🚀 go-pugleaf

RetroBBS NetNews Server

Inspired by RockSolid Light RIP Retro Guy

Article View: ch.admin
Article #14650

Re: Meine domain als Absender von SPAM missbraucht !

#14650
From: Nicolas Iselin
Date: Tue, 09 Jan 2001 10:53
147 lines
7488 bytes

"Thomas M. Wenk" wrote:
> 
> Hallo Nicolas,
> 
> Die Schweinepriester von uu.net (abuse@uu.net) antworten nicht. Auch von uns
> wurde eine Domain missbraucht, bereits zweimal habe ich dorthin geschrieben
> (auf Englisch), aber keine Antwort. Der Spam war �brigens zwei mal
> verschieden, stammte aber immer von uu.net.

Ich habe (nach kurzer Recherche auf www.uu.net) die Adresse abuse-mail@uu.net 
gefunden und meine Beschwerde mal dorthin gemailt. Darauf habe ich schon eine
automatische Antwort erhalten:

>  ** THE RETURN ADDRESSES ON THIS LETTER HAVE BEEN SET TO PREVENT MAIL **
>  ** LOOPS IN THE EVENT YOU ARE RUNNING SOFTWARE WHICH AUTO-REPLIES TO **
>  ** INBOUND MAIL.  UUNET WILL NOT SEE ANY REPLY SENT TO THIS LETTER.  **
> 
> To Whom It May Concern,
> 
> Your message regarding ("Open Mail Relay at 63.48.131.6") has been
> received by UUNET's Internet Abuse Investigations.
> 
> To help us provide you with the best possible service, please refer to
> trouble ticket number B-TSI-001821498 somewhere in all correspondence
> (or if you should call Customer Support) regarding this matter. For your
> convenience, we have included it in the Subject line of this message,
> and will do so in any future correspondence. If you should need
> assistance in the future on a different issue, please do not re-use this
> same ticket number.
> 
> UUNET Internet Abuse Investigations has received your notification of a
> massmail incident and considers this a serious matter.
> 
> HINT: If you do not wish to receive the lengthy explanations below you
> may send your spam complaints to abuse-noverbose@uu.net.
> 
> The mail address abuse-mail@uu.net will send your complaint to our spam
> ticket processing systems.  If Newsgroup headers are detected in your
> complaint, it will be treated as a Usenet spam issue; otherwise, it will
> be treated as an unsoliticed e-mail issue.  If this initial assessment
> is in error, processing of your complaint may be delayed.
> 
> UUNET's spam ticket processing system attempts to "match" complaints
> against the same spammer designating the first complaint received as the
> MASTER ticket and subsequent complaints as a child ticket.  Child
> tickets are automatically closed by our system and linked to the MASTER
> ticket.  All further investigation and documentation are kept in the
> MASTER ticket.  The MASTER ticket number can be referenced by the
> X-UUMASTER: header in this e-mail.  Since our system keeps child tickets
> linked to the MASTER, there should not be a need to reference the MASTER
> ticket unless you are taking legal action against the alleged spammer.
> 
> When reporting e-mail abuse, please forward (do not bounce) the
> offending message with full headers intact.
> 
> Here is an example:
> 
>  Received: from alter.net (uu.net [10.10.10.10])
>           by relay7.uu.net with ESMTP Mon, 13 Jan 1997 15:35:29 -0500 (EST)
>  Message-Id: <19970401111@alter.net>
>  From: nobody@alter.net
>  To: somebody@uu.net
> 
>         <some spam message>
> 
>  ******************************************
>  WHAT UUNET CAN DO REGARDING YOUR MASSMAIL INCIDENT:
>  ******************************************
> 
> If UUNET identifies that the massmail originated from a UUNET customer
> site, UUNET will take action according to the Terms of Service contract.
> 
> If UUNET identifies the originator as a customer of another ISP, UUNET
> may forward details about the MASSMAIL incident to the respective ISP.
> Generally, only the ISP of the originating site can enforce policies
> concerning this MASSMAIL incident.
> 
>  *************************************************
>  IF THE USER IS CONNECTED TO YOUR SYSTEM
>  OR IS CAUSING A MAIL FLOOD SITUATION
>  *************************************************
>  
> Please call UUNET at 800.900.0241 (703.206.5440), option #2, then
> option #3, then option #1 to reach our Internet Abuse Investigations
> Team, 24 hours a day, seven days a week.
> 
> Due to the volume of complaints we receive and the time required to
> investigate them, this may be the only response you receive regarding
> this incident.
> 
> To view UUNET's Acceptable Use Policy, point your browser to:
> http://www.usa.uu.net/support/usepolicy/
> 
> Sincerely,
> 
> Internet Abuse Investigations (800)900-0241 options 2,3,1
> 

Eine der irregeleiteten Fehlermeldungen war uebrigens noch ganz interessant. 
F�r mich sieht es aus, als ob einer der hosts schon in einer Black List 
drin ist, allerdings ist es leider nicht klar, welcher host:

> Your message
> 
>   To:      heide@dsmc.or.kr
>   Subject: Special Deal On Bulk Hosting 
>   Sent:    Sun, 7 Jan 2001 19:08:43 +0900
> 
> did not reach the following recipient(s):
> 
> gary_fenske@prodigy.com on Tue, 9 Jan 2001 17:59:44 +0900
>     ??????????????????????
>     MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.0.0 Access
> denied
> 5408491@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
>     ???????????????
>     MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 5408491@mcimail.com
> 0002017085@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
>     ???????????????
>     MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 0002017085@mcimail.com
> 5408508@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
>     ???????????????
>     MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 5408508@mcimail.com
> 5408510@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
>     ???????????????
>     MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 5408510@mcimail.com
> 0002017099@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
>     ???????????????
>     MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 0002017099@mcimail.com
> 5408524@mcimail.com on Tue, 9 Jan 2001 17:59:44 +0900
>     ???????????????
>     MSEXCH:IMS:TechnoSystem:HeadOffice:NO0 3550 (000B099C) 550 5.7.1
> Open-Relay-Reject: 5408524@mcimail.com
> blondewannabe16@yahoo.com on Tue, 9 Jan 2001 17:59:44 +0900
>     ??????????????????????
> rhettdaily@rocketmail.com on Tue, 9 Jan 2001 17:59:44 +0900
>     ??????????????????????
> 

Nicolas
Technical Details
Message-ID: <3A5AEDB8.8D68B24F@iselin.ch>
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!bignews.mediaways.net!newsfeed.germany.net!newsfeed01.sul.t-online.de!t-online.de!newsrouter.chello.at!newsmaster-01.atnet.at!atnet.at!newsfeed-zh.ip-plus.net!news.ip-plus.net!not-for-mail
References: <3A5AD528.C7F6B76A@iselin.ch> <93ene1$f2q$1@news1.sunrise.ch>

Show Full Headers
Complete Article Headers
X-Google-Language: GERMAN,ASCII
X-Google-Thread: 11008d,d17ff935ef543860
X-Google-Attributes: gid11008d,public
X-Google-ArrivalTime: 2001-01-09 02:55:13 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!supernews.com!bignews.mediaways.net!newsfeed.germany.net!newsfeed01.sul.t-online.de!t-online.de!newsrouter.chello.at!newsmaster-01.atnet.at!atnet.at!newsfeed-zh.ip-plus.net!news.ip-plus.net!not-for-mail
From: Nicolas Iselin <nicolas@iselin.ch>
Newsgroups: ch.admin
Subject: Re: Meine domain als Absender von SPAM missbraucht !
Date: Tue, 09 Jan 2001 11:53:45 +0100
Organization: my own private family ;-)
Lines: 147
Message-ID: <3A5AEDB8.8D68B24F@iselin.ch>
References: <3A5AD528.C7F6B76A@iselin.ch> <93ene1$f2q$1@news1.sunrise.ch>
NNTP-Posting-Host: proxy-bs.systor.com
Mime-Version: 1.0
Content-Type: text/plain; charset=iso-8859-1
Content-Transfer-Encoding: 8bit
X-Trace: pollux.ip-plus.net 979037485 16023 195.65.132.230 (9 Jan 2001 10:51:25 GMT)
X-Complaints-To: news@ip-plus.net
NNTP-Posting-Date: 9 Jan 2001 10:51:25 GMT
X-Mailer: Mozilla 4.7 [en] (WinNT; U)
X-Accept-Language: en