Rules of spamfighting

Joseph S. Barrera III (joe@barrera.org)
Thu, 11 Feb 1999 19:56:57 -0800


A nice set of rules -- I thought it would be useful to be archived (and pick
up corrections from the FoRK nitpickers).

- Joe
----- Original Message -----
From: Doug <doug@blinkenlights.com>
To: Discussion re-collecting of classic computers
<classiccmp@u.washington.edu>
Sent: Thursday, February 11, 1999 6:51 PM
Subject: Re: Unsolicited Advertising|Mobilecostcutter SPAM

>On Thu, 11 Feb 1999, Bruce Lane wrote:
>
>> At 21:01 11-02-1999 -0500, you wrote:
>> Rule #1 of spamfighting: NEVER reply to a spammer in ANY form.
>> All it does is confirm that they hit a live address.
>
>2) Assume the return address is bogus, and examine the full headers.
>
>3) Find the last "recieved from" line in the headers. This will
>tell you the originating host.
>
>4) Use whois to find the technical contact for the originating host.
>
>5) Send a copy of the spam, with full headers, to the technical contact
>and/or postmaster and/or abuse, and request that the user's account be
>shutdown. They can determine the account from their logs even if it's
>not in the headers.
>
>6) If the originating host belongs to a spammer, ask their upstream ISP
>to shut off their connection. (This is the last "received by" host.)
>
>7) Don't send a message to this list about the spam. These messages
>generate 10x the noise the spammer generated.
>
>-- Doug
>
>