially changed and because you don't want to leave a tracker live. -- Mike Easter kibitzer, not SC admin From notme at hotmail.com Thu Oct 9 20:30:23 2008 From: notme at hotmail.com (Flicker) Date: Thu Oct 9 20:35:02 2008 Subject: [Schelp] Re: Spam From Verizon In-Reply-To: References: Message-ID: Thanks for your very complete detailed about SC and reporting. Mike Easter wrote: > a copy of the spam after any necessary privatization. Since the e-mails are not specifically to a legitimate address in the BODY and in the TO: field, I am reluctant to post since I am not fully aware of which information would adequately privatize the message. > In order to post a tracker, one........ I've done this in the past and most of the e-mails were reported by SC as too old to process. As a result, I gave up. Instead, as suggested I filter the e-mails and dispense them to a spam folder. Many thanks for you reply All the best \Flicker\ From MikeE at ster.invalid Thu Oct 9 23:28:42 2008 From: MikeE at ster.invalid (Mike Easter) Date: Thu Oct 9 23:30:03 2008 Subject: [Schelp] Re: Spam From Verizon References: Message-ID: Flicker wrote: > Mike Easter wrote: >> a copy of the spam after any necessary privatization. > > Since the e-mails are not specifically to a legitimate address in the > BODY ... then there wouldn't need to be /any/ privatization of the body. The idea behind privatization is so that there is nothing in the header or the body which has any references to your complete email address, particularly the username. There likely isn't anything secret about your email domain, let's say if it were a verizon one. > and in the TO: field, I am reluctant to post since I am not fully > aware of which information would adequately privatize the message. The term 'adequately' implies that privatization should be heavy in order to be 'adequate' -- whereas my concept of privatization is that it should be extremely light and yet unambiguous. If you email address doesn't appear anywhere in the headers or the body, perhaps there is no need to munge anything. If your username appears with the domainname, then you could replace the usernmae with . > > In order to post a tracker, one........ > > I've done this in the past and most of the e-mails were reported by SC > as too old to process. Being too old to process doesn't interfere with the business of providing a tracker to a spam example. The point is not about reporting a (old) spam. The point is about feeding the parser to get a tracker whether it is too old to report or not, and pasting a tracker in here so that someone else can see that spam for whatever it is you are talking about so that they can speak to what you are asking. Saying 'I got some spams' and wondering about 'Explanation and Suggestions' isn't a meaningful conversation. > As a result, I gave up. Instead, as suggested I > filter the e-mails and dispense them to a spam folder. Well, the important thing is for the emails to not frustrate, inconvenience, or endanger you. > Many thanks for you reply YW. -- Mike Easter kibitzer, not SC admin From MikeE at ster.invalid Fri Oct 10 10:49:08 2008 From: MikeE at ster.invalid (Mike Easter) Date: Fri Oct 10 10:50:02 2008 Subject: [Schelp] Re: Spam From Verizon References: <1pmue4thicp4ebu3htmop7m1ak6rtak001@4ax.com> Message-ID: Evan Platt wrote: > Flicker >> Daily I receive e-mails that make no sense at all and are not directly >> addressed to my address. >> >> The email address is with Verizon. The body of the messages does not >> contain my e-mail address. > > No, but the header does contain your e-mail address. It is not necessary for the complete headers of a received mail to contain the recipient's address. The process of the smtp transaction, which some refer to as the smtp or mail 'envelope' - involves a process of helo, mail from, rcpt to, data. The data part is where the headers of such as To, From, Subject & Date come from. The sender can put the recipient's address in to RCPT TO part of the envelope but not the To (or CC) part which is accessible with complete headers. > The 'headers' you typically see in a mail client can easily be changed > by the sender of the message. I could send you a e-mail and make the > headers that you see in your mail client say "To: anyone@example.com" Correct. Not just the (partial) headers, but the complete headers. > You'll need to view complete headers in your e-mail client to see that > the message truly was delivered to you. It will be in one of the > headers. Viewing the complete headers of a spam very often does *not* contain the recipient's address anywhere in the headers. -- Mike Easter kibitzer, not SC admin