At 2:52 PM -0400 8/14/02, Stefan Jeglinski imposed structure on a stream of electrons, yielding: >I today got this surprise when I tried to send e-mail to buggs.net >abuse because one of my users had gotten a similar message: > >>Failed to deliver your message to [EMAIL PROTECTED]: >>SMTP: Address rejected by host >>Host 'buggs.net.mail1.psmtp.com' says: >>553 Too much spam from this network.#Excessive UCE 08/14/02 >> >>Reporting-MTA: dns; mx.4pi.com >> >>Final-Recipient: rfc822; [EMAIL PROTECTED] >>Action: failed >>Status: 5.0.0 > >Whoops, >http://relays.osirusoft.com/cgi-bin/rbcheck.cgi?addr=63.220.231.131 >shows that we're on ztl.dorkslayers.com, with this additional >comment: > >"2 August 2002: CAIS.NET and Tim Eckel make lots of new friends. NOT." > >I'd be shocked if we were actually used as a relay or otherwise as I >have SIMS locked down tight, BUT we are indeed on a CAIS /26 network >(they are our upstream). > >I surmise that CAIS is being listed by ztl.dorkslayers.com. Does >anyone know more about the [obviously recent] history of this so I >can go forward with some ammo (not that it will help, I suspect).
I have no light to shed on the ztl list, but CAIS/Ardent has been spiralling downhill in their abuse reponse for a while, and I router-blocked (i.e. packets, not just mail) big chunks of them after my last spam report to [EMAIL PROTECTED] was followed the next day with a collection of nasty attacks from the spammer's CAIS space and from what looked like CAIS internal machines. As far as I'm concerned, they are AT LEAST carelessly passing spam reports right to the spammers without asking and MAY be participating with their spammer customers in retaliating against people who complain about spam. -- Bill Cole [EMAIL PROTECTED] ############################################################# This message is sent to you because you are subscribed to the mailing list <[EMAIL PROTECTED]>. To unsubscribe, E-mail to: <[EMAIL PROTECTED]> To switch to the DIGEST mode, E-mail to <[EMAIL PROTECTED]> To switch to the INDEX mode, E-mail to <[EMAIL PROTECTED]> Send administrative queries to <[EMAIL PROTECTED]>
