Jump to content

Reporting problems today?


mrmaxx

Recommended Posts

  • Replies 712
  • Created
  • Last Reply

Only got 4 spams overnight.

Only 2 of those were for misterjoy.ru, the others were what I mostly get

these days: advance fee fraud (Nigerian scams).

BTW, misterjoy.ru has no reporting address. Report goes to nomaster[at]devnull.etc...

All 4 spams were reported with the full web interface in about 3 minutes.

No problems at all, no delays or timeouts.

Fingers crossed!

Link to comment
Share on other sites

May I have the direct URL to quick reporting in SpamCop FAQ?

[at]hok:

This is where I found the info:

http://forum.spamcop.net/forums/index.php?showtopic=163

There is a lot of information in that thread, and it takes a bit of time to wade through it all.

The following URL was given in an earlier reply to your enquiry:

http://forum.spamcop.net/scwik/QuickReporting/

This page gives a much simpler explanation of the process, and is much easier to read.

Link to comment
Share on other sites

I think we are out of this swamp finally...since 8 pm last night we have been witness a consistent and constant upswing in the statistics, still climbing, lets see if it plateaus to levels seen before this incident started!

Link to comment
Share on other sites

I think we are out of this swamp finally...since 8 pm last night we have been witness a consistent and constant upswing in the statistics, still climbing, lets see if it plateaus to levels seen before this incident started!
While I hope so, I do not think so for following reasons:

1. Occasionally, I still experienced time out.

2. Occasionally, it still took more than 10 minutes to get a response for spam submitted via e-mail forwarding.

3. Statistics graph still show higher report sent than submitted, and it has been like this since week 27. See my earlier post at http://forum.spamcop.net/forums/index.php?...ost&p=81596

Link to comment
Share on other sites

..."Regular" does not necessarily imply daily, especially if there's nothing new to report. :) <g>

...But I'll risk providing an update for today that I'd think should be acceptable to SpamCop:

<snip>...And today's was posted by Don D'Minion (SpamCopAdmin) 81968[/snapback].

...Latest of significance: 14 July 82005[/snapback].
Link to comment
Share on other sites

Someone already tried to explain that there are more reports sent than submitted because some places have more than one abuse address and people like me also submit to the web advertised info, spam.gov and knujon. I typically have at least 4, sometimes as many as 10 separate reports for each submital unless I quick report. Even in the latter case there are at least 2-3 reports sent per submital. So that is normal. Also sometimes lookups can take a long time because of misconfiguration or deliberate setups by spammers, so that is not serious eihter...you can get sigalarms even in the best of times. The important parameter you want to watch is the average reporting which was around 10 before this started and now it seems to be heading there...

Link to comment
Share on other sites

Pleased to advise that for 48 hours now all spam reports have been processed with no delay whatsoever.

Well done to those tasked with sorting this issue.

Rgds

Keith Harris

____________________________

SpamCop user since 1999

Link to comment
Share on other sites

It's easy to post a problem or complaint, it's easy to point fingers and ask why something is not fixed. But the hardest part is saying thanks when it's fixed.

So I just wanted to post a big thank you for all of the SpamCop support/IT, and the helpful posts and updates from the forum.

For me its back to normal, seems a little faster. Reporting works fine and I receive the AutoResponder within minutes of reporting the spam.

Thanks everyone.

Link to comment
Share on other sites

May I have the direct URL to quick reporting in SpamCop FAQ?
...Other replies here should have helped you find the information you wanted. However, please navigate to the SpamCop FAQ (links near the top left of each SpamCop Forum page) and search for "quick." If you do not find anything, please let us know the exact steps you followed by posting a note here and hopefully someone will be able to help. I want to be sure that everyone has as high a probability as possible of finding those answers that are posted in the SpamCop FAQ. Thanks!

...In reviewing information about using Quick Reporting, please also be sure to read my warning in forum thread "FAQ Entry: What is Quick Reporting?"!

Link to comment
Share on other sites

Spamcop's been working great for me the past two days! :wub:

So I wanted to say Thanks! to everybody who worked on this problem we've been having for several weeks now.

Thanks! :D

I really mean that!

I do have an issue though.

I've noticed that Spamcop is showing my email address in many of the reports.

This is usually in the form of username=domain.com. Where the = replaces the [at].

Another form of this dataleak is to use the custom header: X-UID: username (With the domain name obvious in the headers).

I've collected examples of these to show you, and placed them in separate categories:

Return-Path:

X-UID:

Email Links:

List-Unsubscribe:

In 4 Places:

Here is a bunch of examples to look at:

Return-path:

http://www.spamcop.net/sc?id=z5369157570z1...57113d869751f3z

http://www.spamcop.net/sc?id=z5369158575z6...c4eba88a9dec00z

X-UID:

http://www.spamcop.net/sc?id=z5369433900z0...a3771d5bc0384fz

http://www.spamcop.net/sc?id=z5369425723z5...416ea58832e151z

http://www.spamcop.net/sc?id=z5369872714z4...a7727921f7660bz

http://www.spamcop.net/sc?id=z5369944998z6...43536cd4dbefdcz

http://www.spamcop.net/sc?id=z5369945773z6...b80200119c2f47z

http://www.spamcop.net/sc?id=z5369960782zd...3ecd9bf23005f5z

http://www.spamcop.net/sc?id=z5370088677z1...79e3addfc213e8z

In email URLs:

http://www.spamcop.net/sc?id=z5369426309zf...8bc63d01541a6dz

http://www.spamcop.net/sc?id=z5369941632z5...73a28005b7ab78z

http://www.spamcop.net/sc?id=z5369426227z1...773d7d64cf8d45z

http://www.spamcop.net/sc?id=z5369426309zf...8bc63d01541a6dz

http://www.spamcop.net/sc?id=z5369435811z2...e96d92e47f2adaz

http://www.spamcop.net/sc?id=z5369424182z1...a7c44b2dd2a879z

http://www.spamcop.net/sc?id=z5369431581z8...cee78ce2e37d12z

http://www.spamcop.net/sc?id=z5369565109z3...96c67ba936a710z

http://www.spamcop.net/sc?id=z5369565360za...e03761fcffa98dz

http://www.spamcop.net/sc?id=z5369565763z4...f2b58788cb7543z

X-UID: and List-Unsubscribe:

http://www.spamcop.net/sc?id=z5369567178z5...e7d537f65cd9caz

http://www.spamcop.net/sc?id=z5369567359z7...308ad988809aa1z

http://www.spamcop.net/sc?id=z5369624303z2...6a128e7652b485z

http://www.spamcop.net/sc?id=z5369624710zf...4000ebce0fc522z

http://www.spamcop.net/sc?id=z5369625161z7...b11290ab37af1fz

http://www.spamcop.net/sc?id=z5369625730za...7856534c2c8b0bz

http://www.spamcop.net/sc?id=z5369626197zd...aa686c0ee9ccfez

http://www.spamcop.net/sc?id=z5369678582z5...fec198fcb6a11az

http://www.spamcop.net/sc?id=z5369943298z9...d41a704b3c555cz

http://www.spamcop.net/sc?id=z5370089012zf...822938f5df78a9z

In 4 Places:

http://www.spamcop.net/sc?id=z5369678356zb...2fa6de6e9b30b8z

http://www.spamcop.net/sc?id=z5370107385z0...bb8675f81ba51dz

http://www.spamcop.net/sc?id=z5370102857zc...0acc4bf6b58be7z

Note, some of the above examples could fit in 2 or more categories.

Link to comment
Share on other sites

In what I hope is an isolated case, I noticed that all my mailhosts disappeared following my renewal during the outage.

I gave up hoping they'd reappear after this spamcop discussion begun to be held back as spam due to my having lost my corresponding mailhosts.

Test emails were generating gateway timeouts before I gave up for the evening.

Reference #1.1e321602.1342479250.27e54e5

Reference #1.1e321602.1342479788.27e9e71

Reference #1.5c321602.1342480367.16da62e

Link to comment
Share on other sites

...

I've noticed that Spamcop is showing my email address in many of the reports.

This is usually in the form of username=domain.com. Where the = replaces the [at].

Another form of this dataleak is to use the custom header: X-UID: username (With the domain name obvious in the headers).

I've collected examples of these to show you, and placed them in separate categories:

Return-Path:

X-UID:

Email Links:

List-Unsubscribe:

In 4 Places:

...

I think those are all "known cases" jims, not a result of the reduced service period. Auto-munging within the body is always problematic - and whenever your address is spoofed as sender or return-path it remains un-munged of necessity. One of the few exceptions to the "material changes rule" is permission to manually munge personal identification before submission/resubmission, if you are concerned about it. Since the actual spammer should never get to see your reports (any abuse address known to be handing these on stops getting reports PDQ), the risks of reading the spam to check for identification is possibly greater than the risk of some identification making it into the report.

There has been much discussion of it over the years and you will find those discussions mostly in this "SpamCop Reporting Help" section, via one or both of the "search" tools found within the heading of each forum page.

Steve S

Link to comment
Share on other sites

<snip>

I've noticed that Spamcop is showing my email address in many of the reports.

This is usually in the form of username=domain.com. Where the = replaces the [at].

Another form of this dataleak is to use the custom header: X-UID: username (With the domain name obvious in the headers).

<snip>

Hi, jims,

...Sorry to hear of your problem. While in no way an expert, I'll hazard the guesses that this problem may be due to either or both of:

  • my userstanding that the SpamCop parser ignores the "X-" entries.
  • the fact that the "e-mail addresses" do not look to the SpamCop parser like e-mail addresses because, as you yourself noticed, they are not of the form name[at]host.domain.

...What to do about this? I would recommend reading the SpamCop FAQ (links to which appear near the top left of each SpamCop Forum page) article labeled "-------> Material changes to spam - Updated!" -- the paragraph that begins with the phrase "It is okay to munge...."

Link to comment
Share on other sites

In what I hope is an isolated case, I noticed that all my mailhosts disappeared following my renewal during the outage.

I gave up hoping they'd reappear after this spamcop discussion begun to be held back as spam due to my having lost my corresponding mailhosts.

Test emails were generating gateway timeouts before I gave up for the evening.

Reference #1.1e321602.1342479250.27e54e5

Reference #1.1e321602.1342479788.27e9e71

Reference #1.5c321602.1342480367.16da62e

What a revolting turn of events Bruce. If it continues, if Don doesn't see this discussion and step in anyway, write to him at Service[at]Admin.SpamCop.net Provided his admin tools are consistently working for him again he should be able to set you right in a flash.

As you say, hopefully an isolated case. We still can't be quite sure the present 40-50% processing rate is a result of reduced reporter numbers or the result of continuing processing problems (or both).

Steve S

Link to comment
Share on other sites

>- We still can't be quite sure the present 40-50% processing rate is a result

>- of reduced reporter numbers or the result of continuing processing problems (or both).

Or neither. ...

Oh sure, introduce infinite possibilities then <G>. Logically quite correct, but it made my day having that pointed out anyway <g>.
Link to comment
Share on other sites

I think those are all "known cases" jims, not a result of the reduced service period. Auto-munging within the body is always problematic

<snip>

One of the few exceptions to the "material changes rule" is permission to manually munge personal identification before submission/resubmission, if you are concerned about it.

<snip>

Steve S

<_<

I'm of two minds about it. I guess it doesn't bother me enough to do anything about it. (Before my SpamCop days I looked all the stuff up manually, and sent service providers email directly, and so was prepared for reprisals.)

Since I've started looking, I just found one with 13 instances of my email address scattered throughout the header and body. It seems sort of overkill just to verify my address is live.

Oh well, thanks for the heads-up. :)

...What to do about this? I would recommend reading the SpamCop FAQ (links to which appear near the top left of each SpamCop Forum page) article labeled "-------> Material changes to spam - Updated!" -- the paragraph that begins with the phrase "It is okay to munge...."

Ok, thanks! :rolleyes:

Link to comment
Share on other sites

... If Don doesn't see this discussion and step in anyway, write to him at Service[at]Admin.SpamCop.net ...

Thanks. Don saw my report of lost mailhosts following renewal and PM'd me. I've just responded.

My reporting history was also missing, so it feels like a new account was created against the same email address (duplicate?), which you wouldn't expect.

As I said earlier, a mail rule error on my side caused my received reminders to be misfiled and marked as read leaving me unaware of the pending renewal. When I eventually saw that my account had been suspended I thought nothing it, because others were reporting suspensions due to the outage too and also because Don had indicated those affected would be reinstated shortly, so I waited, but as I waited I double checked. On checking I found inconsistencies in the information supplied to users, whereas Web reporting said my account was suspended and pop mail said I had an incorrect password, webmail was saying that my account had expired. There was no grace period. It was a very brief expiration and I renewed within hours.

It troubles me that my account appears to have been deleted immediately with loss of mailhosts and reporting history and it troubles me that webmail knows my account had expired but that the web reporting didn't. of course if the system reports that an account has expired then it can't have been deleted.

Link to comment
Share on other sites

No problems with reporting for the last two days now.

Everything seems to be working very well!

I'd just like to say A BIG "THANK YOU" to all those who have been working

on fixing this problem! :D

Link to comment
Share on other sites

..."Regular" does not necessarily imply daily, especially if there's nothing new to report. :) <g>

...But I'll risk providing an update for today that I'd think should be acceptable to SpamCop:

<snip>

...Latest of significance: 14 July 82005[/snapback].
...Nothing new of significance today, yet.
Link to comment
Share on other sites

First THANK YOU for getting this thing working again.

~~~~~~~~~~~~~~~~~~~~

Now I have a question. Not sure if this is a result of the foul ups, or just coincidence.

But lately, about the time spamcop started working again, I started getting a new rash of spam.

Each one is apparently addressed directly to my email. Not the usual cluster of addresses, but mine. Even in the first line of the message they use my email addy.

These all have some asian symbols in them, and all seem to go to yahoo mail services as a reporting address.

These have been landing in my inbox and not junk. Yahoo has at least been pretty good at filtering out junk. But not these. They keep appearing in with my real mail.

So... without getting too technical, WTH?

And does yahoo care at all? Some time ago (months) yahoo had an actual reporting address the complaints went to. On occasion I would forward their junk directly to them. But now that only bounces. It's a yahoo at spamcop addy now.

I just wonder if it's even worth the time to submit. Or is that as good as the dreaded devnull thing.

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.


×
×
  • Create New...