republican-creole
Search:  

 
 
   News
newer
story category Spanish ISP Blocklisted Completely
TDE a refuge for 'scum and villainy'?
(old news - 09:01AM Monday Apr 26 2004)
tags: world · spam
Providers like Comcast or UUNet find a certain amount of IP real estate blacklisted by anti-spam groups because of spam. Problems have been so bad at Telefonica De Espana, the Abusive Hosts Blocking List (AHBL) has taken the step of blocking nearly the entire IP range used by the ISP. As well as being a spam haven, the group claims the ISP has been a major source of so-called 419 scams for some time. Like with SPEWS, the goal is to anonymously "force" customers to complain to their ISP about being blocklisted, a tactic that has seen no limit of debate from both sides of the spam issue.

Related:
  1. Unlicensed Chinese Mail Servers Now Illegal
  2. Hong Kong's Anti-Spam Solution
  3. British Telecom Automates Spam Blocking
  4. Earthquakes, Fiber, and Spam
  5. Thursday Evening Links
  6. Thursday Evening Links
  7. Friday Morning Links
  8. Friday Evening Links
Forums » Spanish ISP Blocklisted Completely
view: topics flat text 
Post a:

SuperJudge
Magus
Premium
join:2002-11-14
Albany, GA
clubs:

Dirty Spaniards!

Take your ebullfighting dirty nasty stuff elsewhere! Enlarge your penis!
ojing

join:2004-03-09
Norwalk, CT

Blocklisting? Ho hum

A friend of mine on Cablevision's OptimumOnLine gets blocklisted all the time. Perhaps once per week. Goes through the effort to get his particular address unblocked. Result? Nothing by Cablevision except to admit that a good portion of their users are spammers.

Can someone with more experience tell me whether their system is particularly non secure? (That was not an invitation to hack them, though I suspect that any attacks generated by the good people who visit this site would be totally swamped by the current spam.)

Rhobite
Premium
join:2002-02-24
Cambridge, MA
clubs:

Re: Blocklisting? Ho hum

Well does he have any spam trojans? That would be my first question. My second question would be, what blocklists did he make it onto? Is his IP on the Spamcop spam sources list? Does he change IP often?
--
Jimmysquid.com - I take pictures.
ojing

join:2004-03-09
Norwalk, CT

Re: Blocklisting? Ho hum

His machine is clean. Latest AV, router and Macintosh help with that. But the IPs are dynamic and he gets allocated addresses that are on black lists. Curious, I was looking to see which ones but could not find any, I was hoping that BBR could shed some light on this. Was the Optimumonline rep spewing? Do they run open proxys or relays? Seems unlikely in this day and age but perhaps the only obstacle to spam on their system is via MAC addresses.

Don't know. Would be interesting to find out. Give us DSL users something to fling back into the face of the superfast optimumonline crowd (other than reliable mail and free dial-up accounts).
add14pw

join:2004-01-26

Re: Blocklisting? Ho hum

If he's sending directly from his computer (not via the Optimum Online SMTP server) much of his email is going to be blocked by me, AOL and many other places. Mail direct from dynamic addresses is routinely blocked these days because of spam from machines which are compromised by security problems.

Also, if a spamming attack does get a machine on the OO network, that machine's IP address is rapidly added to the spam source blacklists and gets blocked by lots of other people. That sort of blacklist will often be used to block the email if it was from the IP address at any point, even if it was sent via the legitimate SMTP server ultimately.

Some blacklists are also not very well handled and may block the whole domain instead of just the compromised machines. These are probably mostly the places which haven't yet discovered that blocking mail coming directly from dynamic addresses is less disruptive. This is particularly problematic when some exploits and spam uses bogus from addresses.

Spamming software can also use the legitimate SMTP server of OO once it gets on the machine, so that can end up with the legitimate OO outgoing SMTP server blocked for a while (hopefully only for a while).

The best he can do is send via the OO SMTP server instead of directly (if he's sending directly) and suffer when OO takes too long to catch abuse of that SMTP server.

nixen
Rockin' the Boxen
Premium
join:2002-10-04
Alexandria, VA
·Cox HSI
·Speakeasy


blocked using dynablock.njabl.org (total: 780)
162 comcast.net
57 rr.com
55 optonline.net
48 pacbell.net
35 ameritech.net
34 attbi.com
22 dsl-verizon.net
19 adelphia.net
19 swbell.net
19 t-dialin.net
16 charter.com
14 verizon.net
13 telus.net

I use RBL's to help cut back the SPAM influx. One such RBL specifically targets dynamic IP sources. The above is a partial report for my home mail servers.

The ones at work, in the space of six hours, used this same RBL to block over 15,000 emails. The distribution of guilty domains was nearly identical to the above and in roughly the same proportions. So, take each of those number and multiply by fifteeen and change. You'll see how much a simple RBL on a moderately busy server can block.

-tom

--
"There are 10 types of people in the world... those who understand binary and those who don't."
"That's only 2 types of people, moron"

rstrandb
Premium
join:2003-04-17
Albany, GA

Re: Dirty Spaniards!

Maybe the spam blacklist is managed by uber-PETA people and this is their first overt move to world domination.
--
What....me worry?

SuperJudge
Magus
Premium
join:2002-11-14
Albany, GA
clubs:

Re: Dirty Spaniards!

Then we must all eat hotdogs.

TheToro
Premium
join:2003-06-05
Atlanta, GA
WTF are you talking about? i bet you dont know where is SPain, even you'd have to spend 30min to find Canada in a map.
No hables de algo que no sepas. ¿ por qué siempre tiene que haber un "toca pelotas" en todos los sitios?

SuperJudge
Magus
Premium
join:2002-11-14
Albany, GA
clubs:

Re: Dirty Spaniards!

said by TheToro See Profile:
WTF are you talking about? i bet you dont know where is SPain, even you'd have to spend 30min to find Canada in a map.
No hables de algo que no sepas. ¿ por qué siempre tiene que haber un "toca pelotas" en todos los sitios?

Did I hurt your feelings? I used to live 50 minutes from Canada, which is roughly a half an inch on a map, or about a centimeter. Spain was about a foot away, or just a smidgun over 30 centimeters. Probably about 16 hours, never flown, but I wouldn't be surprised if there was a stopover in Lisbon. Jerk.
--
Updated My Journal
TP&C

tumadremetoca

@bellsouth.net
I love it when tu mama me toca las pelotas! Spanish pussies should be banned from world participation.

TheToro
Premium
join:2003-06-05
Atlanta, GA

Re: Dirty Spaniards!

que te folle un gorila. gilipollas.

hitman247

@trebnet.com

Its about time....

its about time isp's start taking a hard line approach to these kind of wild-west isps around the world. these smaller companies just dont bother to realise that providing a T1 connection to users is not the entire focus of their business. it is also to provide a level of good netizenship.

odog
Cable Centric Vendor Biased
Premium
join:2001-08-05
Norcross, GA
clubs:

Re: Its about time....

how bout blacklisting the entire country of nigeria?

Slidetbone
Mazin Go
Premium
join:2002-11-10
Land O Lakes, FL

Re: Its about time....

That would finally get rid of the MUGU MUGU man!

Piobaireachd
Happy Halloween
Premium
join:2000-09-21
Port Orchard, WA

said by odog See Profile:
how bout blacklisting the entire country of nigeria?

I'm thinking why not blacklist most of Asia, especially China.
--
Who would Osama and Saddam vote for? ////Vote Democrat, it's easier than thinking
Ernesto47

join:2002-02-12
Palm Bay, FL

I am for the blacklisting. However, Telefonica of Spain is one of the largest ISPs around. They own ISPs in multiple countries in Latin America and even have a minuscule USA presence. That is what will make the blacklisting so effective, because they will have to clean up not only in Spain but in multiple countries

Vvian Kalyss

join:2003-10-14
Stage 5.0
clubs:

About time

You know what? I agree. My local ISP actually made it into the newspapers after a bunch of their IPs FINALLY got blacklisted. The news articles were all like, "we're on top of this stuff", "we're going to make sure this doesn't happen again", and the usual "omg wtf were my underlings doing" bleatings by the higher-ups.

My ISP happens to be the major telco in the country. They've been ignoring the spam problem for quite some time (read: YEARS). I'm GLAD the situation blew up in their faces. Don't any of their IT people KNOW anything?

I'm fed-up with ISPs who don't investigate REPEATED complaints.
--
" Her eyes were just the end of Hell-- / All pain, / Articulate "
ParanoiaInc

join:2002-08-28
Tucker, GA

What the threshhold for these kinds of activities?

What the threshold for these kinds of activities? For every 1,000 IP's that an ISP can assign, how many of them have to be trouble-makers before considering them haven crossed the line? Can this be an IP-base matrix to measure upon? Its difficult to base it on subscribership because the very nature of being able to setup accounts fraudulently makes repetitious activities easy.

jjoshua
Premium
join:2001-06-01
Scotch Plains, NJ
·Comcast

Don't use your ISP's email

As a personal user, The best solution is to use a 3rd party email provider. There are plenty of good free ones out there.

This way, you don't have to deal with your ISP's inability to block SPAM and you don't have to change your email address if you decide to change ISPs.

PTS
Premium
join:2001-12-13
Blue Heaven
clubs:

Re: Don't use your ISP's email

I agree, have used one for years. Sucks that one has to take these kind of steps, but it gets the job done...
LrdVader
Premium
join:2003-12-18
San Diego, CA

said by jjoshua See Profile:
As a personal user, The best solution is to use a 3rd party email provider. There are plenty of good free ones out there.

This way, you don't have to deal with your ISP's inability to block SPAM and you don't have to change your email address if you decide to change ISPs.

Good idea! Nobody *ever* abuses free email services and gets them blacklisted!

Favre04
Premium
join:2002-08-03
USA

edit:
April 26th, @11:08AM

Blocklisted Completely

Good. Now just take care of AOL.
mariolanning

join:2002-04-19
Tucson, AZ

Gain inches over night!

Gain inches over night. Just send me $19.95..

Augustus III
If Only Rome Could See Us Now....

join:2001-01-25
Gainesville, GA

Re: Gain inches over night!

do you accept photocopy money?

Forums » Spanish ISP Blocklisted Completely


Friday, 05-Sep 20:07:48 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 9 years online! © 1999-2008 dslreports.com.republican-creole