Administrator@willspc.net bounces

[RobertH <ro...@abbacomm.net>]

why is the account or accounts that create the Delivery Status Notification
(Failure) bounces from Administrator@willspc.net still subscribed to the
list?

 - rh

Re: Administrator@willspc.net bounces

[Wolfgang Zeikat <w....@hamburg.de>]

In an older episode (Sunday, 24. January 2010), Benny Pedersen wrote:
You are right, concerning mails to users-unsubscribe@spamassassin.org
>
> why did the bounce not go to apache.org ?

As stated before: because the MTA of the recipient sends bounces to the 
address in the "From:" header line, not to the envelope sender address 
(which would be apache.org). 

>
> not even the bounce email exists on the mta, so it will be bounce for
> anything sent to this domain, why did thay not remove that sucking
> domain from dns ? :)

Harsh reply: why do you post that question here instead of asking "them" 
who would probably be the only ones able to answer that?

Regards,

wolfgang

Re: Administrator@willspc.net bounces

[Karsten Bräckelmann <gu...@rudersport.de>]

On Sun, 2010-01-24 at 19:09 +0100, wolfgang wrote:
> In an older episode (Sunday, 24. January 2010), Evan Platt wrote:
> > On 1/23/2010 11:56 AM, wolfgang wrote:

> > > I sent an unsubscription request for the address in question to
> > > users-owner@spamassassin.apache.org.
> >
> > Won't work, AFAIK. You need to reply to the unsub request to confirm
> > it. Otherwise, you would be able to unsubscribe anyone :)

Oh, I have done that before. Was with a brain-dead vacation auto-
responder, which pretty much managed to DoS a mailing list by replying
to its *own* "out of office" notices to the list. At a constant rate
every few minutes.

Good thing was, the auto-responder was just happy to immediately reply
to the unsub request verification, sent by the list server -- due to an
unsub request *I* sent with the offender's address.  *poof* There it
went. :)


> Well, it did work, since I wrote to 
> users-owner@spamassassin.apache.org (which reaches the list 
> adminstrators) after trying [...]

Yes! Exactly. Thanks for mentioning that, Wolfgang.

  guenther


-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Re: Administrator@willspc.net bounces

[wolfgang <me...@gmx.net>]

In an older episode (Sunday, 24. January 2010), Evan Platt wrote:
> On 1/23/2010 11:56 AM, wolfgang wrote:
> > I sent an unsubscription request for the address in question to
> > users-owner@spamassassin.apache.org.
>
> Won't work, AFAIK. You need to reply to the unsub request to confirm
> it. Otherwise, you would be able to unsubscribe anyone :)

Well, it did work, since I wrote to 
users-owner@spamassassin.apache.org (which reaches the list 
adminstrators) after trying
users-unsubscribe@spamassassin.apache.org first, which did indeed 
automatically request confirmation.

Regards,

wolfgang

Re: [sa] Re: Administrator@willspc.net bounces

[Charles Gregory <cg...@hwcn.org>]

On Sun, 24 Jan 2010, Benny Pedersen wrote:
> why did the bounce not go to apache.org ?, or did it, but apache.org did not 
> see the problem in maillist ?

Because we have a caching server accepting the mail, and then when it 
*finally* decides the client is not going to retrieve the mail, it 
generates a bounce using the visible From header. To misquote a line from 
E.E. (Doc) Smith, "I could have eaten a hand full of iron filings and 
*puked* a better mail server than that."

> not even the bounce email exists on the mta, so it will be bounce for 
> anything sent to this domain, why did thay not remove that sucking domain 
> from dns ? :)

I blocked these in my firewall, so I can't tell how old the mail is being 
currently 'returned', but when I was getting them they were for mail that 
was VERY old, like the MTA was giving up on the mail after a specific 
amount of time (like a month or more). This is the reason I opted for a 
firewall solution. That MTA was going to be doing this a long time.

:(

- C

Re: Administrator@willspc.net bounces

[Benny Pedersen <me...@junc.org>]

On Sun 24 Jan 2010 05:55:21 PM CET, Evan Platt wrote
> Won't work, AFAIK. You need to reply to the unsub request to confirm it.
> Otherwise, you would be able to unsubscribe anyone :)

why did the bounce not go to apache.org ?, or did it, but apache.org  
did not see the problem in maillist ?

not even the bounce email exists on the mta, so it will be bounce for  
anything sent to this domain, why did thay not remove that sucking  
domain from dns ? :)

-- 
xpoint http://www.unicom.com/pw/reply-to-harmful.html

Re: Administrator@willspc.net bounces

[Evan Platt <ev...@espphotography.com>]

On 1/23/2010 11:56 AM, wolfgang wrote:
> I sent an unsubscription request for the address in question to
> users-owner@spamassassin.apache.org.

Won't work, AFAIK. You need to reply to the unsub request to confirm it.
Otherwise, you would be able to unsubscribe anyone :)

Re: Administrator@willspc.net bounces

[wolfgang <me...@gmx.net>]

In an older episode (Saturday, 23. January 2010), Benny Pedersen wrote:
> just hoped that maillist-owner is a subscriber aswell and post more
> here to see the problem

I sent an unsubscription request for the address in question to
users-owner@spamassassin.apache.org.

I hope that's more effective than hoping that maillist-owner will post 
some day ;)

Re: Administrator@willspc.net bounces

[Benny Pedersen <me...@junc.org>]

On Sat 23 Jan 2010 07:35:43 PM CET, RobertH wrote
> why is the account or accounts that create the Delivery Status Notification
> (Failure) bounces from Administrator@willspc.net still subscribed to the
> list?

it does not bounce to apache org, only to subscribers :)

just hoped that maillist-owner is a subscriber aswell and post more  
here to see the problem

-- 
xpoint http://www.unicom.com/pw/reply-to-harmful.html

RE: Administrator@willspc.net bounces

[Karsten Bräckelmann <gu...@rudersport.de>]

On Sat, 2010-01-23 at 18:40 -0800, Robert Hanson wrote:
> > Yes, complaining instead of notifying the right people. Way to go!
> 
> karsten,
> wooohoooo!
> you are welcome!  :-)
> 
> since i dont know who it is, what do you expect?

>>From a bunch of mail admins?

To contact LIST-owner@ [1] and summon those, who *can* do something
about it, but might not read all posts. Or in my case recently, might
not read the list, but still respond to such requests.

As apposed to whine publicly...  See what I mean? ;)

> this isnt the first post to the list about it...

And this isn't the first time I mentioned this very procedure, either.

  guenther


[1] LIST-help@ if anything else fails, or escapes your memory. Of
    course, substitute the list's left-hand part for LIST...

-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Re: Administrator@willspc.net bounces

[jdow <jd...@earthlink.net>]

From: "R-Elists" <li...@abbacomm.net>
Sent: Saturday, 2010/January/23 18:40
>
>>
>> Yes, complaining instead of notifying the right people. Way to go!
>>
>
> karsten,
>
> wooohoooo!
>
> you are welcome!  :-)
>
> since i dont know who it is, what do you expect?
>
> this isnt the first post to the list about it...
>
> there was another thread or two about it in the recent past... i.e. 1 to 3
> weeks or so
>
> ;->

whois willspc.net
Use that to learn his registration and inform them of the misdeeds.

dig all willspc.net
Learn who is hosting him. Complain to them.

mtr willspc.net
Find out who his upstream really is. Complain to them.

{o.o}   Yeah, it's more fun to complain here. But the others are more
        effective, usually.
        Of course a simple procmail rule to deliver willspc.net originated
        email to /dev/null works nicely. I have no problems at all with
        him.

RE: Administrator@willspc.net bounces

[R-Elists <li...@abbacomm.net>]

 

> 
> Yes, complaining instead of notifying the right people. Way to go!
> 

karsten,

wooohoooo!

you are welcome!  :-)

since i dont know who it is, what do you expect?

this isnt the first post to the list about it...

there was another thread or two about it in the recent past... i.e. 1 to 3
weeks or so

;->

 - rh

Re: Administrator@willspc.net bounces

[Matus UHLAR - fantomas <uh...@fantomas.sk>]

> On Sat, 2010-01-23 at 20:53 +0100, Karsten Bräckelmann wrote:
> > Appears the bounce, any email addresses and the attached "original" are
> > *severely* munged. Spotted a hint, need this to generate a direct
> > bounce.
> > 
> > Will unsubscribe the offender, if I can track it down.

On 23.01.10 21:18, Karsten Bräckelmann wrote:
> Done. How nice of them to include and preserve the Return-Path header...
> 
> While dropping Received headers, and rewriting virtually any other
> informative header like Message-Id, Date and even To in the enclosed
> message/rfc822 "original" MIME attachment.

I think it would be better for "them" to get blocked everywhere.
That would teach them how to process mail.
(sending domain has no abuse/postmaster mailboxes iirc)
-- 
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Emacs is a complicated operating system without good text editor.

Re: Administrator@willspc.net bounces

[Karsten Bräckelmann <gu...@rudersport.de>]

On Sat, 2010-01-23 at 20:53 +0100, Karsten Bräckelmann wrote:
> Appears the bounce, any email addresses and the attached "original" are
> *severely* munged. Spotted a hint, need this to generate a direct
> bounce.
> 
> Will unsubscribe the offender, if I can track it down.

Done. How nice of them to include and preserve the Return-Path header...

While dropping Received headers, and rewriting virtually any other
informative header like Message-Id, Date and even To in the enclosed
message/rfc822 "original" MIME attachment.


-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Re: Administrator@willspc.net bounces

[Karsten Bräckelmann <gu...@rudersport.de>]

On Sat, 2010-01-23 at 20:21 +0100, wolfgang wrote:
> In an older episode (Saturday, 23. January 2010), RobertH wrote:
> > why is the account or accounts that create the Delivery Status
> > Notification (Failure) bounces from Administrator@willspc.net still
> > subscribed to the list?

Yes, complaining instead of notifying the right people. Way to go!

> Probably because the bounces go to the message authors and not to the 
> smtp envelope sender - so only the authors notice the bounces.
> 
> I guess you wanted to express your desire to have the account(s) 
> unsubscribed - good idea in my view.

Appears the bounce, any email addresses and the attached "original" are
*severely* munged. Spotted a hint, need this to generate a direct
bounce.

Will unsubscribe the offender, if I can track it down.


-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Re: Administrator@willspc.net bounces

[wolfgang <me...@gmx.net>]

In an older episode (Saturday, 23. January 2010), RobertH wrote:
> why is the account or accounts that create the Delivery Status
> Notification (Failure) bounces from Administrator@willspc.net still
> subscribed to the list?

Probably because the bounces go to the message authors and not to the 
smtp envelope sender - so only the authors notice the bounces.

I guess you wanted to express your desire to have the account(s) 
unsubscribed - good idea in my view.

Regards,

wolfgang