|
| ||||
 |
|
Home | Reviews | Tools | Forums | FAQs | Find Service | ISP News | Maps | About |
|
how-to block ads |
Quick Answers - Spam Dos and DontsSpam - The Basics
Spam Legality
Spam Prevention
Spam Management
Miscellaneous
Advanced Topics
1 Quick Answers - Spam Dos and Donts...Be skeptical about any and all information in unsolicited e-mail. ...Report the spammer to the proper authorities whenever possible. ...Use multiple e-mail addresses to keep spam from getting into your real inbox. ...Munge your e-mail address when posting it in public. (See Spam Prevention for more info.)  got feedback?by Sarah ...Respond to any unsolicited e-mails. ...Propagate chain letters and hoaxes ...Click to REMOVE ME! Ever! ...Give out your e-mail address unless you have to. ...Post your e-mail address publicly. ...Choose an easy-to-guess e-mail address. got feedback?by Sarah 2 Spam - The Basics
Spam is widely recognized as a serious problem facing ISPs and internet users, since it eats up bandwidth, defrauds people, and fills up people's inboxes with junk. It has the potential to become much more of a problem than junk snail mail or telemarketing (phone spam) because it is so unbelievably cheap to send spam e-mail rather than calling you or mailing you a piece of paper. Some people literally are forced to throw away their e-mail addresses because they receive so much unwanted spam. If e-mail servers are continuously overwhelmed with spam, it could eventually become a threat to the very existence of e-mail as a communications medium.
got feedback?by Sarah got feedback?stop sending money to the scammers \all spam mail\ - http://isc60.blogspot.com/ 2011-04-23 23:47:57 (peterpl by Sarah got feedback?by Sarah An opt-out list is one where you are signed up for the list without your knowledge and you are responsible for removing yourself. Opt-out is usually a sign of bad intentions! Many people feel that any legislation which legalizes opt-out marketing is (almost) worthless.
got feedback?by Sarah Using the 'remove me' link (or e-mail) is never, repeat NEVER, a good idea, unless you requested to be on the list in the first place (in which case it is not really spam). Most of the time, a remove request will just not work. However, when it does, it's even worse! It lets them know that you are reading and responding to their e-mail - that is, you are a sucker for spam. (Don't feel bad, just about everyone has done it at some point in their lives.) If they find out that you clicked 'remove me', you will probably be deluged with spam pretty soon.
got feedback?by Sarah Bouncing spam is tricky; if you don't do it right, the spammer may realize that you faked it, and that your address is a legitimate one. This may get you more spam. Most of the time, the spammer will not include a legitimate address to bounce a message to anyway, so it's just a waste of time. The best thing to do is report the spam to the proper authorities. got feedback?who are the proper authorities????? 2011-01-20 17:41:31 by Sarah This can be tricky as spammers usually try to hide where they are spamming from. Some sites that will help you with the details of spam reporting include Spamcop and UXN Spam Combat. These sites make it easy even for a relative newbie.
got feedback?by Sarah got feedback?by newview Spamcop - They will help you report spam and educate you on fighting the good fight. Both paid and free services. MyRealBox - Providing spam-free e-mail. MailWasher - Allows you to bounce, delete, filter, preview, blacklist, etc. your e-mail messages. Free! CAUCE - An organization dedicated to fighting spam. Spamfaq.net - A very extensive spam FAQ with lots of good links.
got feedback?by Sarah »www.cdt.org/speech/spam/030319sp···rt.shtml Their analysis indicated that e-mail addresses posted on Web sites or in newsgroups attract the most spam. got feedback?Dead link. 2009-12-14 13:28:26 (legendNYC Dead link, please fix. 2013-02-27 10:20:09 by newview 3 Spam Legality
New anti-spam legislation is currently in the works in the U.S. Aside from the legality of it, it is against the Terms of Service of almost every ISP to use their servers or bandwidth to spam. This means that when you complain to a spammer's ISP, they may lose their Internet access (a good thing!). got feedback?by Sarah Bill 1618 is a popular thing for spammers to mention when they are trying to discourage you from reporting them to their ISP or web host. Don't let it stop you. got feedback?by Sarah None of those excuses legalize what they are doing. You should report them just like any other spam, only more so because they are trying to trick you. got feedback?by Sarah 2. If the spam you receive asks for money through the U.S. Mail, the United States Postal Inspection Service, forward a copy at fraud@usps.gov. 3. To report e-mails promoting medical products such as human drugs, animal drugs, medical devices, biological products, foods, dietary supplements or cosmetics, that you think might be illegal, forward the email to the Food and Drug Administration at webcomplaints@ora.fda.gov. 4. Suspected fraudulent nonprescription drug spam can be forwarded to the Food and Drug Administration at otcfraud@cder.fda.gov. 5. If spam you receive touts a stock opportunity forward it to enforcement@sec.gov. 6. Nigerian "419" scams can be forwarded to 419.fcd@usss.treas.gov.
got feedback?the email for the Federal Trade Commision is now spam@uce.gov please update this page 2010-03-12 15:27:09 THIS EMAIL IS NON FUNCTIONAL - PLEASE POST ANY OTHER IF YOU FIND ONE.
Nigerian "419" scams can be forwarded to 419.fcd@usss.treas.gov
2009-07-24 19:31:25 I ordered food from a U.K. website. Two days later I received an email asking me to update my information. Their website said it was a scam. A week later I received a bogus charge from Amsterdam on my credit card. They had no email number, website, phone number or products. The website I ordered from was RED23. 2009-12-16 06:13:39 uce@ftc.gov is an outdated email reporting the current one is Spam@uce.gov 2013-02-27 13:07:47 by newview And don't forget who is working for your interests and who isn't when it's time to vote! got feedback?by Sarah The CAN-SPAM Library got feedback?by newview 4 Spam Prevention
Here are some tips to prevent your e-mail being spammed: Don't post a real e-mail address in a public place like Usenet or the Internet. If you have to have a legitimate address, use tricks to get around the automatic e-mail harvesters used by spammers. For example, post your e-mail address on a web site in the form of a JPEG image instead of text. Or put it in some format that is difficult to automatically decipher, like this: myemail -( at )- domain )-dot-( com. Or you can 'munge' the address, by putting extra text in like myemailSPAMSTINKS@REMOVETHIS.domain.com. Don't do anything too obvious (like myemail@NOSPAM.domain.com) or the harvesters will be able to decipher it. If you DO get spammed, never, ever reply to it or click any links in it. This will get you more spam. Don't pick an address that is too easy to guess. If your e-mail is joe@somepopularISP.com, you can bet you will be first on every spammer's list. This goes especially for the bigger ISPs and free e-mail services that would have lots of e-mail addresses for spammers to mail to. Don't give your real e-mail address to anyone who doesn't really need it. If you're buying something online, or signing up for a free service somewhere, keep a free e-mail address that you use for this purpose only. That way if you get spammed it won't bother you at your real e-mail address, and you will still have the receipt if you need to go find it. When this spare address gets too full of spam, you can throw it away and start a new one since you don't have anyone legitimately contacting you with that address. Make sure you are using a reputable ISP that has a good privacy policy. In rare circumstances, ISPs will sell their e-mail lists.
got feedback? servers are now assigning email addresses. I tried to get Cox.net to change my address as I found out three other people have had this address. Cox would not change the address. I am being spammed to death and tried to change servers but there is not other service in this area. Most of the spam does not even contain unsubscribe area. I use Outlook Express and have tried all they offer to block it but it still keeps coming, Any suggestions. I live in Mesa, AZ 2008-12-11 16:34:56 by Sarah One way to combat this is to use one of the Privacy.net Stealth Email Addresses they have created specifically to reply back if the address is spammed with:
The addresses you can use are: me@privacy.net me0@privacy.net me1@privacy.net me2@privacy.net me3@privacy.net me4@privacy.net me5@privacy.net me6@privacy.net me7@privacy.net me8@privacy.net me9@privacy.net Of course, if the web site you are registering at requires you to reply to a confirmation email before you are truly registered, then this will not work, since you'll never receive the email. But . . . since this type of registration, known as "confirmed opt-in" is only practiced by ethical web sites and mailing lists, the question of trust is answered by the fact that they use "confirmed opt-in" registration.
got feedback?by newview 5 Spam Management
You can either set up your own filters - most common e-mail programs support this - or use a third-party program like MailWasher. got feedback?by Sarah got feedback?by newview  So how do you prevent it? First, we should note that the ability to receive this spam may indicate a more serious problem: your computer's NetBIOS ports are open. Please see our Security Forum for more info on NetBIOS. The easiest solution is to install a firewall such as ZoneAlarm. Or if you are using Windows XP, you could enable the built in firewall. If you'd like to completely disable the Messenger Service (please note this may disable some important alerts from firewalls or other programs designed to use the Messenger Service), follow these steps: (courtesy of guyver01  )Click on the "Start" button. Right-Click on "My Computer" Choose "Manage" from the menu that appears. In the left column Highlight "Services and Applications" In the right column Double-Click on "Services". Double-Click on the service called "Messenger". Click the "Stop" button to stop the service. Change the "Startup Type:" to "Manual" Click "Apply". Click "OK". Close "Computer Management" *If your computer is connected to a corporate network, please consult your System Administrator before making any changes! More resources: Microsoft Knowledge Base Article - 330904 The PopUP Spam thread here at BBR The myNetWatchMan Alert Full instructions for stopping pop-ups.
got feedback?by pike 6 Miscellaneous
This one is old, real old. It used to be propagated through snail mail! The scam is that you receive a message from some person in a foreign country, often Nigeria, and he needs your help. He is (through some ethically dubious method) trying to get some huge amount of money, tens of millions of dollars, away from a company/government and he needs a contact in your country with a legitimate bank account so he can wire the funds out of his country. He says he will let you keep a (pretty large) cut of the money if you help. And all he needs is your name, phone number, bank account number, social security number, etc. etc. Needless to say, this is a BAD IDEA! Don't do it! This one hooks a lot of people and the scammers are allegedly netting millions of dollars a year from it. Whew. Send this one to uce@ftc.gov in addition to reporting it in the usual ways. Viral marketing/pyramid scheme This includes the MMF (Make Money Fast) type schemes. You send $5 to the people on the list, then put your name on it, etc. You will make thousands. Yeah, right. These do not work after the first couple of people on the list, and guess what, there are already a bunch of people on the list so you're too late. Don't fall for these - they are illegal almost everywhere. The best part is, the people usually include the names and addresses of several people taking part in the scam so you can actually report them to the police (...not that they will get arrested, but you never know). Hoaxes and chain letters These take many forms. Bogus virus warnings, or maybe they inform you that Bill Gates will give you money if you forward it to everyone you know. These messages are not exactly spam, but they have the same effect of clogging your inbox and mail servers in general. I don't think I have EVER received one of these forwards that was actually true. Nothing bad will happen to you if you don't send it to everyone you know; nothing good will happen if you do! Please just delete it and tell your friends to stop sending them. For a list of common e-mail virus hoaxes, check out Mcafee.com. For other hoaxes, check out sites like TruthOrFiction.com before forwarding it to anyone.
got feedback?by Sarah Spammers use these to send mass amounts of e-mails because they are harder to trace, and since they are not a customer of the people who run the server, they can't be punished. Some people who run servers don't realize that they are doing anything wrong, and if you politely inform them of this fact, they will close the relays. If they are using MS Exchange 5.5, point them here and if they are using 6.0, point them here for instructions on how to fix the problem.
got feedback?by Sarah Many viruses will send e-mails out with fake From: addresses, so it is hard to know just who is infected. The person almost never realizes that they are infected with a virus. Usually if you are getting it, it means you are in their address book. If you can figure out who it is really from, let them know they are infected - but don't be rude about it, they are probably just clueless. They aren't sending you viruses on purpose to be mean! You might try sending them a link to a page about the virus and how to clean it up. The exception to this rule is if you really pissed someone off and they decided to send you a bunch of viruses. But that isn't too common.
got feedback?by Sarah You might not see them at times as they can be 1x1, and transparent. Other times they appear as any ordinary image, but the one thing you don't see all the time is the string they send when requesting the image from the server. It could be some random number assigned to your address on the server, or it could be obvious with your e-mail address in the request. These are easily blocked by a firewall that allows you to control the ports per application. Others might not allow this, and only allow/block/drop the packets from that application so you would have to allow the web bug requests along with the request to send/receive your e-mail. The simplest way is to allow your pop3(tcp 110), smtp(tcp 25), and imap(tcp 143) ports if necessary. Most of the time web bugs use port tcp 80, but this port can vary so securing which ports the programs use is the easiest route. What can complicate this is software proxies, here you just make sure that your mail application is not allowed to run through your software proxy if possible. Many programs allow you to turn off this feature. In Outlook Express you can force your messages to appear in text in your options, and that will take care of web bugs if you have not also done the firewall route. Answer submitted by: Blitzenzeus
got feedback?by dangme /faq/8133 The Messenger Service is a service in Windows 2000 and XP that allows messages to be sent from a server to a workstation or from workstation to workstation over a network via the 'net send' command. Unfortunately, spammers figured out how to send spams via the service, and a recent flaw was discovered in the service that would allow a hacker to take control of the computer. If you are one of the many people who has received pop-up spam via the messenger service, or you think you might be receiving it, there is another helpful FAQ entry here that will explain how it works and tell you how to stop it from happening again: /faq/5687 In a corporate environment, network administrators may use the messenger service to alert employees that a server is going down for maintenance, or they may set up a server to automatically send them a message when a virus is detected on a computer. Most home users have no need for the service, which is why so many sites suggest that it be disabled. In fact, Microsoft is going to disable the service by default in XP Service Pack 2, due out in summer of 2004. Many news sites equate the two. They are not the same thing! Hackers cannot hack you because you use MSN or Windows Messenger, nor will disabling the Messenger Service prevent you from chatting.
got feedback?by Daemon If you've received something that purports to be from Citibank, please visit the main Citibank site and click on the "about e-mail fraud" link at the bottom of the page. Citibank does a pretty good job of keeping up with the latest scams: you can confirm and report yours via this page.
got feedback?by Steve 7 Advanced Topics
As a form of even more severe punishment, some of the blacklist organizations distribute Internet routing information (BGP data) that cause ALL IP traffic from these networks to be effectively discarded. Effectively, this forms an Internet "blackhole" (it's unreachable from your network). Since many spams originate from "throwaway" dialup accounts, and sometimes DSL or cable modems, another list that MAPS maintains is a list of blocks of addresses (netblocks) which ISPs have assigned to their dialup, cable modem, or DSL customers. These are somewhat effective, but often perfectly legitimate emailers send email autonomously (that is to say, without using their ISP's email relay). As long as you are the one running the email server, this can be effective. If your ISP receives and stores (or forwards) email for you, this will be of no use, because the address from which the mail will be coming is your ISP, and it's pretty much a given that your ISP won't be on the RBL (realtime blackhole list). Unfortunately, MAPS has become a subscription service, but it may be worth it if you're doing this as a service to a group, such as your family or your house of worship. But there are a few different possibilities; use your favorite WWW search engine to look for "email blocking lists" or similar phrase.
got feedback?by rchandra »www.killfile.org/~tskirvin/nana/···ter.html News.admin.net-abuse.sightings is a forum for reports of sightings of net abuse. It is a robomoderated forum, allowing only properly formatted posts. Followups are required to be set strictly out of the group and into the appropriate group in the news.admin.net-abuse.* hierarchy. News.admin.net-abuse.sightings is moderated by a robot moderator, run by a team of operators. The robot will automatically approve and post messages according to a approved criteria: Posting spam in this newsgroup is desirable since it's used as an evidence file documenting dates, injection points, URL hosts, drop-boxes, etc. Posting in NANAS can be done in one of two ways, either directly thru your newsgroup client, or by email. The purpose of this post is to help you minimize collateral damage to your inbox by posting spam in this newsgroup. Spammers can and do frequently harvest email addresses from this newsgroup, so it's wise to take steps before posting to eliminate that potential beforehand. =============================== Posting via newsgroup client: 1) First you need an email address to use, since your email address is visible in the headers of the postings as the author. The robot moderator does reply and confirm each post, (unless you configure your post beforehand NOT to do this), and posts with invalid email addresses are ignored. I recommend a throwaway address on any free email provider provided they allow you to configure your inbox to only allow email from addresses in your address book. Hotmail can work this way and so can Yahoo. Again, spammers harvest from this newsgroup frequently. 2) Set up your newsgroup client with your new email address and your name. Of course, if you don't know how to do this, you'll need to consult your HELP file or online documentation as to the correct method. 3) You can post in one of the *.test newsgroups if desired to see how your posts look, but this is really unnecessary. 4) Post a spam. Now, you'll need to ALWAYS munge personal information in the headers of the spam before posting. I replace all instances of my email with xxxxx's such as xxxxx@example.com or even xxxxx@xxxxxxx.xxx, or whatever strikes your fancy. If the spam contains other innocent email addresses, like in the CC: field, it's considered good netiquette to munge those also, so you are not responsible for having THEIR email address harvested. You MUST include a subject line in the format of: [email] insert subject here EXAMPLE: [email] Make Money Fast! Failure to use this format will result in your post not appearing at all. 5) Once you post your spam example, you'll receive an email confirming your post to NANAS at the address that you used in your newsgroup reader, Yahoo . . . Hotmail . . . whatever. Now, go to your free email provider and set your options to only allow email from those addresses in your address book, and add the address from the confirmation mail you received. Now, if any spammer scrapes your email address off of NANAS and sends you spam, you'll NEVER see it. =============================== Posting via email: 1) First you need an email address to use, since your email address is visible in the headers of the postings as the author. The robot moderator does reply and confirm each post, (unless you configure your post beforehand NOT to do this), and posts with invalid email addresses are ignored. I recommend a throwaway address on any free email provider provided they allow you to configure your inbox to only allow email from addresses in your address book. Hotmail can work this way and so can Yahoo. Again, spammers harvest from this newsgroup frequently. 2) Only send spam to NANAS from this email address . . . never any other. This makes it REAL easy to find all your posts using groups.google.com. 4) Send a spam to nanas-sub@cybernothing.org. Now, you'll need to ALWAYS munge personal information in the headers of the spam before posting. I replace all instances of my email with xxxxx's such as xxxxx@example.com or even xxxxx@xxxxxxx.xxx, or whatever strikes your fancy. If the spam contains other innocent email addresses, like in the CC: field, it's considered good netiquette to munge those also, so you are not responsible for having THEIR email address harvested. You MUST include a subject line in the format of: [email] insert subject here EXAMPLE: [email] Make Money Fast! Failure to use this format will result in your post not appearing at all. 5) Once you send your spam example, you'll receive an email confirming your post to NANAS at your email address, Yahoo . . . Hotmail . . . whatever. Now, go to your free email provider and set your options to only allow email from those addresses in your address book, and add the address from the confirmation mail you received. Now, if any spammer scrapes your email address off of NANAS and sends you spam, you'll NEVER see it.
got feedback?by newview Second: Signup for a SpamCop free spam reporting account at »spamcop.net/anonsignup.shtml . Use the throw-away email address you just created. All replies from the spam you report will arrive at this email address. Third: Start reporting spam. It's very important to provide both HEADERS and the BODY of the email when reporting. The headers will reveal WHERE the email actually came from and the BODY of the email (often in html) will reveal where any web sites are located, which get a spam report also. It's very important to SHUT DOWN the spammers method of making money. With no web site, there's no reason to spam. So, there's two more things you need to learn: 1) How to get your email client to reveal the email headers, and . . . 2) How to get your email client to reveal the HTML source code. SpamCop comes in handy again . . . there's a page that tells you how to get your email client to reveal the email headers, »spamcop.net/fom-serve/cache/19.html . As far as getting the HTML source, you'll need to consult the HELP file or documentation or web site of your email client. Now . . . you get a spam you want to report. I find it easier to open Notepad to paste the various pieces together. 1) Open Notepad. 2) Copy the email headers from your email client and paste into Notepad beginning on the first line. 3) After you paste the headers, skip one line. 4) Copy and paste the HTML source code of the spam into Notepad, if it's just plain text . . . copy and paste that. 5) Now copy EVERYTHING from Notepad. 6) Log onto your SpamCop account and paste EVERYTHING into the small window, hit the Process Spam button and SpamCop takes over, revealing who is responsible for EVERY aspect of the spam you received and offering to send a complaint to responsible parties.
got feedback?by newview By maintaining this registry, ISPs have an easier time researching new customers and (hopefully) not allowing one of these folks on their networks.
got feedback?by Steve | |||||||||||||||||||||||||
| Wednesday, 22-May 01:23:38 | Terms of Use & Privacy | feedback | contact | Hosting by nac.net - DSL,Hosting & Co-lo over 13.5 years online © 1999-2013 dslreports.com. |
