🚀 go-pugleaf

I noticed that cybernetfive.com is not in the global nojunk.patterns
file.  They are a spamhaus who claims they cannot be shut down.  Rahul,
can you add them at level 1?  Most of their junk will probably get
caught by pattern matching rules at level 8.  But because they're in
business solely to spam, and market the XOOM spamming software, I'd say
that NO mail from them is legit.

Here's a report I posted to news.admin.net-abuse.email:

Newsgroups: news.admin.net-abuse.email
Subject: CYBERNETFIVE: "We cannot be shut down!"

CYBERNETFIVE.COM is an unrepentant spam domain claiming they cannot be
shut down.  Just see their web page http://cybernetfive.com.  Following
is a complaint sent to four abuse addresses, followed by a traceroute
and finally the actual spam.  Can anyone find a fault with my analysis
of the headers?  Are there any other parties who should be informed
about this, that might help shutting down this site?

fraud@uu.net:  The header below indicates that this e-mail spam was
injected by one of your customers representing cybernetfive.com.

abuse@sosglb.com:  Whois indicates that you are hosting the spammer's
web domain, http://cybernetfive.com.  Your web page has no acceptable
usage policy, although you do have an abuse address.

abuse@netpipe.com:  Traceroute indicates that you provide connectivity to
the spammer, cybernetfive.com.  They are in business for the express
purpose of violating your usage policy!

abuse@sprint.net:  Sprintlink.net is implicated in this spam because
netpipe.com is one of your customers, who provides connectivity to a
client whose business it is to violate your network acceptable use
policy.

Traceroute:
----------------------------------------------------
 2  sprintlink-r (144.228.74.9)  15 ms  18 ms  15 ms
 3  sl-bb2-ana-6-0-0.sprintlink.net (144.228.70.12)  19 ms  16 ms  15 ms
 4  sl-bb21-ana-1-1.sprintlink.net (144.232.1.9)  14 ms  14 ms  22 ms
 5  sl-bb21-stk-6-0.sprintlink.net (144.232.8.89)  25 ms  25 ms  25 ms
 6  sl-bb7-stk-0-0-0.sprintlink.net (144.232.4.38)  25 ms  27 ms  25 ms
 7  sl-gw8-stk-0-0.sprintlink.net (144.228.40.14)  25 ms  34 ms  26 ms
 8  * * *
 9  * 208.1.230.16 (208.1.230.16)  60 ms *
10  208.12.71.5 (208.12.71.5)  49 ms  46 ms  71 ms

DIG came up with netpipe.com for 208.1.230.16

Offending e-mail attached:
----------------------------------------------------
Received: from mx02.erols.com (mx02.erols.com [207.172.3.242])
        by mail2.erols.com (8.8.5/8.7.3/970701.001epv) with ESMTP id PAA23095;
        Sun, 3 May 1998 15:25:56 -0400 (EDT)
        (envelope-from diet@cybernetfive.com)
From: diet@cybernetfive.com
Received: from 208.255.148.94 (1Cust94.tnt16.hou3.da.uu.net [208.255.148.94])
        by mx02.erols.com (8.8.8/8.8.5/MX-980323-gjp) with SMTP id PAA25267;
        Sun, 3 May 1998 15:25:37 -0400 (EDT)
Date: Sun, 3 May 1998 15:25:37 -0400 (EDT)
Message-Id: <199805031925.PAA25267@mx02.erols.com>
To: @erols.com
Subject:  The Ultimate Diet/Energy Product This Century  -KLAL
X-Reply-To:  diet@cybernetfive.com
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit
X-UIDL: c7da318350
X-Mozilla-Status: 0001

THE ULTIMATE DIET/ENERGY PRODUCT THIS CENTURY 

[snip - no free ad for you]

                        http://www.cybernetfive.com/mall/diet

                            LOOK AND FEEL GREAT IN 1998

* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * 
You have been carefully selected to receive the previous as a person
interested in this subject based upon your previous internet postings, 
or visits to one of our affiliate web sites.  If you have received this 
message in error, please accept our apology as a responsible e-mailer, 
and <A HREF="mailto:RemoveMe@cybernet5.com?subject=Remove Me Please!">
CLICK HERE </A> and put REMOVE in the subject line. You will be
automatically 
excluded from future e-mailings. Thank you for your consideration and
help in 
making the Internet spam-free. 
* * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * * *