Seems like more spam now Options

[Jeff G.]

the concept is to include the information in the DNS system. The responsibility to supply the information would rest with all those ISPs and without their cooperation they would be excluded from the secure email network.

By "include the information in the DNS system", I assume that you mean within the current standard fields, as currently maintained by ICANN, the IANA, ISPs, and private network admins worldwide. Exactly what information would be put in the DNS system (exactly what info in exactly what fields), by exactly whom? If the senders put it in, so can spammer senders. If the recipients put it in, how do they know what info to put in? If a third party puts it in, then the third party would be maintaining a DNS-based whitelist that would need to scale to nearly 4 billion entries (not to mention IPv6), and who would pay that third party to do that?

Even if there were only ten thousand legit responsible networks (there are many more, but humor me), your concept appears to include legal agreements between all of them, a total of a hundred million agreements, with each network's legal team having to keep track of ten thousand each. Sorry, but it just doesn't scale.

If your concept includes expanding the DNS system by expanding its specification, exactly how would you do that? SPF hasn't even done that.

Thanks!

[mozartm]

Could somebody explain what I should do after I complained to some adminstrator
and got a lot more spams after than before?

Those adminstrator email, all of them looks legimate, with "anti-spam", "abuse", "cnc-abuse" or with "@devnull.spamcop.net" at the end.

What happened is I have used the spamcop.net for more than 2 years on my University alumni account. At that time I always get about 2 to 3 spam/junk mail per day, usually from these Chinese admin after processing via Spamcop:

ip-admin[at]online.sh.cn
postmaster#online.sh.cn[at]devnull.spamcop.net
webmaster#online.sh.cn[at]devnull.spamcop.net
wengwq[at]online.sh.cn <-- these one I "unchecked" from reporting system because it does not look legimate

These two years I got gradually more spams, usually into 5-6 spams a day, that includes:

postmaster#cnc-noc.net[at]devnull.spamcop.net
abuse[at]cnc-noc.net
abuse[at]chinanet.cn.net

All of them usually have Sprint as ISP on this side, cnc-abuse[at]abuse.sprint.net

What happened last two weeks after sending to the above sites was much worse, I got about 15 spams per day. So I'm sure some of the complaints I use on spamcop were used against me and to generate more spams.

What happened last few days got even worse, I got about 35-40 spams a day, mostly of them always have similiar messages with the Linked sites at the same ISP hosting them, like "Video Cam Hookup", "Don't be alone again"

So to summarize I'm 100% some of the following email I reported to were used against me as **A LOT** more spams came in now. What should I do? I don't report to these mostly "Chinese" and some "Korean" admin/hostmaster/postmaster anymore, but will I get gradually 100 emails a day if I don't do something? Are reporting to @devnull.spamcop.net addresses safe?

The list below definitely have "dark-side" admin who uses the abuse report against you:

postmaster#online.sh.cn[at]devnull.spamcop.net
anti-spam#ns.chinanet.cn.net[at]devnull.spamcop.net
ip-admin[at]mail.online.sh.cn
webmaster#online.sh.cn[at]devnull.spamcop.net
wengwq[at]online.sh.cn
abuse#gddc.com.cn[at]devnull.spamcop.net

postmaster#cnc-noc.net[at]devnull.spamcop.net
abuse[at]cnc-noc.net
abuse[at]chinanet.cn.net

postmaster[at]china-netcom.com
crnet_tec[at]chinatietong.com
crnet_mgr[at]chinatietong.com
postmaster[at]chinatietong.com

abuse[at]hanaro.com

cnc-abuse[at]abuse.sprint.net

postmaster[at]public1.nc.jx.cn
root#public1.nc.jx.cn[at]devnull.spamcop.net
hostmaster#public1.nc.jx.cn[at]devnull.spamcop.net

abuse[at]fjdcb.fz.fj.cn
root#dns.fz.fj.cn[at]devnull.spamcop.net

abuse#dqt.com.cn[at]devnull.spamcop.net
postmaster[at]dqt.com.cn
postmaster#bta.net.cn[at]devnull.spamcop.net

postmaster[at]wh.hb.cn
anti-spam#ns.chinanet.cn.net[at]devnull.spamcop.net
spam_hb[at]public.wh.hb.cn
abuse_hb[at]public.wh.hb.cn

abuse[at]jsinfo.net
abuse[at]pub.nt.jsinfo.net

[Wazoo]

[at]devnull ..... see the SpamCop Glossary or the recently announced SpamCop Dictionary for what this means ...

SpamCop FAQ linked to at the top of this page
Original SpamCop FAQ & Added Forum Items, Never up to date, changes often

Under the SpamCop Parsing and Reporting Service section;
Why did my spam load increase after I started Reporting?

and actually this "new" Topic will be Moved/Merged into this existing Topic/Discussion ....

PM sent to advise of this Move/Merge action

[Telarin]

It is not unusual for the amount of spam received at any email address to gradually increase over time. Especially if your email address is published on a publicly available website as is often the case with alumni directories.

There is no way to attribute this increase to a particular cause such as spamcop reporting. I started reporting spam to spamcop from a "mature" email address. It is an address that I have been using for about 10 years, and has received a constant amount of spam for a long time. The assumption here is that the address is old enough that its already on all the lists.

There has been no change in the amount of spam received at this address despite reporting spam to spamcop for several months, so I find it unlikely that that is the cause of your increase in spam.

Instead, I would look at other factors. Do you post to usenet groups using your address in an unmunged form? Is it listed in any online profiles or directories that are publicly available? Have you used it to buy anything online? All of these factors can potentially provide your email address to spammers.

The bad news, is once you get on one of their lists, they all trade and sell their lists, so it will only be a matter of time before you are on all the spam lists.

The only thing you can do at that point is either use filtering to bring the spam down to a level that you can live with, or abandon the email address altogether.

[Black Tiger]

There is no way to attribute this increase to a particular cause such as spamcop reporting.

I strongly disagree with you there.
Take myself. I have several email addresses and a certain amount of spam per day which lies about 15 spammails per email address.

I started to report with one of my addresses a few days ago now.
The other email addresses have their normal spam amount, but the one I was reporting for is now raised to about 30 spam emails a day.
And that was not mole reporting.

I did not think that the amount of spam I received would be less by reporting, but I also did not think it would increase that much.
The reason I started reporting to Spamcop was because I want to help fighting spam because it has grown to much over the years.
Second reason was that there are a lot of dns blacklists around, but also a lot which blacklist ip's on the wrong arguments, or... which I also discovered, blacklist some isp and if he wants of the blacklist, he has to pay for it. This happened with an adsl-provider, versatel.nl, wanadoo.nl or home.nl (not sure which one).
The world is not being helped by blocking whole domains because of a few users which spam because their computers are hacked or have worm or such.

This is the reason I went looking for a system which is trustworthy, where support is good and questions can be asked and spam can be reported for free.
This way I ended up at Spamcop. And I like it.

But I can support the statement that spam grows when reporting mail as spam when not being a mole. That's a sure fact.

I have no clue why this did not happen to you, but that's only positive for you and I would be happy about it.

However, I'm not very good in understanding all English because I'm Dutch. In spite of all efforts to explain what's happening if you're a mole I just don't quite understand if spammers get on the spamcop blacklist or not when you report as a mole.
To my opinion, it should be this way.

Interesting discussion by the way. I'm also pleasantly surprised about the kindness en friendliness the way people communicate and discuss with each other on this forum.
My compliments for that!

This post has been edited by Black Tiger: Jan 23 2006, 01:01 PM

[dra007]

Well, spammers are scum, immoral and criminal, if they know someone is actively opposing them they will attempt retaliation sooner or later. Maybe less nowdays when they are sending millions of spam ...But..

Often you will see identifiers within the spam, which are as plain as your e-mail address but can also be a code which can trace back a report to you, regardless of that report being munged ..

Since I started reported here I have had waves of virus attacks, port scans (through Korean and Chinese servers) and trojan attempts, one as recently as today (posted in the Lounge)..

Of course, in their sick and criminal mind they think intimidation will work... In my case it has the opposite effect, just makes the fight more worthwhile... and it is a sure sign that I am disturbing their criminal activities..

[StevenUnderwood]

I strongly disagree with you there.
Take myself. I have several email addresses and a certain amount of spam per day which lies about 15 spammails per email address.

I started to report with one of my addresses a few days ago now.
The other email addresses have their normal spam amount, but the one I was reporting for is now raised to about 30 spam emails a day.
And that was not mole reporting.

Also suspect is your handling of the spam. Many people when they start to report spam start opening it to be sure of what they are reporting, setting off the web bugs embedded in the spam and alerting the spammer of a live address. This is not a response to the reporting itself as the same would happen if you opened the email but never reported anything.

You should always open your spam off-line or in a text only mode to minimize this risk.

[tadpole88]

I was getting about 10-15 spam emails a day and then decided to use SPAMCOP to eliminate or tone down the number of SPAM emails and it back fired. After reporting the emails using spamcop the number of emails I have now started receiving have gone up to about 30-50 spam emails a day. I have tried several filtering methods but can't seem to get anything to work to eliminate or automate the deleting of the messages can anyone here tell me why the SPAM increased and what should I do next?

Tadpole88 (IMG:style_emoticons/default/sad.gif)

[Telarin]

Reporting alone will not reduce the number of spams you receive, your spam will continue to increase at the normal rate (seems about 100% per 6-12 month period to me, but that is just my personal experience). In order to get any benefit from reporting to spamcop, you must use some tool that will check incoming mail against the SCBL. If you run your own mailserver, simply setting up incoming connection filtering to use the SCBL should do the trick. If not, there are a number of tools available capable of taking advantage of the data in the SCBL for various mail clients.

[craigt]

... there are a number of tools available capable of taking advantage of the data in the SCBL for various mail clients.

Could you point me in the direction to find the tool list for mail clients; I would love to run my own mailserver but running any server is against my ISP's TOS.

[dra007]

Could you point me in the direction to find the tool list for mail clients; I would love to run my own mailserver but running any server is against my ISP's TOS.

No, you can use spampal to filter your inbox. Free to download and easy to configure.

[Wazoo]

Tried for quite a while, but still can't really make sense of the Subject/Title of this Topic ..????

Could you point me in the direction to find the tool list for mail clients; I would love to run my own mailserver but running any server is against my ISP's TOS.

I know I had built up a FAQ for this. Went looking for it .. OK, it was in a version of the FAQ that was 'internal' to the Forum, and it didn't make the last upgrade to this application. Will try to pull up what I had put together once upon a time, see if I can put it into the Wiki... but SpamPal comes up often enough, not sure why it would still be "unknown" ....

On the other hand, the "subject matter" is addressed within the current SpamCop FAQ here ... Why did my spam load increase after I started Reporting?

[Farelf]

Tried for quite a while, but still can't really make sense of the Subject/Title of this Topic ..???? ...

"Reported Spam, now getting bombarded" is the sense of it. As dear old Omar said:

The Moving Finger writes; and, having writ,
Moves on; nor all your Piety nor Wit
Shall lure it back to cancel half a Line,
Nor all your Tears wash out a Word of it.

However if the OP would verify "we" would be happy to change his title for him (and maybe even if he doesn't) thus saving further puzzlement to those of tidy mind, more importantly assisting the future recall of the discussion.

[Wazoo]

"Reported Spam, now getting bombarded" is the sense of it.

OK, caught up elsewhere, running back through this, you probably quoted the intent corrently .. and with that, Merged this into the previously referenced 'other Topic' .. PM sent to advise of the Move/Merge ..

[nomad]

same with me, i report a small amount to spam cop then got bombarded with spam, its got so bad now i am setting up a new e.mail and will hide myself away from spammers, nothing gets done, in fact i checked a few reports and they said ignore spamcop reports !!! i really wanted to fight these time wasting tossers but spamcop doesnt work , maybe due to the fact that one of the spammers took ironport to court ? if this isnt the case then please answer this question " why is it when we report spam we get an increase ? surely if we report it correctly then the spammers will be stopped and our e.mails free from spam ? its not the case . i leave and never report any more spam for fear of floodgates being opened once more. thanks nomad

[Wazoo]

if this isnt the case then please answer this question " why is it when we report spam we get an increase ?

That's what (at least part of) this massive Discussion was about. How much of it did you read?

Are you 'securely' handling your e-mail? Are you watching (and verifying) just who you are sending your reports to? Have you checked out Mole-Reporting? Is it simply (as I pointed out in the beginning of this thing) that you decided to join the SpamCop.net 'user team' just a your "tide started to rise" ... thus your spam was going to increase anyway??? Just a few of the possibilities ....

surely if we report it correctly then the spammers will be stopped and our e.mails free from spam ?

The SpamCop.net Parsing & Reporting tool is just that ..a Parsing and Reporting tool. You submit a spam, verify the parse, send the Report. Generally faster and more accurately than you could do it yourself manually. That's pretty much all there is to it.

Recall, the other side of the story/equation is that the receiving ISP has to give a damn about the situation. Most do, far too many don't. Why would you consider this a "failing" of the SpamCop.net tool-set?

For the source of the spam, there is the additional step of adding the details to the database for use in the SpamCopDNSBL. This database was developed/is used for the Tagging and handling of e-mail for the users of a SpamCop.net e-mail account. Access to this database was opened up for others. If you are not using it, you're missing the "fruits of your labours"....

For spamvertised web-sites .. once again, the actual "action taken" depends on the receiving ISP. Read through the Blocking List Help Forum .. you'll see crying in there from folks that have had their sites shut down .. yet you'll also see that other sites that generate thousands of complaints still exist. Once again, the "problem" is not the SpamCop.net Parsing & Reporting system ... reports go out (leaving the not-resolving issues to that/those other existing threads and FAQ entries ...) ... Once again, if the receiving ISP doesn't want to spend the time and effort in doing the investigation and handling the situation ...??? There is the small benefit of feeding the SURBL, but once again, one needs to use tools that would allow one to use that BL .....

[StevenUnderwood]

why is it when we report spam we get an increase ? surely if we report it correctly then the spammers will be stopped and our e.mails free from spam ?

There can be many reasons for an increase in spam. For one, which I think is usually the biggest issue is reporters are now opening messages that they were normally simply deleting. Many spam messages have web content which can be easily tracked to determine the address the message was sent to, confirming the message was read. Those addresses are then sold to other spammers as "confirmed".

If when you are reporting spam, it is up to the ISP that originated the message to shut the spammer down. That does not always happen, and with some ISP's, never happens. Reporting alone will not eliminate spam. Spamcop reports also feed the spamcop blocklist which can reduce the spam you receive.

[nomad]

thanks for the replies, i agree that the isp's should and could do more, 2 of my e.mail addy's were from 2 diferent sites i have, the spammers were using sales at,enquiries at, etc etc. my first hour of every morning was to wade through all the spam , i dont open them i use mailwasher to get the headers and then copy/paste to spam cop, i have closed down the 2 sites e.mail accounts which has stopped a lot of junk but i still get over 100 every day in my normal e.mail.i appreciate the fact that once your on a spam list then that list will be resold to other pondlife. i am moving to a new isp so once my new e.mail is in place then i will hide. thanks