republican-creole
Search:  

 
 
   News
newer
story category Osirusoft MIA?
Spammers cripple popular blacklist
(old news - 01:24PM Wednesday Aug 27 2003)
tags: trouble · spam
Osirusoft, one of the larger spam-blacklists, has been shut down after suffering through a huge volume of distributed denial of service attacks. Customers of ISP's who use Osirusoft began noticing that they were no longer getting their e-mail; members of our Stopping Spam forum began noticing oddities earlier this month. Newsgroup participants likewise began experiencing problems. (also see this additional thread)

Apparently spammers, in an effort to bring the service to its knees, have been conducting distributed denial of service attacks. The attacks have apparently knocked the provider out of the blacklist business for the time being, though the operators of the service have yet to comment on the problems. According to this ZDNet report, it's assumed the service will return in a different format once the attacks subside. Mail servers that utilize the Osirusoft black list won't function properly until re-configured to use another blocking list.

Related:
  1. Skype Spam On The Rise
  2. Bankruptcy Judge Slams Charter Founder Allen
  3. AT&T's 'Blogger Guy' Faces Public Backlash
  4. CallCentric Suffers National VoIP Outage
  5. Slate Wants You To Pay More For iPhone Data
  6. Sidekick Users Get Outage AND Total Data Loss
  7. Unions Blame Verizon For Fairpoint Disaster
  8. CRTC Blocks Canada's WIND Wireless Network
Forums » Osirusoft MIA?
view: topics flat text 
Post a:

bky
moof moof
Premium
join:2002-07-05
Austin, TX

DIE!

KILL THE SPAMMERS!

KrK
Heavy Artillery For The Little Guy
Premium
join:2000-01-17
Tulsa, OK
·AT&T Yahoo
·AT&T DSL Service
·Cox HSI
·AT&T Southwest

Re: DIE!

Good move, Spammer fools!

Switch your annoying, un-ethical but still mostly legal tactics of Spamming over to tactics that are completely illegal, and drum up more opposition.... now there's something people can *prosecute* you for....

Somewhere out there is some P.O.'ed prosecutor who's tired of being spammed with Porn and Viagra ads and now you've given him his chance to whoop some ass.
--
"Regulatory capitalism is when companies invest in lawyers, lobbyists, and politicians, instead of plant, people, and customer service." - former FCC Chairman William Kennard (A real FCC Chairman, unlike the current Corporate Spokesperson in the job!)
bigbeartech
Goo?

join:2001-09-23
Saint Louis, MO

Re: DIE!

Except spammers often use stolen credit cards, false information, and other tactics to spam, as was noted with the earthlink spammer. Of course the earthlink spammer was nailed.

That and some spammers live outside the US
--
guycad: It may take you days and large clumps of hair to get it to work,CyberSchnook:I am so screwed--I haven't had large clumps of hair for years.

Gyzm0
Phear My Hand Cannon

join:2003-03-15
Grand Prairie, TX

Re: DIE!

said by bigbeartech See Profile:
That and some spammers live outside the US

Haven't you heard The U.S. can tell any one what to do
--
"You can run....but you only die tired"

Geoducky

@attbi.com

Actually I wonder why more people don't refer spammers to the FBI... I bet 99% of spammers have commited one or more of:

credit card fraud
tax fraud
mail fraud
phone fraud
identity theft
falsification of internet domain records (they ALL do this)

I had my credit card number stolen once, and a spammer used it to register several domain names and setup web hosting accounts.

I don't even see why services like Osirusoft or SPEWS exist. The typical spammer sets up valid ISP accounts (with false personal information), spams like hell for a couple weeks (voilating ToS), and moves on to the next ISP. Even if the ISP intends NOT to harbour spammers, they can be repeatedly blacklisted.
Kearnstd
Elf Wizard
Premium
join:2002-01-22
Mullica Hill, NJ

Re: DIE!

cause their outside the US, we should find them and use our missles on them rather then stuff in the middle east. spammers are a threat to national security and our economy if they can overwelm corperate mail servers with spam.
--
[65 Arcanist]Filan(High Elf) Zone: Broadband Reports
Salamander14

join:2002-10-15
CH

said by Geoducky:
Actually I wonder why more people don't refer spammers to the FBI... I bet 99% of spammers have commited one or more of:
...

Because damages less than 50KUS per instance doesn't show on their radar screen (you are not worth their time).

said by Geoducky:
I don't even see why services like Osirusoft or SPEWS exist. The typical spammer sets up valid ISP accounts (with false personal information), spams like hell for a couple weeks (voilating ToS), and moves on to the next ISP. Even if the ISP intends NOT to harbour spammers, they can be repeatedly blacklisted.
This has been my chief complaint against blacklists for ages. They nail too many innocents.

Googled
Yay, I have FIOS

join:2001-08-13
Orchard Park, NY
·VoicePulse

said by Geoducky:
Actually I wonder why more people don't refer spammers to the FBI... I bet 99% of spammers have commited one or more of:

...
falsification of internet domain records (they ALL do this)
...

Even SPEWS is guilty of that one.

I for one think blacklists are a good idea, but really dislike SPEWS. I'm the webmaster of a server which was caught in the collateral damage caused by the aggressive blacklisting that SPEWS provides. At one point they had all the subnets of the hosting provider that I am hosted at blacklisted. That's thousands of servers blacklisted, all because one person decided to send spam. All the other blacklists simply listed the one IP of the offending server, but not SPEWS they kicked it up a notch and blocked everything with total disregard to the innocent.

It has since been an uphill battle for my provider to try and get off their blacklist. SPEWS has no contact information other than to post to news.admin.net-abuse newsgroup and provide evidence that the spammer has been shut down. At that point all you can do is hope that the right people will see it and have pity on you. All the while SPEWS continued to happily blacklist thousands of innocent servers.

David Pinnegar

@213.78.x.x

I hate spammers and stopping them by providing the »www.antespam.co.uk costs me a lot of time. But I hate the blacklists - they are generally unreliable and Osirusoft has been one of the worst and deserves to have collapsed. Of the others »www.spamcop.net is the best and is founded upon valid algorithms.

I stop spam using a modified content filtering system and it is eminently more successful than any Blacklist can be. We usually achieve 1 in 10,000 accuracy. The whole of the discussion about Osirusoft is irrelevant - other than spamcop.net, no-one should be entrusting their email delivery to IP blacklist based systems.

YOurs sincerely

David Pinnegar BSc ARCS

Krispy
Premium,VIP
join:2001-12-11
the stix

Criminal Matter

An attack of this magnitude should DEFINITELY be a criminal matter and be investigated by the authorities. Public awareness of this issue is tantamount if we are to stop this from happening again. People need to understand how this temp victory to the spammers affects all of us.

chanur
Premium
join:2001-02-26
Colorado Springs, CO

Re: Criminal Matter

I have long had a question that has been bugging me.

When I want to stop something from happening that is irritating me, and there is an intermediary, I go to the source. The people who buy these adds should begin to suffer the punishment. It seems they would be eminently more traceable (after all, they are trying to sell something). Is it the volume of spam purchasers that prevents this? When I get junk mail (a lot of course) I am irritated at those who send it - not the spammer but the seller of product. Is it a free speech issue? We seem to be getting around that with no-call lists.

ctceo
Premium
join:2001-04-26
South Bend, IN
clubs:

Re: Criminal Matter

You would be suprised at the amount of people who are exempt from no-call lists.

bhhurd
Premium
join:2003-02-13
Korea

Re: Criminal Matter

I tell telephone solicitors two things:

"Take me off your list!"

and

"We do not respond to ANY telephone solicitations."

Then I hang up.

Krispy
Premium,VIP
join:2001-12-11
the stix

Re: Criminal Matter

But the very fact that you answered the phone number they dialed makes someone, somewhere money which means they will continue to do it. The same goes for spam mail, even those 'F.O.A.D spammer' responses are counted as a 'contact' in many cases.

ctceo
Premium
join:2001-04-26
South Bend, IN
clubs:
·magicjack.com
·AT&T U-Verse
·Comcast
·AT&T Midwest
·HughesNet Satellit..

Studies have shown that even if you request them to take you off their list, they will say they did, then just slide your phone number to the next representative. I dare you to ask for company information, and see what type of stone-walling they give you, or fake information they tell you is true. By Federal law they have to identify themselves by their first and last names, and the company they are claiming to represent. I would venture from what I was able to extrapolate from the research done, about 1 in 10 numbers are actually removed upon customer request. Probably more when the lawyers give them a talking to, and definately more when they receive their first $10,000 fine.

Oh, and just as a side note, they don't have to buy the no-call list, that is purely voluntary; at least in Indiana (the allegedly strictest no call-list rules & penalties in the US).
--
Upgraded eTower733i, 512MB PC133,PCI GeForce MX440 64MB, Onboard Sound, 2 x 20GB HD. "If it still does what you need it to, it's not outdated".

broknsymetry
What Time Is It And Why?
Premium
join:2003-06-27
THE VOID
clubs:

Re: Criminal Matter

said by ctceo See Profile:
Studies have shown that even if you request them to take you off their list, they will say they did, then just slide your phone number to the next representative.
Having been a telemarketer for a long six weeks once, I can tell you that most telemarketers are people just trying to feed their families and have no other choice except to take such a degrading job. Degrading due to the abuse that they must accept from people on the other end of the line. We were not allowed to become abusive ourselves, but when the customer cussed and ranted we were required to remain on the line until they ended the call. Also, if a customer requested to be removed from the list we complied by marking their record. As to the disposition of the record beyond that, the agent had no control, but the company was required by law to remove them from the database.

If you do receive a call from a telemarketer, just politely request to be removed from the list.

ifarrell

join:2000-08-10
Willow Spring, NC
·Vonage

Re: Criminal Matter

said by broknsymetry See Profile:
said by ctceo See Profile:
Studies have shown that even if you request them to take you off their list, they will say they did, then just slide your phone number to the next representative.
Having been a telemarketer for a long six weeks once, I can tell you that most telemarketers are people just trying to feed their families and have no other choice except to take such a degrading job. Degrading due to the abuse that they must accept from people on the other end of the line. We were not allowed to become abusive ourselves, but when the customer cussed and ranted we were required to remain on the line until they ended the call. Also, if a customer requested to be removed from the list we complied by marking their record. As to the disposition of the record beyond that, the agent had no control, but the company was required by law to remove them from the database.

If you do receive a call from a telemarketer, just politely request to be removed from the list.
Been there, tried that.
Worse offenders are the Telco's followed by loan sharks (oppps, I mean Credit Card companies). MCI is the worse telco followed by AT&T. Citibank is the worse Credit Card company. They claim they've removed you but you get another call the very next week. I tried to report MCI to the feds but if you can't get the number (the telemarketers are very good at blocking phone numbers) you don't have a case. You need the persons name, name of company, phone number they called from, time of day each incident occured and the phone number they called to. WTF.
So now I use Telezapper (there is a god after all (-; ) and if I see "Blocked", "Private" or "Out of Area" I let the answering machine pick up.
Finally, after two years I think they got the message. I may get one or two a month now.

twd660

join:2001-06-06
Huntington, WV

Listen, i lived in huntinton WV. there r 3 or 4 call centers ther, our mayor give these people a no tax credit for a certain number of years , to try and bring up the un-employment rate , but after that time wheres off these companies move again , leaving more people without jobs.

i lived there i know frpm the real world!

masterpjz9

join:2000-10-14
Peabody, MA

said by ctceo See Profile:
Oh, and just as a side note, they don't have to buy the no-call list, that is purely voluntary; at least in Indiana (the allegedly strictest no call-list rules & penalties in the US).

Well I know in Massachusetts, if you are on the No Call list and they call you, they can get fined if you report them. This list is not voluntary

ctceo
Premium
join:2001-04-26
South Bend, IN
clubs:
·magicjack.com
·AT&T U-Verse
·Comcast
·AT&T Midwest
·HughesNet Satellit..

Good Luck getting that to work.

As far as having been a TM at one time myself as well, I know where you are coming from. Just another point when it comes to how bad the job market is now'a'days.

I am constantly telling the same organizations, or people representing them to stop calling me. So far I have had to request a phone tap 4 months in a row to maintain active and accurate records of who calls from where and when, and take 3 Bill collection companies to small claims in the past 12 months. About half of the calls are from automated systems that for one reason call and then hang up when you answer, yet they are still in operation 12 months later, after litigation from me. The bill collectors aren't even calling for me, they are calling for somebody that I've never heard of, and when asked for their First/Last name & the company they represent, they insist that I don't need that information for one reason or another, and that is when they usually hang up on me, only to call back later that week, using a different rep. on Sunday at 6AM.

besides that as far as I'm aware I have only 2 Debts, My new computer, & Next months fiscal expenditures for the home office.
--
Upgraded eTower733i, 512MB PC133,PCI GeForce MX440 64MB, Onboard Sound, 2 x 20GB HD. "If it still does what you need it to, it's not outdated".

JakCrow

join:2001-12-06
Palo Alto, CA

said by Krispy See Profile:
An attack of this magnitude should DEFINITELY be a criminal matter and be investigated by the authorities. Public awareness of this issue is tantamount if we are to stop this from happening again. People need to understand how this temp victory to the spammers affects all of us.
Eh hem. Osirusoft is run off someone's DSL line. The "magnitude" of this attack could be 2 compromised Windows boxes. WOW,

Krispy
Premium,VIP
join:2001-12-11
the stix

Re: Criminal Matter

said by JakCrow:
Eh hem. Osirusoft is run off someone's DSL line. The "magnitude" of this attack could be 2 compromised Windows boxes. WOW,
The attack went out for well over a month and the Osirusoft list helped many organizations (ie: my company) filter LOTS of unnecessary mail on a daily basis, now we have to deal with increased processing loads and customer complaints because most of the mail that was previously filtered by Osirusoft is now getting through....that costs us real money as it has for many others I would imagine.

JakCrow

join:2001-12-06
Palo Alto, CA


Re: Criminal Matter

said by Krispy See Profile:
The attack went out for well over a month and the Osirusoft list helped many organizations (ie: my company) filter LOTS of unnecessary mail on a daily basis, now we have to deal with increased processing loads and customer complaints because most of the mail that was previously filtered by Osirusoft is now getting through....that costs us real money as it has for many others I would imagine.
The "attack" against Joe could have simply come from 2 or 3 compromised Windows boxes sitting on a cable modem somewhere. No one in their right mind would run a prime DOS target like a blocklist off a DSL line.

Also, it's your own damn fault for going with a blocklist run by unprofessionals with large egos and no accountability. I know plenty of companies that deal with spam quite effectively without spews. I have no sympathy for you or your "real money".
[text was edited by author 2003-08-29 04:15:57]

Krispy
Premium,VIP
join:2001-12-11
the stix

Re: Criminal Matter

It was far more then 2-3 machines, anyway if you are attempting to defend DoS attacks based on size you've lost quite a bit of credibility in my eyes already. And btw, spews and osirusoft are two different lists, we didn't reject mail based on spews, we rejected mail based on queries to relays.osirusoft.com and that was a very respectable list.

Regardless, I've wasted too much time reading your uninformed blather so troll on.

JakCrow

join:2001-12-06
Palo Alto, CA

Re: Criminal Matter

said by Krispy See Profile:
It was far more then 2-3 machines, anyway if you are attempting to defend DoS attacks based on size you've lost quite a bit of credibility in my eyes already. And btw, spews and osirusoft are two different lists, we didn't reject mail based on spews, we rejected mail based on queries to relays.osirusoft.com and that was a very respectable list.

Point me to where I was defending a DoS. You can't. I merely and quite accurately pointed out that there wasn't an attack some kind of massive magnitude that you seemed to think it was. So much for -your- credibility. If you weren't using the spews zones he was publishing, you must have been using his out of date lists. The DoS was probably just a convenient out for him since he was so far behind at this point and it probably wasn't worth the effort.

said by Krispy See Profile:

Regardless, I've wasted too much time reading your uninformed blather so troll on.
Good. Go back to nanae with the rest of the kooks.

ctceo
Premium
join:2001-04-26
South Bend, IN
clubs:
·magicjack.com
·AT&T U-Verse
·Comcast
·AT&T Midwest
·HughesNet Satellit..

Massachusetts

Chapter 265 of the Acts of 2002
Section 2, Subsection ii, Sentence 5

" The office shall update such listing not less than quarterly and shall make such listing available to telephone solicitors and other persons for a fee as the office shall prescribe. "

According to MA State No-Call registry (not the federal no call list) the list is prescribed, on a per fee basis, and if a solicitor chooses not to purchase that list, so be it.

HOWEVER they are still held liable for any infraction caused as a result of soliciting in violation of said Local or Federal Law (Telephone Consumer Protection Act, 47 U.S.C. s.227; 47 C.F.R. s. 64.)

---
--
SuperMicro P4QH6 w/Quad Xeon 3.06Ghz, Gainward FX Ultra 1600 AGP 8x Video 256 DDR, 1GB DDR memory, DVD-RW, Audigy II Sound, 180GB SATA Hard Drive, 27" Flat Panel. It may be a bit much, but it was free!

DHRacer
Fire Survivor

join:2000-10-10
Lake Arrowhead, CA
·Charter Pipeline
·Verizon west (ex G..

"Revenge is a dish best served cold,

and it is very cold in [cyber]space."

Ha, ha, sorry, thought the line was funny.

Seriously, it is now up to the people getting spammed to give it right back to the people dishing this out.

If they are trying to bring down our protection from spam, then that means war, and war is what they are going to get.

Bring on the hackers!
--
The three most dangerous things are a programmer with a soldering iron, a manager who codes, and a user who gets ideas.

banditws6
Shrinking Time and Distance

join:2001-08-18
Naples, FL
·Comcast

This is severe

Wow...this issue has been playing havoc with our corporate e-mail server for the past 48 hours. We use a filtering system that utilizes the Osirusoft blacklist and it's been spotty for days -- incoming mail's been getting stuck in the queue and never arriving. We're in hot water with our clients because of it, because it's been looking like we've been ignoring them.

The problem was complicated by the new IT guy we had hired who turned out to not be very resourceful, I guess -- he never had a clue what was going on and apparently ignored the problem. He was "let go" this morning.
--
"I'll follow the law until it's just stupid." -Ted Nugent

Pz_

join:2001-03-31
Brownsburg, IN
clubs:

Re: This is severe

I've been suffering from the reverse. Customers are complaining about not getting e-mail, when it shows delivered on our side.

broknsymetry
What Time Is It And Why?
Premium
join:2003-06-27
THE VOID
clubs:

said by banditws6 See Profile:
The problem was complicated by the new IT guy we had hired who turned out to not be very resourceful, I guess -- he never had a clue what was going on and apparently ignored the problem. He was "let go" this morning.

I can understand dismissing someone for ignoring a problem, but as far as not having knowledge of an issue that was just reported...

banditws6
Shrinking Time and Distance

join:2001-08-18
Naples, FL
·Comcast

Re: This is severe

said by broknsymetry See Profile:
I can understand dismissing someone for ignoring a problem, but as far as not having knowledge of an issue that was just reported...
Well, I may have made it seem like upper management canned him for not knowing about Osirusoft, which isn't true. He'd been slacking for a while now. Which was the problem -- no matter what was wrong, he didn't seem to want to do anything about it. Would ignore direct requests and go to lunch while he was supposed to be supervising people.

But yeah, I don't think much of anybody really knew about Osirusoft until today.
--
"I'll follow the law until it's just stupid." -Ted Nugent

broknsymetry
What Time Is It And Why?
Premium
join:2003-06-27
THE VOID
clubs:

Re: This is severe

Some companies that I have worked for would have promoted him to upper management. I figured that there must have been additional reasons for canning him; that this was the proverbial straw...

91439306
15,000 Watts of Bass Power

join:2002-10-16
New Milford, CT
This explains why I am getting bounced mails with that name in the header whenever I tried to e-mail one of my friends last night. I can't get ANY mail through to him--it all bounces now.

JakCrow

join:2001-12-06
Palo Alto, CA

said by banditws6 See Profile:
Wow...this issue has been playing havoc with our corporate e-mail server for the past 48 hours. We use a filtering system that utilizes the Osirusoft blacklist and it's been spotty for days -- incoming mail's been getting stuck in the queue and never arriving. We're in hot water with our clients because of it, because it's been looking like we've been ignoring them.

The problem was complicated by the new IT guy we had hired who turned out to not be very resourceful, I guess -- he never had a clue what was going on and apparently ignored the problem. He was "let go" this morning.

Perhaps you should have let him know your mail server was configured using blocklists.

banditws6
Shrinking Time and Distance

join:2001-08-18
Naples, FL
·Comcast

Re: This is severe

said by JakCrow See Profile:
Perhaps you should have let him know your mail server was configured using blocklists.
Oh, he knew we were using blocklists. We even suggested to him that that might have had something to do with the problems we were having, but he dismissed the possibility without checking it.
--
"I'll follow the law until it's just stupid." -Ted Nugent

N10Cities
SILENCE I Keel You
Premium
join:2002-05-07
Roland, OK
clubs:
·Cox HSI
·World Lynx


See related Slashdot article...

Over at Slashdot, they are having a similar discussion and they mention that the admin of that site basically blacklisted all hosts (*.*.*.*)...
[text was edited by author 2003-08-27 13:42:44]

Krispy
Premium,VIP
join:2001-12-11
the stix

Re: See related Slashdot article...

Yes Joe did do that and I agree with him, this raised awareness of this issue that he probably wouldn't have gotten if he'd just turned it off and disappeared. As others elsewhere had noted, this attack would not have been possible were it not for lax security of the networks involved and, to some extend, the lax security of home users so kudos to Joe for mashing everyone's face (including mine) into it.

We use (well I guess used) Osirusoft and we too were temporarily affected by this blanket blacklist but we figured it out really quickly (along with the help of his message in the bounce, 'Stop using Osirusoft...') and although it did somewhat impact us I do not bear ANY hardfeelings against Joe AT ALL. In my opinion he did the right thing given the circumstances.
russotto

join:2000-10-05
Collegeville, PA

Good riddance to a bad blocklist.

I think the admin proved his detractors right by blocklisting /0, and therefore causing every mail server configured to use his blocklist to bounce every mail they got. I doubt any list this guy is involved with will be trusted by too many administrators after that, at least not for a while.

Mail delivery on the net will probably get a lot more reliable as a result of the end of this list, whose admins had the philosophy of a hostage taker: "Accede to my demands or your e-mail gets it!".

Krispy
Premium,VIP
join:2001-12-11
the stix

Re: Good riddance to a bad blocklist.

said by russotto:
I doubt any list this guy is involved with will be trusted by too many administrators after that, at least not for a while.
I'm one admin that still trusts Joe and I work alongside of quite a few others that do as well.
said by russotto:
Mail delivery on the net will probably get a lot more reliable as a result of the end of this list,
Well except for that thing where mail servers and queues are flooded with unnecessary mail that no one wants.

reub2000
Premium
join:2001-12-28
Evanston, IL

quote:
Mail delivery on the net will probably get a lot more reliable as a result of the end of this list, whose admins had the philosophy of a hostage taker: "Accede to my demands or your e-mail gets it!".
With no laws about spam, how else are the anti-spam folks to stop spam? And spammers do a lot worse than threats.
Mythicman

join:2003-04-15
Lithonia, GA


So, what you're saying is that I shouldn't be able to subscribe to blacklists if I want to block spam?

You do realize that 75% (or so) of spam is relayed through unsecured mail servers? That the most importand puropse of RBLs (relay blackhole lists) are to keep unsecured relays from being able to send SPAM? That, if you have a mail server on the public net, and don't secure it so it's not an open relay, your mail deserves to be blocked, as any admin worth his salt should be able to secure his mail server (and if not, what else is he going to let through - viruses, worms, etc.?)? That an open mail server placed on the public net WILL be spammed through in under 36 hours (I've tested this personally). That 50% of ISPs subscribe to such lists (which is why it hurts so much to get listed)? That you WON'T get listed unless you are an open relay (seen this happen - at the ISP I worked for, we had a server get on the list, we were all damned sure it wasn't open for relay, but it turned out that a flag got changed and opened it up)?

IT IS MY RIGHT TO CONTROL WHO SEND EMAILS TO MY NETWORK!! If I chose to subscribe to these lists (I currently subscribe to MAPS RBL, and did to ORBS - before Above.Net null-routed it a couple of years ago) by god I will subscribe to lists.

Funny, I've never missed a legit email.

These guys do a service to the internet community (for FREE I might add) which helps a lot of folks kill spam. Perhaps this isn't the perfect solution, but the perfect solution doesn't yet exist, and probably never will.
[text was edited by author 2003-08-27 15:24:48]

aggiejy
Premium
join:2002-07-10
Wimberley, TX

Re: Good riddance to a bad blocklist.

Of course you wont miss emails... you're subscribing to blacklists... not on one. The problem comes when the blacklist owners fail to resolve complaints with a sender's ISP, and out of rage... block the whole block of IPs rather than just a few.

Happend to me when I was hosting with theplanet.com (a very large and upstanding host). I had a dedicated server there, but because someone in my same IP range got reported for spamming, my server was added to the list too. There were no open relays on my mail server, yet I (and my customers hosting with me) were not getting email. I had to move my servers to another clean IP range (which was a hassle)... but I know that it can happen again.

So... blacklists may be useful, but if there is no standard of when/how/why you blacklist someone... it does more harm than good. If all blacklists checked for was open relays, it wouldn't be an issue... of course open relays should be banned.

There is two sides to the issue.
russotto

join:2000-10-05
Collegeville, PA

said by Mythicman See Profile:
So, what you're saying is that I shouldn't be able to subscribe to blacklists if I want to block spam?

You do realize that 75% (or so) of spam is relayed through unsecured mail servers? That the most importand puropse of RBLs (relay blackhole lists) are to keep unsecured relays from being able to send SPAM?

You do realize that THIS list did more than that. It also blocked any network suspected of hosting a spammer -- entire /8s in some cases. As well as blocking anyone who objected too loudly to his policies. Blocking /0 was actually pretty much a logical extension

quote:

Funny, I've never missed a legit email.

How would you know?

KrK
Heavy Artillery For The Little Guy
Premium
join:2000-01-17
Tulsa, OK

And people say SPAM has no cost....

Uh huh. Tell it to these guys right here.

Halo5

join:2000-07-20
Dayton, OH
clubs:

Sweet!

SPEWS was out of control. They would block a whole subnet because one IP address sent SPAM, then the only way to get off their list was to post to a newsgroup (no direct contact of any kind) where you would get flamed for being a spammer.

This happened where I work. Someone spammed from an IP that was close to our block. Did they block the spammers IP? Nope, they just blocked an entire subnet including ours and a lot of other legitimate businesses. Took close to a month to get taken off.

Good riddance, I say let them rot in hell!!!
--
»www.thismodernworld.com A cartoon that tells it like it is.

See 13 replies to this post

pleekmo
Triptoe Through The Tulips
Premium
join:2001-09-14
Manchester, CT
clubs:

RICO

I think that if the ones responsible for this attack are caught that they ought to be RICO'd and sent to the penitentiary for a very long time.

If this is a DDoS attack then somewhere there ought to be some zombies which ought to give up some clues to the generator of this attack. Likewise, if the attack is not distributed, then it should be even more easy to track down the perpetrators.

And speaking of distributed, perhaps it's time to create a distributed network of RBLs, as one person elsewhere noted. (In other words, this is not my own idea and I take no credit for it but merely comment upon it here where the idea may receive more exposure.)
--
Only in America if it takes too long for a killer to die, you can't execute him that way and if it took less than 30 seconds for the victim to die then you can't use capital punishment against the killer. What a country...
x____

join:2003-02-13
____
clubs:

Re: RICO

Most spam filters can check an incoming message against multiple servers like osirusoft, spamcop, maps RBL and others.

If one server is unresponsive, it will just check it against the others so you will still get your email.

XWALL, MDaemon, Merak and many others support this type of configuration.

bhhurd
Premium
join:2003-02-13
Korea

RICO yes!!

Excellent idea.

Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
·AT&T Midwest
·Site5.com
·Comcast

Simply amazing...

It is amazing how some people here view the DOS attacks and web defacements on the RIAA as good and yet view these attacks on Osirusoft as bad. In my mind, an attack is an attack, reguardless of who the target is. I am someone who thinks that DOS attacks and web defacements are dumb and the people behind these attacks should be prosecuted to the fullest extent of the law.
--
My Domain
Nightfall's Hockey and Life Journal
moonpuppy

join:2000-08-21
Glen Burnie, MD
·Verizon Online DSL

Re: Simply amazing...

The RIAA has done some "questionable" things in the past. What has Osirusoft done wrong?

Also, the Boston Tea Party, the American Revolution, the burning of draft cards, blocking the steps of the Supreme Court, etc. are also illegal and forms of protest. While someone might get arrested for it, they still have the right to protest.

Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
·AT&T Midwest
·Site5.com
·Comcast

Re: Simply amazing...

said by moonpuppy See Profile:
The RIAA has done some "questionable" things in the past. What has Osirusoft done wrong?

It all depends on your idea of "questionable". Abortion doctors being killed by assassins is a similar issue. To some people, they are bringing a service to the community. To others, death. Does that mean people have a right to shoot them because they find abortion doctors actions "questionable"? I don't think so.
quote:

Also, the Boston Tea Party, the American Revolution, the burning of draft cards, blocking the steps of the Supreme Court, etc. are also illegal and forms of protest. While someone might get arrested for it, they still have the right to protest.
I agree. Those people who have attacked or defaced sites like Osirusoft or the RIAA should be prosecuted to the fullest extent of the law. Illegal forms of protest are still just that....illegal.
--
My Domain
Nightfall's Hockey and Life Journal

broknsymetry
What Time Is It And Why?
Premium
join:2003-06-27
THE VOID
clubs:


Re: Simply amazing...

said by Nightfall See Profile:
said by moonpuppy See Profile:
The RIAA has done some "questionable" things in the past. What has Osirusoft done wrong?

It all depends on your idea of "questionable". Abortion doctors being killed by assassins is a similar issue. To some people, they are bringing a service to the community. To others, death. Does that mean people have a right to shoot them because they find abortion doctors actions "questionable"? I don't think so.
Please...Using such an extreme analogy lends no justice to your argument. I don't think anyone here would equate the RIAA, Osirusoft, hackers, spammers or anyone else to an assassin. It is definitely NOT a similar issue.
[text was edited by author 2003-08-27 19:43:52]

Nightfall
My Goal Is To Deny Yours
Premium,MVM
join:2001-08-03
Grand Rapids, MI
·AT&T Midwest
·Site5.com
·Comcast


Re: Simply amazing...

said by broknsymetry See Profile:
said by Nightfall See Profile:
said by moonpuppy See Profile:
The RIAA has done some "questionable" things in the past. What has Osirusoft done wrong?

It all depends on your idea of "questionable". Abortion doctors being killed by assassins is a similar issue. To some people, they are bringing a service to the community. To others, death. Does that mean people have a right to shoot them because they find abortion doctors actions "questionable"? I don't think so.
Please...Using such an extreme analogy lends no justice to your argument. I don't think anyone here would equate the RIAA, Osirusoft, hackers, spammers or anyone else to an assassin. It is definitely NOT a similar issue.
[text was edited by author 2003-08-27 19:43:52]

But it is similar line of thinking. Same could be said about ultra religious people thinking that violent video games should be banned and DOSing online gaming servers. That would cause an uproar. I can dumb it down or get as simple as you would like, but it all boils down to the same thing. A crime is a crime. DOSing a site or hacking somewhere where you aren't supposed to be is a crime. Doesn't matter if it is against Osirusoft, the RIAA, online gaming servers, etc. That is the only point I am trying to make.
--
My Domain
Nightfall's Hockey and Life Journal

dallash
Premium
join:2001-08-17
Little Rock, AR
clubs:
·Vonage
·Comcast

It cuts both ways..........................

___________________________________
Please...Using such an extreme analogy lends no justice to your argument. I don't think anyone here would equate the RIAA, Osirusoft, hackers, spammers or anyone else to an assassin. It is definitely NOT a similar issue.
_______________________________________

I don't think I'd equate someone who launches a distributed DOS attack on Osirusoft with someone who blocks the steps of the Supreme Court.

Regards,

Dallash

Straphanger
Express is Back
Premium,Mod
join:2001-12-08
Jackson Heights, NY
clubs:
·RoadRunner Cable

Host:
TV over IP
New York
Audio/Video Chat

Stupid Spammers

They attack us and we'll attack them back even more eventually. Hopefully some hackers will find out whose doing this and screw them up with their own attacks. It's just more pot shots in this growing war. At least there's still SpamCop.
--
Hope, it is the quintessential human delusion, simultaneously the source of your greatest strength, and your greatest weakness.

Jack Handy

@charter.com

Spammers Attack? Maybe

So far about all that can be said is "we don't know" who is precipitating the attacks. It might be a spammer or spammers but then again alot of people are being falsely accused of spamming and enduring the penalties by the SPEWS network which includes Osirusoft. Also there are other groups who might feel that now is a good time to launch such an attack in order to blame spammers figuring that such action is somehow justified and righteous. Whatever the case may be it has certainly brought the SPEWS network into focus which upon investigation would seem a good thing in and of itself.

Osirusoft in particular seems to have a less than stellar reputation in regard to false accusation and a history of behaviour that well surpasses any borderline depiction of irresponsibility. While the cause may be just, the overriding question lingers as to the justification of means to that end. There is little doubt that victims of Osirusoft and the SPEWS network question the ethics and methods implemented and rightfully so.

As disconcerting as the spam problem can be, willing disruption of email communication by well intentioned Internet Service Providers utilizing the SPEWS network and similiar entities is not a matter to be taken lightly as recent events have shown. I would contend that if we are going to accept censorship and entrust others to implement that censorship, that the responsibility not ultimately fall to a secretive, unresponsive, irresponsible committee of self righteous vigilantes who view the punishment of innocents as acceptable collateral damage.

Personally I do not want an ISP to censor email on my behalf although I do appreciate having the choice and others may wish so. I would rather have effective tools at my disposal to handle my own inbox problems which could well include the utilization of blacklists, however SPEWS in general and Osirusoft in particular will have to improve their methods and accountability if they are to be trusted with my email.

AmeritecTech
Change we can believe in, 1922
Premium
join:2002-09-06
Houston, TX

Something Awful?

Actually, this could be Something Awful users. Several had threatened an attack if SPEWS didn't remove SA from its BL.

gwil662

join:2003-08-08
Austin, TX

Re: Something Awful?

OK Mr. Cripto.

SPEWS?
SA?
BL?

Don't want to be the stupid one but....

AmeritecTech
Change we can believe in, 1922
Premium
join:2002-09-06
Houston, TX

Re: Something Awful?

Spam Prevention Early Warning System
Something Awful (www.somethingawful.com)
Block List
fantomposter
Phantom Poster
Premium
join:2002-09-21
Independence, OH

said by AmeritecTech See Profile:
Actually, this could be Something Awful users. Several had threatened an attack if SPEWS didn't remove SA from its BL.
The attacks had been going on for at least 6 weeks prior to the Something Awful event. It was/is Eddy Marin that coordinated it, imho.

dellUser

@208.42.x.x

Osirusoft DoS attack errors in sendmail

It took me a while to figure out. When the Osirusoft deal went down, my pre-configured Dell server started rejecting all emails from our largest client. It caused all their mails to be returned with a 553 Sendmail error and “Rejected - See »relays.osirusoft.com/ (in reply to MAIL FROM command)” explanation. I didn’t even know the server was configured to check the Osirusoft list or any others, and found nothing on the net about anyone else experiencing the same troubles starting in late August.

After finding several “RULESET=CHECK_RELAY” errors in the Sendmail log. I searched the sendmail.cf file for that phrase and found an output string equaling the phrase mentioned above that was being returning to our clients’ emails. After reconfiguring Sendmail and removing anything associated to Osirusoft I’m hoping I’ve cured the problem. I’ve found nothing else about anyone else having this same problem on the net. If this can help someone else I’ll be happy, and if anyone else can confirm what I’ve found I’ll be ecstatic.

LCIS

@buckeye-express.com

spam Assassin

I was just testing spam assassin today, and running a RBL check agianst my own server. It seems the logic in the scripts I am using return "BLOCKED" if they cannot contach the server on wich the block list resides, wich means to me that if I had implimented this as it were, all lookups to relays.osirusoft.com would have came back as blocked, wich would have blocked everyone. Bummer...
anyway, more testing...
bbruns

join:2003-10-26
Hackensack, NJ

The AHBL

In response to Osirusoft and others going down, the SOSDG has recreated the old blackholes.2mbit.com blacklist as the Abusive Hosts Blocking List (AHBL). Its run by the same people as the old list.

You can lookup various information on how to use the DNSbl on the website.

Brian G

@com.ar

SPEWS out of control

I know this thread is mainly about Osirusoft, but as SPEWS has been mentioned repeatedly I should say that I was another victim of SPEWS colaterall damage.

My ISP had already changed their contracts so that they could ban spammers, and had informed the spammer that they would not be allowed to renew their contract, however they could not legally terminate their contract before the annual renewal because their previous contract was flawed. (Needless to say they sacked the legal firm that wrote it).

But That wasn't enough for SPEWS - they blacklisted every domain on their servers, including mine.
When I posted onto the newsgroup I was bombarded with threats myself.
Someone even traced someone else of the same name as me who sold mailing lists and tried to say it was me - one allegation which thankfully someone else on the group was good enough to disprove for me!
Someone else had my domains blocked my the registrar, until I threatened legal action against the registrar.
Of course, in the meantime everyone who worked (freelance) for me was without work and money for their families.
Other antispam lists confirmed that I had never been accused of spamming.
Of course it was impossible to contact SPEWS and most ISPs refuse to say if they use them.
It would have taken even longer to change ISPs for all my sites.

SPEWS needs shutting down permanently.
They site said that they weren't bothered about collaterall damage, in other words, the innocent can go to hell.
How would YOU like it if YOU had done nothing wrong?

I hate spam. I waste hours every day getting it off my damned computer - I probably get nearly 100 spam emails a day.
What is needed is REAL penalties against spammers, that WORKS. Not to attack innocent people caught up in the whole mess through no fault of their own.

After my horrific experiences last time I complained about SPEWS, I've actually used my personal email account to post this and a different ISP to usual. My personal email account is for the animal charity I help to run in Argentina, so I'm hoping that even the lowest won't try to block that and if they do, it will have no effect as we rarely email anyone!
Forums » Osirusoft MIA?


Sunday, 08-Nov 16:17:47 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.