🚀 go-pugleaf

Commercial spam sites are taking advantage of the temporary court ruling 
againat AOL that spam email cannot be blocked. All sysadmins should deny 
SMTP connections from the following spam sites:

1)  bbbiiizzz.com
    bulk-e-mail.com

 Therse are the same place. It should be obvious what their game is. A 
 suggestion from news.admin.net-abuse.misc is:
 <<
 If you're a sysadmin, put this in your hosts.deny:

 all : .bulk-e-mail.com : twist=echo "You come to me with a domain name
 like that?" ; sleep 3600 ; echo "You must be kidding..."

 Of course they'll never read it, but the sleep 3600 should throw them for
 a loop.
 >>

 zrs.net and greatbasin.net provide connectivity for these sites.


2)  cyberpromo.com

 These weasels have a temporary court order preventing AOL from blocking
 their spam. A trial date is set for November 12th. They are taking the
 opportunity to send multiple copies of spams to just about everywhere.


3)  interramp.com

 Well known for doing nothing about spam from their site.


4)  ttalk.com

 kev@ttalk.com runs a mailing list to which about 3 million people were
 subscribed without consent (myself included). It took four requests/threats
 and finally a complaint to the next upstream site to get me off the list.
 The next day, a third party was mailbomed by ttalk, with the headers forged
 to make it look like the 220 offending mails came from me.


5)  moneyworld.com
    stockpick.com
    chag.com
    chancellor-group.com
    natureplus.com
    helpnet.net
    selfhelpnet.com

 All run by Bob "1000 shares" Williams. They were cut off by bbnplanet 
 and MCI last month, but InterNIC still has the comains registered. I
 personally got close to 100 spams from them in the last few months.


6)  sftcell.com
    world2u.com

 A front for the infamous Jeff "Spamking" Slaton. Uses and sells the
 oft-spammed LIGHTNING BOLT spam software.


7)  shoppingplanet.com
    shopplanet.com

 After a huge spam last month, they've now gone quiet for the moment.
 Don't expect them to stay quiet for too long.


8)  america.com

 This should explain it all:

 % telnet mail.america.com smtp
 220 enterprise.america.com Smail3.1.29.1 #9 ready at Mon, 9 Sep 96 14:04 EDT
 vrfy postmaster
 250 postmaster
 expn postmaster
 250 /dev/null
 vrfy root
 250 root
 expn root
 250 /dev/null

 The unverified X-Sender is 1stlook@america.com, but the Received: part of 
 headers show that root is doing the spamming. 1stlook has also spammed
 from sundial.net, but they won't admit it.


9)  msinc.com

 Mainly Usenet spammers, but have been toying with email. They have 
 turned off all email returns which is not allowed under InterNIC's
 rules, but best block them until the domain is deregistered.


10) prime.org

 Owned by Steve "dirt false christian scum" Winter.


11) sundial.net

 They openly support spammers who use them as a mail/web drop for spams
 from throwaway accounts at other sites.


12) juno.com

 Known for both Usenet and mail spamming.

Cheers
David