Message from discussion
joe-job on Steve Linford/Spamcop
Path: archiver1.google.com!news1.google.com!newsfeed.stanford.edu!logbridge.uoregon.edu!gestalt.direcpc.com!telocity-west!DIRECTV!sn-xit-03!sn-xit-06!sn-post-01!supernews.com!news.supernews.com!linford
From: Steve Linford <linf...@spamhaus.org>
Newsgroups: news.admin.net-abuse.email
Subject: Re: joe-job on Steve Linford/Spamcop
Date: Mon, 17 Feb 2003 21:39:04 +0000
Organization: The Spamhaus Project
Message-ID: <linford-C70DDD.21390417022003@news.supernews.com>
References: <woodpulp-A46699.15592817022003@news.bellatlantic.net>
User-Agent: MT-NewsWatcher/3.3b1 (PPC Mac OS X)
X-Complaints-To: abuse@supernews.com
Lines: 40
In article <woodpulp-A46699.15592817022...@news.bellatlantic.net>,
Woodpulp <woodpulp@see_sig_for_mail.invalid> wrote:
> Someone's apparently joe-jobbing Spamcop and/or Steve Linford. The
> following message, purportedly from 'linford at spamhaus dot org' and
> containing lots of references to spamcop.net was just sent to me.
This is one that's been going for some time. It's Brendan Battles and
Jon Thau (Cyberworks), both of whom we're working up nice suprises for.
But the spamhaus.org mail server has fabulous filters and these two
spammers have standard spammer brains, IQs slightly above Neanderthal,
so every joe-job they try is littered with common elements that are
child's play to bounce on in SMTP. So far this joe-job has been going I
think for a couple of weeks but I only see examples people post to NANAE
or SPAM-L. Just for one example, our mail server doesn't HELO or rDNS as
"spamhaus.org" so the server content filters bounce anything containing
the string "Received: from spamhaus.org" (which is why you can't even
forward one of these spams to me, as the server would bounce your mail).
So simple, but far beyond the brains of spammers.
I imagine some newbie users who receive these joe-jobs could think they
come from us and might try to reply or complain, but if they do our
server simply bounces them. Anyone who looks at www.spamhaus.org sees we
have a permanent link for joe-jobs (called "Received spam 'from'
Spamhaus.org?") which explains what they got was simply from spammers.
We get a lot of these as we create a lot of pissed-off spammers with
flattened balls. All they ever do is intruduce more people to Spamhaus
(or SpamCop). The type of people who would complain on getting one of
these are the same type of people SpamCop recruits so these hair-brained
spammers simply recruit yet more people who'll lart them better
tomorrow. I don't know how much Brendan Battles and Jon Thau invested in
getting their lame joe-job going, but obviously both will have an even
worse time trying to keep any future business on the Internet :)
--
Steve Linford
The Spamhaus Project
http://www.spamhaus.org
|
