Article View: ch.admin
Article #14650Re: Meine domain als Absender von SPAM missbraucht !
From: Nicolas Iselin
Date: Tue, 09 Jan 2001 10:53
Date: Tue, 09 Jan 2001 10:53
147 lines
7488 bytes
7488 bytes
"Thomas M. Wenk" wrote:
>
> Hallo Nicolas,
>
> Die Schweinepriester von uu.net (abuse@uu.net) antworten nicht. Auch von uns
> wurde eine Domain missbraucht, bereits zweimal habe ich dorthin geschrieben
> (auf Englisch), aber keine Antwort. Der Spam war �brigens zwei mal
> verschieden, stammte aber immer von uu.net.
Ich habe (nach kurzer Recherche auf www.uu.net) die Adresse abuse-mail@uu.net
gefunden und meine Beschwerde mal dorthin gemailt. Darauf habe ich schon eine
automatische Antwort erhalten:
> ** THE RETURN ADDRESSES ON THIS LETTER HAVE BEEN SET TO PREVENT MAIL **
> ** LOOPS IN THE EVENT YOU ARE RUNNING SOFTWARE WHICH AUTO-REPLIES TO **
> ** INBOUND MAIL. UUNET WILL NOT SEE ANY REPLY SENT TO THIS LETTER. **
>
> To Whom It May Concern,
>
> Your message regarding ("Open Mail Relay at 63.48.131.6") has been
> received by UUNET's Internet Abuse Investigations.
>
> To help us provide you with the best possible service, please refer to
> trouble ticket number B-TSI-001821498 somewhere in all correspondence
> (or if you should call Customer Support) regarding this matter. For your
> convenience, we have included it in the Subject line of this message,
> and will do so in any future correspondence. If you should need
> assistance in the future on a different issue, please do not re-use this
> same ticket number.
>
> UUNET Internet Abuse Investigations has received your notification of a
> massmail incident and considers this a serious matter.
>
> HINT: If you do not wish to receive the lengthy explanations below you
> may send your spam complaints to abuse-noverbose@uu.net.
>
> The mail address abuse-mail@uu.net will send your complaint to our spam
> ticket processing systems. If Newsgroup headers are detected in your
> complaint, it will be treated as a Usenet spam issue; otherwise, it will
> be treated as an unsoliticed e-mail issue. If this initial assessment
> is in error, processing of your complaint may be delayed.
>
> UUNET's spam ticket processing system attempts to "match" complaints
> against the same spammer designating the first complaint received as the
> MASTER ticket and subsequent complaints as a child ticket. Child
> tickets are automatically closed by our system and linked to the MASTER
> ticket. All further investigation and documentation are kept in the
> MASTER ticket. The MASTER ticket number can be referenced by the
> X-UUMASTER: header in this e-mail. Since our system keeps child tickets
> linked to the MASTER, there should not be a need to reference the MASTER
> ticket unless you are taking legal action against the alleged spammer.
>
> When reporting e-mail abuse, please forward (do not bounce) the
> offending message with full headers intact.
>
> Here is an example:
>
> Received: from alter.net (uu.net [10.10.10.10])
> by relay7.uu.net with ESMTP Mon, 13 Jan 1997 15:35:29 -0500 (EST)
> Message-Id: <19970401111@alter.net>
> From: nobody@alter.net
> To: somebody@uu.net
>
> <some spam message>
>
> ******************************************
> WHAT UUNET CAN DO REGARDING YOUR MASSMAIL INCIDENT:
> ******************************************
>
> If UUNET identifies that the massmail originated from a UUNET customer
> site, UUNET will take action according to the Terms of Service contract.
>
> If UUNET identifies the originator as a customer of another ISP, UUNET
> may forward details about the MASSMAIL incident to the respective ISP.
> Generally, only the ISP of the originating site can enforce policies
> concerning this MASSMAIL incident.
>
> *************************************************
> IF THE USER IS CONNECTED TO YOUR SYSTEM
> OR IS CAUSING A MAIL FLOOD SITUATION
> *************************************************
>
> Please call UUNET at 800.900.0241 (703.206.5440), option #2, then
> option #3, then option #1 to reach our Internet Abuse Investigations
> Team, 24 hours a day, seven days a week.
>
> Due to the volume of complaints we receive and the time required to
> investigate them, this may be the only response you receive regarding
> this incident.
>
> To view UUNET's Acceptable Use Policy, point your browser to:
> http://www.usa.uu.net/support/usepolicy/
>
> Sincerely,
>
> Internet Abuse Investigations (800)900-0241 options 2,3,1
>
Eine der irregeleiteten Fehlermeldungen war uebrigens noch ganz interessant.
F�r mich sieht es aus, als ob einer der hosts schon in einer Black List
drin ist, allerdings ist es leider nicht klar, welcher host:
> Your message
>
> To: heide@dsmc.or.kr
> Subject: Special Deal On Bulk Hosting
> Sent: Sun, 7 Jan 2001 19:08:43 +0900
>
> did not reach the following recipient(s):
>
> gary_fenske@prodigy.com on Tue, 9 Jan 2001 17:59:44 +0900
> ??????????????????????
> MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.0.0 Access
> denied
> 5408491@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
> ???????????????
> MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 5408491@mcimail.com
> 0002017085@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
> ???????????????
> MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 0002017085@mcimail.com
> 5408508@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
> ???????????????
> MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 5408508@mcimail.com
> 5408510@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
> ???????????????
> MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 5408510@mcimail.com
> 0002017099@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
> ???????????????
> MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 0002017099@mcimail.com
> 5408524@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
> ???????????????
> MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 5408524@mcimail.com
> blondewannabe16@yahoo.com on Tue, 9 Jan 2001 17:59:44 +0900
> ??????????????????????
> rhettdaily@rocketmail.com on Tue, 9 Jan 2001 17:59:44 +0900
> ??????????????????????
>
Nicolas
Technical Details
Message-ID:
<3A5AEDB8.8D68B24F@iselin.ch>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!bignews.mediaways.net!newsfeed.germany.net!newsfeed01.sul.t-online.de!t-online.de!newsrouter.chello.at!newsmaster-01.atnet.at!atnet.at!newsfeed-zh.ip-plus.net!news.ip-plus.net!not-for-mailReferences:
<3A5AD528.C7F6B76A@iselin.ch> <93ene1$f2q$1@news1.sunrise.ch>Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII X-Google-Thread: 11008d,d17ff935ef543860 X-Google-Attributes: gid11008d,public X-Google-ArrivalTime: 2001-01-09 02:55:13 PST Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!bignews.mediaways.net!newsfeed.germany.net!newsfeed01.sul.t-online.de!t-online.de!newsrouter.chello.at!newsmaster-01.atnet.at!atnet.at!newsfeed-zh.ip-plus.net!news.ip-plus.net!not-for-mail From: Nicolas Iselin <nicolas@iselin.ch> Newsgroups: ch.admin Subject: Re: Meine domain als Absender von SPAM missbraucht ! Date: Tue, 09 Jan 2001 11:53:45 +0100 Organization: my own private family ;-) Lines: 147 Message-ID: <3A5AEDB8.8D68B24F@iselin.ch> References: <3A5AD528.C7F6B76A@iselin.ch> <93ene1$f2q$1@news1.sunrise.ch> NNTP-Posting-Host: proxy-bs.systor.com Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit X-Trace: pollux.ip-plus.net 979037485 16023 195.65.132.230 (9 Jan 2001 10:51:25 GMT) X-Complaints-To: news@ip-plus.net NNTP-Posting-Date: 9 Jan 2001 10:51:25 GMT X-Mailer: Mozilla 4.7 [en] (WinNT; U) X-Accept-Language: en