zak@ddtp.org Posted June 28, 2004 Share Posted June 28, 2004 As a CA state program to help deaf & disabled people get free telephone and telcom equipment, the following came in as spam; I'd really like to find out who had a problem with this meeting notice! Can anyone help me get to the bottom of this? Thanks, Zak Description of incident: > 1088205170arhelpFrom 1082117679[at]bounces.spamcop.net Fri Jun 25 > 19:01:14 2004 > Received: from pmesmtp01.mci.com by iaremedy.corp.us.uu.net with ESMTP > (peer crosschecked as: pmesmtp01.wcom.com [199.249.20.1]) > id QQquqm14275 > for <abuse[at]iaremedy.corp.us.uu.net>; Fri, 25 Jun 2004 19:01:09 -0400 > (EDT) > Received: from vmx1.spamcop.net ([64.74.133.248]) by firewall.mci.com > (Iplanet MTA 5.2) with ESMTP id <0HZV002J0ZYVUS[at]firewall.mci.com> for > abuse[at]iaremedy.corp.us.uu.net (ORCPT abuse[at]mci.com); Fri, > 25 Jun 2004 23:01:44 +0000 (GMT) > Received: from unknown (HELO spamcop.net) (192.168.19.201) by > vmx1.spamcop.net with SMTP; Fri, 25 Jun 2004 16:01:43 -0700 > Date: Fri, 25 Jun 2004 18:49:06 +0000 > From: 1082117679[at]reports.spamcop.net > Subject: [spamCop (63.110.88.5) id:1082117679]FW: CRS2 Public Meeting > Notice > To: abuse[at]mci.com > Message-id: <rid_1082117679[at]msgid.spamcop.net> > X-Mailer: http://www.spamcop.net/ v1.350 > Precedence: list > > [ SpamCop V1.350 ] > This message is brief for your comfort. Please use links below for details. > > Email from 63.110.88.5 / 25 Jun 2004 18:49:06 -0000 > http://www.spamcop.net/w3m?i=z1082117679ze...02729822308326f > 165z > > [ Offending message ] > Return-Path: <receptionist[at]ddtp.org> > Delivered-To: x > Received: (qmail 24107 invoked from network); 25 Jun 2004 18:58:45 > -0000 > Received: from unknown (HELO c60.cesmail.net) (192.168.1.105) > by blade6.cesmail.net with SMTP; 25 Jun 2004 18:58:45 -0000 > Received: from mailgate.cesmail.net (216.154.195.36) > by c60.cesmail.net with SMTP; 25 Jun 2004 14:58:46 -0400 > X-Ironport-AV: i="3.81R,135,1083556800"; > d="scan'217,208"; a="80493972:sNHT40729916" > Received: (qmail 17363 invoked from network); 25 Jun 2004 18:58:45 > -0000 > Received: from unknown (HELO mailgate.cesmail.net) (192.168.1.101) > by mailgate.cesmail.net with SMTP; 25 Jun 2004 18:58:45 -0000 > Received: from pop.astreet.com [209.210.225.18] > by mailgate.cesmail.net with POP3 (fetchmail-6.2.1) > for x (single-drop); Fri, 25 Jun 2004 14:58:45 -0400 (EDT) > Received: (qmail 21366 invoked from network); 25 Jun 2004 18:49:06 > -0000 > Received: from unknown (HELO ddtpx.ddtp.org) (63.110.88.5) > by shell.astreet.com with SMTP; 25 Jun 2004 18:49:06 -0000 > X-MimeOLE: Produced By Microsoft Exchange V6.0.6556.0 > content-class: urn:content-classes:message > MIME-Version: 1.0 > Content-Type: multipart/alternative; > boundary="----_=_NextPart_001_01C45AE5.B2A02DBF" > Subject: FW: CRS2 Public Meeting Notice > Date: Fri, 25 Jun 2004 11:53:26 -0700 > Message-ID: <7564________________________________C50D[at]ddtpx.ddtp.org> > X-MS-Has-Attach: > X-MS-TNEF-Correlator: > Thread-Topic: CRS2 Public Meeting Notice .................... Link to comment Share on other sites More sharing options...
Chris Parker Posted June 28, 2004 Share Posted June 28, 2004 You may want to make sure that your subscription process is secure from being abused (read unique token confirmed opt-in). You can also reply to the report and it will go to the person who filed report. Link to comment Share on other sites More sharing options...
zak@ddtp.org Posted June 28, 2004 Author Share Posted June 28, 2004 But I don't have a subscription!? The message was forwarded to me by MCI as my ISP and they claim they can't figure out who the sender is..... Zak Link to comment Share on other sites More sharing options...
Chris Parker Posted June 28, 2004 Share Posted June 28, 2004 ddtp.org,Jun 28 2004, 11:27 AM] But I don't have a subscription!? The message was forwarded to me by MCI as my ISP and they claim they can't figure out who the sender is..... Zak If they forwarded the report to you, you should be able to send an email to the REPLY-TO address in the report. (1082117679 <at> reports.spamcop.net) I do not mean a subscription to spamcop, but rather your subscription process for people to be added to your mailing list to receive the meeting notices. Link to comment Share on other sites More sharing options...
StevenUnderwood Posted June 28, 2004 Share Posted June 28, 2004 ddtp.org,Jun 28 2004, 02:27 PM] But I don't have a subscription!? The message was forwarded to me by MCI as my ISP and they claim they can't figure out who the sender is..... Zak The report may have been incorrect or not. You can request an explanation by sending to the address indicated in the From: of the report you posted. The reporter is under no requirement to answer that request, however. The subscription you were asked about is the subscription to receive the message in question. 1. Did your organization send the message in question? 2. Did your organization have express permission from the owner of all the mailboxes it was sent to? This is different than the permission of someone signing up at your website entering an (any) email address. You should be sending a single confirmation to any address entered requesting being added to a list and require a specific reaction from that mailbox owner before adding them to any list. This stops, for instance, a disgruntled employee from signing their supervisor up for 100 inappropriate lists overnight. If the person who owns the mailbox agreed to receive these messages from you (you can provive a confirmation of the opt-in from that person) spamcop deputies can take action againt the reporter. This action can be anything from a warning to a fine to cancelling of the account. Contact them at: deputies<at>spamcop.net Good luck Link to comment Share on other sites More sharing options...
Miss Betsy Posted June 28, 2004 Share Posted June 28, 2004 From: 1082117679[at]reports.spamcop.net I think that this was reported by the above. If you email that address it will go to the reporter. If you ask them nicely, they may reply with an apology. However, realize that spammers also reply and try to get email addresses so that some reporters would ignore you. I think also that what the other poster was referring to was that your mailing list should be confirmed subscription. If it were, then you could tell from the spamcop report who reported it. Non-confirmed subscriptions are open to typos and malicious signups so that your mailing may be going to someone who did not sign up. OTOH, sometimes reporters with large amounts of spam will overlook a spam. HTH, Miss Betsy Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.