cheryl Posted April 9, 2004 Share Posted April 9, 2004 please help ASAP spamcop blacklisted my ISP. my ISP has now shut off my account. until i get spamcop to UNBLACKLIST TDL (my isp) is there a phone number for spamcop?? can someone email me at cheryl[at]spamcop.net? Link to comment Share on other sites More sharing options...
Wazoo Posted April 9, 2004 Share Posted April 9, 2004 No one here can offer much help without some more specific data. SpamCop doesn't block Domains, ISP's, etc .. e-mail sources are the tagets in the SpamCopDNSbl ... From the sounds of your version of your ISP's actions, it could be seen as a suggestion that you've been reporting yourself/your own ISP? Perhaps a nice note to Deputies at admin.spamcop.net might help to answer somethings, but they will also need much more explicit data. Is this the place you're talking about? If so, this includes data needed for someone else to help. Registrant: The Diamond Lane (TDL-DOM) 2415 Radley Court #2 Hayward, CA 94545 US Domain Name: TDL.COM Administrative Contact: Nicolaus, Mary (MAN2) maryann[at]tdl.com The Diamond Lane 2415 Radley Court #1 Hayward, CA 94545 US (510) 293-0633 fax: 999 999 9999 Technical Contact: Nicolaus, Don M. (DN) don[at]TDL.COM 2415 RADLEY CT STE 1 HAYWARD, CA 94545-1148 US (510)293-0633 fax: (510)782-4738 Record expires on 06-Dec-2007. Record created on 05-Dec-1994. Database last updated on 9-Apr-2004 12:34:58 EDT. Domain servers in listed order: NS.TDL.COM 206.180.224.2 NS2.HE.NET 216.218.131.2 Trace www.tdl.com (206.180.225.34) ... 64.200.150.174 RTT: 91ms TTL:144 (sntcca1wcx1-hurricane-pos.wcg.net bogus rDNS: host not found [authoritative]) 64.71.129.86 RTT: 91ms TTL:144 (pos1-3.gsr12416.fmt.he.net ok) 64.71.128.181 RTT: 97ms TTL:144 (pos4-0.gsr12012.sjc.he.net ok) 216.218.223.186 RTT: 94ms TTL:144 (f0-0-7.br1.sjc.he.net ok) 216.218.222.110 RTT: 96ms TTL:144 (No rDNS) 206.180.225.34 RTT: 97ms TTL:239 (www.tdl.com ok) Recursive queries supported by this server Query for 34.225.180.206.in-addr.arpa type=255 class=1 34.225.180.206.in-addr.arpa PTR (Pointer) www.tdl.com 225.180.206.in-addr.arpa NS (Nameserver) ns.tdl.com 225.180.206.in-addr.arpa NS (Nameserver) ns2.he.net ns.tdl.com A (Address) 206.180.224.2 ns2.he.net A (Address) 216.218.131.2 Link to comment Share on other sites More sharing options...
cheryl Posted April 9, 2004 Author Share Posted April 9, 2004 YES that is the TDL i was talking about. he called me today and said "because you are forwarding your mail from www.sbdwebdesign.com to spamcop.net and you are getting alot of spam, they have put TDL into a black hole. and until you get us out of that black hole, we are taking your account off the internet" i asked him what on earth I did wrong??! he said that because my email was being forwarded to spamcop, that it looked like the spam was actually coming from TDL's machine. many many spammers have used my email address as spam :-( im not doing ANYTHING how can i send a message to admin.spamcop.net? he forwarded me this message. Date: Fri, 9 Apr 2004 09:44:56 -0700 (PDT) From: "root" <root[at]tdl.com> Add to Address Book To: itsmecheryl[at]yahoo.com Subject: [spamCop (206.180.227.98) id:873993194]Oh V[at]iagra! (fwd) ---------- Forwarded message ---------- Date: 9 Apr 2004 00:23:01 -0000 From: Cheryl <873993194[at]reports.spamcop.net> To: abuse[at]tdl.com Subject: [spamCop (206.180.227.98) id:873993194][iso-8859-1] Oh V[at]iagra! [ SpamCop V1.3.4 ] This message is brief for your comfort. Please use links below for details. Email from 206.180.227.98 / 9 Apr 2004 00:23:01 -0000 http://www.spamcop.net/w3m?i=z873993194ze8...92c9d056a9c13ez [ Offending message ] Return-Path: <staciebrewstergn[at]tiscali.co.uk> Delivered-To: x Received: (qmail 28083 invoked from network); 9 Apr 2004 00:23:01 -0000 Received: from unknown (192.168.1.101) by blade6.cesmail.net with QMQP; 9 Apr 2004 00:23:01 -0000 Received: from shell3.tdl.com (206.180.227.98) by mailgate.cesmail.net with SMTP; 9 Apr 2004 00:23:01 -0000 Received: from julian.uwo.ca (m185.net195-132-194.noos.fr [195.132.194.185]) by shell3.tdl.com (8.12.10/8.12.10) with ESMTP id i390MrnU003011 for <x>; Thu, 8 Apr 2004 17:22:56 -0700 Message-ID: <4075_________1ED5[at]tiscali.co.uk> MIME-Version: 1.0 Date: Fri, 09 Apr 2004 00:18:16 +0000 Subject: =?iso-8859-1?b?T2ggVkBpYWdyYSE=?= User-Agent: Mozilla/5.001 (windows; U; NT4.0; en-us) Gecko/25250101 To: x From: "Stacie Brewster" <staciebrewstergn[at]tiscali.co.uk> Content-Type: text/html Content-Transfer-Encoding: 8bit X-spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on blade6 X-spam-Level: **** X-spam-Status: hits=4.7 tests=HTML_70_80,HTML_COMMENT_RATIO, HTML_IMAGE_ONLY_02,HTML_MESSAGE,LOCAL_DRUGS_MALEDYSFUNCTION, LOCAL_DRUGS_MALEDYSFUNCTION_OBFU,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY version=2.63 X-SpamCop-Checked: 192.168.1.101 206.180.227.98 195.132.194.185 X-SpamCop-Disposition: Blocked bl.spamcop.net <html><body> <center><!--bdr0fp37c89--><a href="http://www.kjkopu.com/v/"><!--sriq1onu6HJZBU8P4--><img src="http://www.mjhgd.com/forty.gif" height="200" width="400" border=""></a></center> </font> </html></body> Link to comment Share on other sites More sharing options...
Wazoo Posted April 9, 2004 Share Posted April 9, 2004 First immediate situation in the spam parse is: Possible forgery. Supposed receiving system not associated with any of your mailhosts Will not trust anything beyond this header 206.180.227.98 not listed in dnsbl.njabl.org 206.180.227.98 not listed in cbl.abuseat.org 206.180.227.98 not listed in dnsbl.sorbs.net Forgery detected, or mailhost configuration incomplete. Please verify source IP identified. So did you ever get involved with the mail-host thing? Did you follow through to completion, to include doing some manual parsing to insure that things were resolved correctly? I copied your spam, ran it through, and came up with the following target, vice your TDL.com address; Re: 195.132.194.185 (Administrator of network where email originates) To: abuse[at]noos.fr (Notes) To: abuse[at]noos.net (Notes) spammers have used my email address as spam As said before, only IP addresses are at issue, not "e-mail addresses" how can i send a message to admin.spamcop.net Again .. Deputies at admin.spamcop.net Link to comment Share on other sites More sharing options...
Wazoo Posted April 9, 2004 Share Posted April 9, 2004 the next issue may be due to something called "recently discovered sending mail" as the listing doesn't currently show any "recent mail activity" ?? 206.180.227.98 listed in bl.spamcop.net (127.0.0.2) Since SpamCop started counting, this system has been reported less than 10 times by less than 10 users. In the past 74.0 days, it has been listed 2 times for a total of 26 hours In the past week, this system has: Been reported as a source of spam less than 10 times And this again, is possibly something the Deputies can take a look at, verify, possibly handle. Link to comment Share on other sites More sharing options...
Jeff G. Posted April 9, 2004 Share Posted April 9, 2004 Well, according to the parse here: 1: Received: from shell3.tdl.com (206.180.227.98) by mailgate.cesmail.net with SMTP; 9 Apr 2004 00:23:01 -0000 SpamCop received mail from 206.180.227.98 Hostname verified: shell3.tdl.com 2: Received: from julian.uwo.ca (m185.net195-132-194.noos.fr [195.132.194.185]) by shell3.tdl.com (8.12.10/8.12.10) with ESMTP id i390MrnU003011 for <x>; Thu, 8 Apr 2004 17:22:56 -0700 Possible forgery. Supposed receiving system not associated with any of your mailhosts Will not trust anything beyond this header 206.180.227.98 not listed in dnsbl.njabl.org 206.180.227.98 not listed in cbl.abuseat.org 206.180.227.98 not listed in dnsbl.sorbs.net Forgery detected, or mailhost configuration incomplete. Please verify source IP identified. Note that this occurs even for accounts not configured to use Mailhost. Does this mean that use of Mailhost is now mandatory? Link to comment Share on other sites More sharing options...
Wazoo Posted April 9, 2004 Share Posted April 9, 2004 Note that this occurs even for accounts not configured to use Mailhost. Does this mean that use of Mailhost is now mandatory? No idea, although the recent content change on the "front reporting page" sure seems to hint that it's close. However, I ran it through to a much happier conclusion using a free reporting account ... Dropped a note to Ellen to check on Cheryl's behalf .... Link to comment Share on other sites More sharing options...
cheryl Posted April 9, 2004 Author Share Posted April 9, 2004 wow, im reading what you are writing and its SO OVER MY HEAD :-( all I know is that I hired spamcop to filter the crap out. and now it looks like someone thinks I am sending the crap. and someone thinks TDL hasn't controled my crap. LOL thank you for emailing Ellen. Im really trying to understand what you are talking about. but its all very over me. Im no techie by any means. Link to comment Share on other sites More sharing options...
cheryl Posted April 9, 2004 Author Share Posted April 9, 2004 PS. I have only used "quick report and immedialty trash" because I dont understand all the other stuff. I dont report everything. just once in a while. So maybe I was reporting 'myself' on accident? because people were using my IP address?? how would they do that? maybe it looked like it was from my IP address because i was having all the mail from www.sbdwebdesign.com to spamcop? Im sorry Im so DENSE lol Link to comment Share on other sites More sharing options...
Wazoo Posted April 9, 2004 Share Posted April 9, 2004 I have only used "quick report and immedialty trash" Unfirtunately, that is an option that has been recommended against by other users many times in the past <g> So maybe I was reporting 'myself' on accident? and this is exactly why When it works, it works great. When something goes wrong, well <g> In this case, especially with the mail-hosting thing possibly involved, you'd normally be referred to the SpamCop owner's posted link asking for volunteers, issues, and problem reports at http://forum.spamcop.net/forums/index.php?showtopic=723 .... but if the dialog thus far has you confused ... but you might want to try reading through as much of that as you can stand anyway ... it might explain the situation you're in and why the SpamCop parser stopped where it did on the spam offered as your sample. Noting that the mail-host thing is an attempt to solve the issue you may have gotten yourself wrapped up in (and a number of other issues, but trying to keep the confusion level down <g>) Link to comment Share on other sites More sharing options...
cheryl Posted April 9, 2004 Author Share Posted April 9, 2004 you've been very helpful (I think <g>) and Im trying to follow. ok you've convinced me to not report spam that way anymore. (heck if i could just get out from under this mess, I'd do the HULA) and i like spamcop. I read that webpage you gave but um. I feel like I am walking in on a converstaion that I have no idea what it means. right now all I care abotu is that TDL gets off the blacklist and they turn my website back on. after that, im going to read around this place like crazy trying to figure this all out. and be a more responsible reporter. ive tried sending messages to spamcop and Deputies so... do you think that will help my immediate urgent problem? Link to comment Share on other sites More sharing options...
Wazoo Posted April 9, 2004 Share Posted April 9, 2004 you've been very helpful (I think <g>) Of course, I've got my fingers crossed that you aren't actually my dearly beloved of 24+ years of marriage followed by 8+ years of divorce <g> ... so if you noticed some of the hesitation in my typing <g> I'd do the HULA huh-oh ... a possible refernce to one of my/our tours in Hawaii? feel like I am walking in on a converstaion that I have no idea what it means Hi Cheryl, welcome to the club <g> sending messages to spamcop and Deputies so... do you think that will help I can only say that they will look at the "evidence" and go from there. Of course, I will point out that Ellen for instance asks that some specific issues be brought to her attenton (via the Deputies address) but then also cautions that "they" are way behind on their e-mail ... and now you've mentioned multiple e-mails you sent, there's the one I sent ... ummmm, maybe hope "we" haven't ticked anyone off yet by asking them to research the same item over and over <g> On the other hand, she's never responded directly to me, just pops in with whatever her answer/suggestions are and moves on ... So have fun reading while waiting <g> Link to comment Share on other sites More sharing options...
cheryl Posted April 9, 2004 Author Share Posted April 9, 2004 oh no! you're on to me! he he how could someone divorce someone as nice as you? doesn't make sense to me! U know, im way too impatient for this tech stuff. doesn't help to have my ISP making threats and breathing down my neck. which wouldn't be so bad if thier breath wasn't so bad Link to comment Share on other sites More sharing options...
StevenUnderwood Posted April 9, 2004 Share Posted April 9, 2004 As of 3:17 PM the web site is posting: 206.180.227.98 not listed in bl.spamcop.net Perhaps if you call your ISP and see if things are improving. It can take a couple of hours for the updates to propagate. Link to comment Share on other sites More sharing options...
Wazoo Posted April 9, 2004 Share Posted April 9, 2004 On the other hand, she's never responded directly to me, just pops in with whatever her answer/suggestions are and moves on ... See <g> .... of course, there's that bit of assumption that Ellen did work her magic there <g> It might be that there has been enough "traffic" measured from there to automatically drop this IP off the list (just not enough detail on the BL page for "us" to guess ... Sorry, should have done this before posting .. send your ISP to http://www.spamcop.net/w3m?action=checkblo...=206.180.227.98 to see the current status. Link to comment Share on other sites More sharing options...
cheryl Posted April 9, 2004 Author Share Posted April 9, 2004 Ellen the magic maker, and her faithful assistant, wazoo :-) thank you to steven too! thank you all for your help! wazoo, i think i sent a personal message but im not sure if I did it right LOL either way my email is cheryl[at]spamcop Link to comment Share on other sites More sharing options...
Recommended Posts
Archived
This topic is now archived and is closed to further replies.