[Gllug] Stupid mail virusses - What can I do?

[Chris Bell]

On Mon 09 May, Gerd Busker wrote:
> 
> In the good old days, I would report the type of behaviour shown below to a
> sysadmin or entity nominally in charge of their bit of address space and 
> maybe even get a reply.
> 
> These days I don't bother.  What can I do to stop this sort of nonsense? 
> Is there a party I can vote for (death to all spammers and script kiddies)?  
> 
> Anyone know which virus could be responsible for this type of mass mailing?
> 
> Gerd.
> 
> 
> 
> 2005-05-09 09:57:10 H=(217.79.105.10) [211.54.128.42]
> F=<hxnclqclisrrku at indiasee
> k.com> rejected RCPT <simitar at dispersoid.net>: Unknown user
> 2005-05-09 09:57:11 H=(217.79.105.10) [211.54.128.42]
> F=<hxnclqclisrrku at indiasee
> k.com> rejected RCPT <shaun.appleby at dispersoid.net>: Unknown user
> 2005-05-09 09:57:12 H=(217.79.105.10) [211.54.128.42]
> F=<hxnclqclisrrku at indiasee
> k.com> rejected RCPT <shelby_patrick at dispersoid.net>: Unknown user
> 2005-05-09 09:57:15 H=(217.79.105.10) [211.54.128.42]
> F=<znegdfnmeqj at epatra.com>
>  rejected RCPT <sslange at dispersoid.net>: Unknown user
> 
> 
   My ISP verifies the IP address of every sender, and places that known IP
address in square brackets at the same position in every header, then
recommends that all spam is reported to the ISP of the sender, not the
sender. Any information after that point can be forged, and is unreliable.
   I was also given the address of their criminal investigation contact. All
junk emails received here are sent complete with headers to the sender's ISP
as found from a whois search, and the majority are BCC'd to the criminal
investigators.
   I usually receive just an automated reply, but occasionally also
confirmation that action has been taken. I have received repeated junk
emails from some addresses, these have now stopped.

-- 
Chris Bell

-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug