While blocking all communications with
countries outside of the US might fly in your company, most of us can not do that, especially
for an ISP. Example, I have a hosting client from New Zealand, a major client that
deals in electronic parts, which most come from the far east and from the UK, and so forth.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-----Original Message-----
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Stanford
Sent: Monday,
November 01, 2004 1:36 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail]
Earthlink Porn Spam
It looks like this is coming from Korea. I don't know if
you are able but we blocked many foreign IP addresses and this cut down on our
SPAM dramatically without any false positives so far. We have no need to
communicate with countries outside of North America.
Hope this helps...
Kevin
At 03:21 PM 11/01/2004, you wrote:
I am still getting a ton of porn spam from Earthlink.
I report it but it does not help much.
Any suggestions on how to stop this crap?
Here is a sample.
Received: from starling.mail.pas.earthlink.net [207.217.120.227] by
deepspace.i360.net with ESMTP
(SMTPD32-7.15) id A729169C0212; Mon, 01 Nov
2004 15:14:17 -0600
Received: from [220.79.28.96] (helo=220.79.28.96)
by starling.mail.pas.earthlink.net with asmtp (Exim 4.34)
id 1COZPa-0004kT-Jc; Mon, 01 Nov
2004 02:27:44 -0800
Message-ID: <[EMAIL PROTECTED]>
Reply-To: "=?windows-1251?B?dGVlbmE=?=" <[EMAIL PROTECTED]>
From: "=?windows-1251?B?dGVlbmE=?=" <[EMAIL PROTECTED]>
Subject: SPAM: =?windows-1251?B?QmxvbmRlIGJhYmUgcmlkZXMgY29jayBwb29sc2lkZQ==?=
Date: Mon, 1 Nov 2004 19:15:58 -0500
MIME-Version: 1.0
Content-Type: text/html;
charset="windows-1251"
Content-Transfer-Encoding: 7bit
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2600.0000
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000
X-ELNK-Trace:
851ef91fad811ab935bf18c85fec12a9239a348a220c2609e7a2cc1b84acd378d28921f1d29da79a3ca473d225a0f487350badd9bab72f9c350badd9bab72f9c
X-Originating-IP: 220.79.28.96
X-RBL-Warning: NOABUSE: "Not supporting [EMAIL PROTECTED]"
X-RBL-Warning: NOPOSTMASTER: "Not supporting [EMAIL PROTECTED]"
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [8400000b].
X-Declude-Sender: [EMAIL PROTECTED]
[207.217.120.227]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: NOABUSE, NOPOSTMASTER, BADHEADERS, SPFUNKNOWN, WEIGHT10
[11]
X-Note: This E-mail was sent from starling.mail.pas.earthlink.net
([207.217.120.227]).
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 384482018
<html><body>
<p>Whore getting fucked hard</p>
<p><img border="0" src=""
href="http://www.seahall.com/shemalefuck.jpg?yeppkvqvjalijjnjyhzhqmkhhkcz">http://www.seahall.com/shemalefuck.jpg?yeppkvqvjalijjnjyhzhqmkhhkcz"
width="600" height="660"></p>
<p><a href="" href="http://www.seahall.com/index.html">http://www.seahall.com/index.html">Laundry
room hardcore</a></p>
<p><font
color="#FFFFFF">msbtwhvfujanpmeovoahsudbovhrmxowsvtxnzyrinjbmbsqupxhoofwkmpaa</font></p>
<p><img border="0" src=""
href="http://www.seahall.com/shemale.jpg?axggkrdctpexkhobhpeptnfwbgaewn">http://www.seahall.com/shemale.jpg?axggkrdctpexkhobhpeptnfwbgaewn"
width="348" height="15">
<a href=""
href="http://www.seahall.com/shemale.html?mlnkprxfwsejrjxlkwawmfjkp">http://www.seahall.com/shemale.html?mlnkprxfwsejrjxlkwawmfjkp">jlzehjrlpltwqgk</a></p>
</html></body>
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.