Seeking spam-free host/ISP
Mark J. Welch
I need a new ISP, one that will help me block incoming spam so I don't
need to waste my time on it.
AGIS has declared itself a "spam haven" and is hosting NANCYNET.COM,
BULK-E-MAIL.COM, and dozens of other spam domains, and refuses to take
any action to stop the broadcast of many spams per day to my email
address. AGIS allows (actually, encourages) the use of forgery and
spoofing to broadcat spam through its systems.
Earthlink.net claims to have an anti-spam policy, but it continues to
generate even more spam than AGIS on a daily basis; nothing seems to
stem the flow of spam.
My ISP has been very cooperative in blocking specific spam domains as
they pop up, but refuses to block all incoming traffic from the carriers
that are the biggest spam domains (AGIS.NET and EARTHLINK.NET).
Therefore, I think it is time to look for a new ISP where spam is NOT
permitted, and which will gladly turn off the spigot for any domain
which generates more than 50% spam through the pipeline. I know that
this will shut off the flow from earthlink.net, although I recognize
that it will continue to be a struggle to cut off the incoming forgeries
from AGIS due to its use and encouragement of spoofing and forgery.
PLEASE - I would appreciate any suggestions as soon as possible.
-- Mark J. Welch, Attorney at Law, Pleasanton CA
-- http://www.ca-probate.com 510-462-8483
-- This email is NOT legal advice, and is NOT confidential.
Barry Twycross
In article <5lqopm$osa$1...@shell3.ba.best.com>, a...@best.com wrote:
>I don't know enough about procmail, but perhaps it could be programmed to
>dump stuff from AGIS netblocks? If your ISP doesn't provide procmail
>tools, then that's another problem...
It can be, its been kicked around on news.admin.net-abuse.email. There is a
problem that some netblocks identified as AGIS by the internic have no
connection with AGIS (except the organisation they got their netblock from
has since been bought by AGIS).
It goes something like this:
:0
*^Received:.*\/\[(204\.(130\.243\.|137\.(128\.|13[4-9]\.|1[4-9][0-9]\.|2[01][0-9
]\.|22[0-3]\.)|157\.([0-9]\.|[0-9][0-9]\.|1[0-9][0-9]\.|2[01][0-9]\.|22[4-9][0-9
]\.|2[34][0-9]\.|25[0-5]\.))|205\.(137\.(4[89]\.|5[0-9]\.|6[0-3]\.|)|164\.(6[45]
\.|[789][0-9]\.|1[0-9][0-9]\.|2[0-4][0-9]\.|25[0-5]\.)|198\.|254\.(16[0-9]\.|17[
0-9]\.|18[0-9]\.|19[01]\.)|(199\.([0-9]\.|[0-9][0-9]\.|1[01][0-9]\.|12[0-7]\.|14
[4-9]\.|1[5-9][0-9]\.|2[0-4][0-9]\.|25[0-5]\.)))|206\.(42\.|43\.([0-3][0-9]\.|4[
0-7]\.|6[4-9]\.|[7-9][0-9]\.|1[0-9][0-9]\.|2[0-4][0-9]\.|25[0-5]\.)|62\.|8[45]\.
|14[89]\.|185\.|249\.|250\.)|207\.142\.|209\.14\.)
{
LOG="Agis: "
LOG=$MATCH
:0
/dev/null
}
The bit between * and { shouldn't have any line breaks in it.
--
Barry
Ba...@netbox.com <http://www.netbox.com/barry>
------
Posted under the restrictions imposed by the US government.
Mark J. Welch
yes, *that* Alex Lau wrote:
> Mark J. Welch <MarkWelc...@ca-probate.com> wrote:
> >My ISP has been very cooperative in blocking specific spam domains as
> >they pop up, but refuses to block all incoming traffic from the carriers
> >that are the biggest spam domains (AGIS.NET and EARTHLINK.NET).
>
> from AGIS and Earthlink. I, for one, have friends on Earthlink (no, I
> can't convince them to switch) who send me e-mail.
You're entitled to your opinion, but I already have a Eudora
filter that bounces back ALL incoming earthlink.net email (in
reviewing the email later, I have not yet found a single "real"
email amongst the spams). Blocking AGIS is more difficult,
because they are a backbone carrier and the spammers simply
get new domain names for each group of broadcasts, thus making
it difficult to "filter" using Eudora. Again, any suggestions
are welcome. I get a LOT of spam, probably because I have been
a vocal opponent of spam and so the spammers have deliberately
added me to lists they sell, and in some cases they have gone and
forged my name to emails and usenet postings just to get me
flamed.
What AGIS is telling me is that if I don't want to get (and
pay for) spam, I should get off the internet. Here is their
official "AUTORESPONDER" disclaiming any fault for allowing
unrestricted spamming from their customers:
===== text of AGIS message follows ==================
Received: from agis.net (agisgate.agis.net [205.137.48.30]) by value.net
(8.8.5/8.7.4) with ESMTP id PAA09467 for <mark...@ca-probate.com>;
Mon, 19 May 1997 15:02:19 -0700 (PDT)
Received: (from abuse@localhost)
by agis.net (8.8.5/8.8.5) id SAA07489;
Mon, 19 May 1997 18:05:10 -0400 (EDT)
Date: Mon, 19 May 1997 18:05:10 -0400 (EDT)
From: AGIS ABUSE <ab...@agis.net>
Message-Id: <1997051922...@agis.net>
To: mark...@ca-probate.com
References: <3.0.1.32.1997051...@value.net>
In-Reply-To: <3.0.1.32.1997051...@value.net>
Precedence: info
X-Loop: ab...@agis.net
Subject: Your email
X-UIDL: cd5b2416d6b18daac3bcf4d6651df5b6
Dear Sir/Madam,
Thank you for taking the time to write to AGIS with your concerns.
Please be aware that this mailbox (ab...@agis.net) is read by our entire
company, including our senior management. The fact that your message
garners e-mail from an auto-responder is to insure a timely response.
It
should not be an indication of a lack of consideration or concern.
AGIS' POSITION ON ACCEPTABLE USE POLICY FOR INTERNET CONTENT
AGIS provides Internet connectivity to a large number of customers, whom
are supporting millions of end users. As a global service provider, we
provide circuits for Internet backbone connectivity. We do not offer
connectivity directly to end-users.
It is our position that the Internet is an open marketplace, where
commerce
of any and all kinds may take place in accordance with public demand.
We
do not believe censorship is the responsibility of an Internet service
provider. It is not our place to censor customers' content or
legitimate
business practices. Messages originating from customer's sites reflect
the
opinions of our customers and not necessarily those of AGIS.
SUGGESTIONS
AGIS is a pro-active organization with goals of delivering the highest
quality solutions in support of the Internet's mission critical
applications. Since we believe in continuous improvement, we will
re-evaluate our position in light of the any new regulatory
developments.
We appreciate that our position may not be agreeable to everyone.
Further,
we understand your interest in seeking a solution. With that in mind,
may
we suggest the following options:
END-USERs - A variety of e-mail and filtering software packages are
available on the Internet for end-users. For example, Eudora and
procmail
offer sufficient protection from e-mail of your undesired Internet
sites.
ISPs - Your mail servers and/or router systems to can be set to reject
incoming spam or filter out offensive sites at the IP level. Sendmail
and
ccmail are a few examples of good systems which perform these
functions.
Again, we would like to thank you for your valuable input, and wish you
continued success in your Internet experience.
Please look at our web site www.agis.net for any new information.
Best Regards,
The AGIS Staff
tre...@rahul.net
"Mark J. Welch" <MarkWelc...@ca-probate.com> wrote:
>I need a new ISP, one that will help me block incoming spam so I don't
>need to waste my time on it.
>
>My ISP has been very cooperative in blocking specific spam domains as
>they pop up, but refuses to block all incoming traffic from the carriers
>that are the biggest spam domains (AGIS.NET and EARTHLINK.NET).
Get in touch with rahul and see what they can do for you.
They provide a system-wide filtering system that you can easily build upon
and extend, without requiring you to know procmail.
Their system scans all headers, so if they have already decided to block a
site, it doesn't matter if the email is relayed through another server. As
long as that server IDs the originator, the mail is still blocked.
However, as far as a total domain block of large entities like EL and AGIS,
I don't think any ISP of any real size is doing that. :~(
Garry W
>reviewing the email later, I have not yet found a single "real"
>email amongst the spams). Blocking AGIS is more difficult,
>because they are a backbone carrier and the spammers simply
>get new domain names for each group of broadcasts, thus making
Mark -
To block AGIS wouldn't a 'Received' header filter do the trick?
garry
Steve Rubin
In article <3380D4...@ca-probate.com>,
>need to waste my time on it.
>
InterNex is blackholing (internally) IP addr's of known spammers
(ie: cyberpromo).
--
Steve Rubin - Network Engineer Internex
s...@internex.net 2306 Walsh Ave.
(408) 327-2212 Santa Clara, CA 95051
mea...@earthlink.com
On 19 May 1997 15:50:40 -0700, a...@spam-me-and-die.best.com (yes,
*that* Alex Lau) wrote:
>In article <3380D4...@ca-probate.com>,
>Mark J. Welch <MarkWelc...@ca-probate.com> wrote:
>>My ISP has been very cooperative in blocking specific spam domains as
>>they pop up, but refuses to block all incoming traffic from the carriers
>>that are the biggest spam domains (AGIS.NET and EARTHLINK.NET).
>
>Which is a good thing, IMHO, considering that more than just spam comes
>from AGIS and Earthlink. I, for one, have friends on Earthlink (no, I
>can't convince them to switch) who send me e-mail.
>--
>--- Alex "Irabu is expensive!" Lau (acl @ best.com - spamming not welcome)
> (to send e-mail, use "Reply-to:" address in headers)
I joined earthlink because they waived the fee, but I am not too happy
with them and I am going to switch. Maybe rahul, wco or best. The
newsgroups are rarely updated and I am disconnected at the most
opportune times, like when I am downloading service packs! Opportune
for them that is. I figure three hundred hours a month is plenty of
time. Averaging 3-4 hours a day only puts me at 100-120 hours a
month.
And these guys allow spam to be mailed to their own members! Only
saving grace would be if you were on the road and needed to call you
isp. Lots of #'s. But then again, so does AOL. Anyway, no
difference.
Stormwind
>reviewing the email later, I have not yet found a single "real"
>email amongst the spams). Blocking AGIS is more difficult,
>because they are a backbone carrier and the spammers simply
>get new domain names for each group of broadcasts, thus making
>are welcome.
bounce all incoming email from people
and mailing lists that aren't approved.
known spam havens get a "sorry, you're
mailing from a spam site" message, others
get a "here's how to get ahold of me if
you DON'T have an advertisement to send me".
i've been using this method for two months,
and i'm delighted with it. people have
still been able to communicate with me just
fine, and i've yet to recieve a single piece
of UCE (although i do get a large chuckle out
of checking the log files in the morning).
>What AGIS is telling me is that if I don't want to get (and
>pay for) spam, I should get off the internet.
my thoughts on this are not repeatable in
a public forum.
--
stormwind
hell's amazon
lord of the frozen realm
J Durbin
a...@spam-me-and-die.best.com (yes, *that* Alex Lau) wrote:
>On Mon, 19 May 1997, Mark J. Welch wrote:
>> You're entitled to your opinion, ...
>Well, what I mean by that is, if you moved to my ISP (best.com) ...
Not likely. Last I saw Welch was accused of mass emailing Best
customers looking for evidence in a fraud lawsuit against Best for
continuing to bill his credit card after he closed an account.
No comment on the merits or viability of the complaint.
jd
--
jason durbin
slot...@poisson.com
stop reading here <---
Steve Sobol
mea...@earthlink.com wrote:
: And these guys allow spam to be mailed to their own members! Only
: saving grace would be if you were on the road and needed to call you
: isp. Lots of #'s. But then again, so does AOL.
Concentric does not, and they have hundreds of local phone numbers.
--
Steve Sobol, Technical Support - New Age Consulting Service, Inc.
sjs...@nacs.net Data 216 377-1010 / 951-8266 Voice 619-2000
NACS.NET Management does not necessarily share my opinions.
However I AM considering licensing my opinions to Microsoft! :)