On May 7, 2007, at 12:46 PM, [EMAIL PROTECTED] wrote:
A couple of things:
1) Again, is Speakeasy talking to you about the content of the
messages in
their spam trap, or is it just the fact that messages end up in
there? If
it is the latter, this change won't help you. Subscribe requests will
result in replies that end up in the same spot.
Speakeasy sends me this:
The following complaint is concerning unsolicited emails being sent
from this IP and/or spam being sent,
advertising a site at that IP address. Sending any form of
unsolicited or bulk mail or using unsolicited email to
promote a site hosted anywhere on our network is strictly
prohibited under Speakeasy's Terms of Service. We
request that you immediately cease and desist this activity.
...and I had them on the phone the other day. So they at least appear
to be willing to _discuss_ the content, even though their initial
interest is triggered by the spamtrap address. That's why I've
insisted that I can at least avoid "unsolicited email to promote a
site" if a partial change in LR's behavior is implemented.
2) RE: Spam engine. All of those messages will end up in a reply to
the
person that sent the mail (or that Letterrip thinks sent the mail).
You
are not redistributing SPAM. Letterrip is rejecting it. This is
exactly
the same behavior that any other mail server would do.
Well, like it or not, LR _is_ redistributing spam. Spam is coming
from Machine 1 (spoofed as Machine 2), to LR, and LR is _sending the
spam_ to Machine 2. That's redistribution. I TOTALLY agree with you
that's it's doing so for rather legitimate reasons, but the
inadvertent side effect is that it winds up redistributing spam.
I'm absolutely sympathetic to your plight -- I write a CMS for
websites, and I absolutely HATE having to accomodate security holes
created by dammit-it's-not-supposed-to-be-abused-that-way hacks that
force me into implementing features I never wanted to have to consider.
But the fact of the matter is, as things stand right now, my ISP is
willing to boot me (and all my clients) because of the _content_ of
the reply, for which I have no defense. If, later on, they want to
argue about whether or not mail servers should send bounces back _at
all_, I'm willing to debate them on the issue (as would you, I'm sure).
In the very short term, Speakeasy was kind (or foolish) enough to
send me the headers from the spam trap mail, so I've added that
domain to my Mail Rejection strings, but who knows how many others
they may have...
Cheers,
spud.
The one idea that came out of this would be to handle failures with
SMTP
errors rather then sending replies.
a.h.s. boy (lists) said:
OK, I just got my second notice from Speakeasy, since the same
problem happened again. I doubt they will continue to be as
forgiving.
Any chance of getting a build that can somehow prevent this? QUICKLY?
Ideally, it would be nice to have the option to 1) simply do not
respond to messages from non-subscribers (except for "subscribe" and
"subscribe digest") AND 2) do not echo the incoming message. But #2
alone would help a bit.
Judging by the LetterRip log files, my LR machine is now just being
used as a huge SPAM engine:
None of the following users are subscribed to my lists...I suspect
it's ALL spam...and at the rate of 4-6 messages per SECOND, it's a
bad bad situation to be in.
05/07 12:18:01 [114] - smtp send: sending to: [EMAIL PROTECTED]
05/07 12:18:01 [114] - smtp send: sending to:
[EMAIL PROTECTED]
05/07 12:18:01 [114] - smtp send: sending to: [EMAIL PROTECTED]
05/07 12:18:01 [114] - smtp send: sending to:
[EMAIL PROTECTED]
05/07 12:18:02 [114] - smtp send: sending to: [EMAIL PROTECTED]
05/07 12:18:02 [114] - smtp send: sending to: [EMAIL PROTECTED]
05/07 12:18:02 [114] - smtp send: sending to: [EMAIL PROTECTED]
05/07 12:18:02 [124] - smtp send: sending to:
[EMAIL PROTECTED]
05/07 12:18:02 [114] - smtp send: sending to: [EMAIL PROTECTED]
05/07 12:18:02 [114] - smtp send: sending to:
[EMAIL PROTECTED]
05/07 12:18:02 [114] - smtp send: sending to:
[EMAIL PROTECTED]
05/07 12:18:02 [114] - smtp send: sending to: [EMAIL PROTECTED]
Cheers,
spud, now desperate.
On May 3, 2007, at 4:43 PM, a.h.s. boy (lists) wrote:
I just got off the phone with my ISP (Speakeasy), who were about
ready to cut off my service...here's why:
1) Spammer sends an unsubscribe request to [EMAIL PROTECTED],
spoofing the From: header to be "[EMAIL PROTECTED]".
2) Spammer also includes spammy nonsense in the body of the message.
3) LetterRip receives the message, and responds to
[EMAIL PROTECTED] with "You are not subscribed to this list"
_AND_ all the spammy crap that was posted with the unsub request.
4) Speakeasy calls me, and threatens to shut me off because my
mailing list software is being hijacked to send spam.
Is there some way I can modify LetterRip to NOT echo the original
message back with the response? Otherwise, I'm going to have to
abandon LetterRip altogether, since LR has _already_ sent mail to a
spamtrap address...
spud.
-------------------------------------------------------------------
a.h.s. boy
spud(at)nothingness.org "as yes is to if,love is to yes"
http://www.nothingness.org/
-------------------------------------------------------------------
--
This message is from the Letterrip-Talk Mailing list.
To unsubscribe, send mail to: [EMAIL PROTECTED]
Archive: http://www.mail-archive.com/letterrip-talk%
40lists.letterrip.com/
-------------------------------------------------------------------
a.h.s. boy
spud(at)nothingness.org "as yes is to if,love is to yes"
http://www.nothingness.org/
-------------------------------------------------------------------
--
This message is from the Letterrip-Talk Mailing list.
To unsubscribe, send mail to: [EMAIL PROTECTED]
Archive: http://www.mail-archive.com/letterrip-talk%
40lists.letterrip.com/
--
This message is from the Letterrip-Talk Mailing list.
To unsubscribe, send mail to: [EMAIL PROTECTED]
Archive: http://www.mail-archive.com/letterrip-talk%
40lists.letterrip.com/
-------------------------------------------------------------------
a.h.s. boy
spud(at)nothingness.org "as yes is to if,love is to yes"
http://www.nothingness.org/
-------------------------------------------------------------------
--
This message is from the Letterrip-Talk Mailing list.
To unsubscribe, send mail to: [EMAIL PROTECTED]
Archive: http://www.mail-archive.com/letterrip-talk%40lists.letterrip.com/
