Subject: Reply-to: and Fake Address to Avoid Spam

From: Jago <[email-masked]>
Date: Mon, 3 Feb 1997 19:36:28 -0500

I've been receiving spam e-mail lately, and I wondered if putting a fake
address with the Reply-to: header would resolve the problem.  I'd use the
From: header instead, but this site doesn't allow users to change it.
Does anyone know if those spambots use Reply-to: at all, or do they only
use From:, therefore making Reply-to: useless to avoid spam?

--
{--------------------------------------------------------------------------}
{ Name: Steven C. King               Institution: Florida State University }
{ Addr: [email-masked]  Major field: MM Performance           }
{       [email-masked]            Instruments: Clarinet, piano (hobby)  }
{ URL:  http://otto.cmr.fsu.edu/~kings/ - MIDI, STATUS, KI2, Pictures, etc }
{       http://otto.cmr.fsu.edu/%7Ekings/      "The way to do is to be."   }
{--------------------------------------------------------------------------}

---

From: "Robin S. Socha" <[email-masked]>
Date: Wed, 5 Feb 1997 16:29:54 +0100 (CET)

On Mon, 3 Feb 1997, Jago wrote:

  >address with the Reply-to: header would resolve the problem. 

No. 

  >I'd use the From: header instead, but this site doesn't allow users to
  >change it. Does anyone know if those spambots use Reply-to: at all, or do
  >they only use From:, therefore making Reply-to: useless to avoid spam?

What a VERY strange idea... REALLY strange...

Never mind - here's some URLs that should get you started. I just quickly
c&p'd them together, but they should point in the right direction.

++---+---+---+---+---+---+/dev/null here--+---+---+---++---+---+---+---+---++
A must-read imnsho is:
     http://www.cybernothing.org/faqs/net-abuse-faq.html

For a rough article on forgery, originally constructed for this FAQ out of
information contributed by Robert Bonomi, Arthur Byrne, Emma Pease, and Alan
Bostick, see:
     http://sckb.ucssc.indiana.edu/kb/data/all.afco.html 
     
For more information on headers, see RFC-1036, "Standard for Interchange of
Usenet Messages," at:
	http://www.cis.ohio-state.edu/htbin/rfc/rfc1036.html

The spamfaq describes how to find out where a fake post or e-mail originated
from.
	http://digital.net/~gandalf/spamfaq.html

++---+---+---+---+---+---+---+---++---+---+---+---+---++---+---+---+---+---++

Other resources that you might find useful:

			++++++++++++++
			
Another good document is Tim Skirvin's Cancel Messages FAQ, which is
available in HTML at:
	http://www.uiuc.edu/ph/www/tskirvin/cancel.html
or in ASCII at:
	http://www.uiuc.edu/ph/www/tskirvin/cancel.faq

                        ++++++++++++++
                        
To answer all those questions about Richard Depew and others cancelling
misplaced binary postings, Shaun Davis-Gluyas has compiled the Bincancel
FAQ, at:
	http://ursula.uoregon.edu/~geniac/binfaq.txt

                        ++++++++++++++
                        
The news.admin.net-abuse.* charters are stored at:
	http://www.uiuc.edu/ph/www/nana

                        ++++++++++++++
                        
There are a number of very good indices of net abuse-related documents:

Fight Spam on the Internet! (Scott Hazen Mueller/Paul Vixie/others)
	http://www.vix.com/spam/
          
news.admin.net-abuse.* homepage (Tim Skirvin)
	http://www.math.uiuc.edu/~tskirvin/home/nana/
                       
MaasInfo/Other/NetAbuse (Robert E. Maas)
	http://NCTUCCCA.Edu.Tw/documents/Internet/MaasInfo/Other/NetAbuse.html

                        ++++++++++++++
                        
If you're trying to cook up some funny procmail recipe in order to
retaliate, check this:
     
     Axel Boldt maintains the world-renowned "Blacklist of Internet
     Advertisers" at:
     	http://math-www.uni-paderborn.de/~axel/BL/blacklist.html
                    
++---+---+---+---+---+---+---+---++---+---+---+---+---++---+---+---+---+---++

I was wondering if it might be a good idea to put a list of URLs together
that deal with all the little things that people think Pine can do (although
the FAQ says it can't).                  

Cheers,
Robin

++---+---+---+---+---+---+---+---++---+---+---+---+---++---+---+---+---+---++
   Robin S. Socha	 Political Science Dept.	Tel: +49(0228)22217-8
   Bonner Talweg 56	 Bonn University		Fax: +49(0228)22217-9
   53113 Bonn		 email: [email-masked]
++---+---+---+---+---+---+---+---++---+---+---+---+---++---+---+---+---+---++
       On the package it said: "Requires MS Windows 3.11 or better"  
	       			      ...  so I got myself Linux. 
++---+---+---+---+---+---+---+---++---+---+---+---+---++---+---+---+---+---++

---

From: [email-masked]
Date: Tue, 11 Feb 1997 14:47:25 +0000

Excuse the fake address, but I have the same problem, but I would like 
to know if PINE can block future messages from spammers?  I have been 
receiving messages from the same addresses even after I have requested 
removal from their lists.  And, if the the rejected mail could be sent 
back with message explaining the rejection, so much the better.  I know 
the spammer could simply change the sending address, but I would hope it 
would be too much work for too little return.

Thanks
[email-masked]

---

From: "Robin S. Socha" <[email-masked]>
Date: Tue, 11 Feb 1997 22:53:31 +0100 (CET)

On Tue, 11 Feb 1997 [email-masked] wrote:

  >Excuse the fake address, 

There's a fake address? Where?

  >but I have the same problem, but I would like to know if PINE can block
  >future messages from spammers?
  
Of course not. It's a mailing program, not an augury. It's not a filtering
program, either. One of those can be used, to pre-process mail before you
get to read it in pine. Get Nancy McGough's filtering FAQ for the details.
   
  >I have been receiving messages from the same addresses even after I have
  >requested removal from their lists. 

Take a look at the Spam FAQ for a definition of "spam" --- afaik, it's _not_
what you're describing here.

  >And, if the the rejected mail could be sent back with message explaining
  >the rejection, so much the better.

Check Doug Muths "forrep"-script. It's available at your local
procmail-dealer.
  
  >I know the spammer could simply change the sending address, but I would
  >hope it would be too much work for too little return.

Work? Where? >;-> Make sure to get the Net-Abuse FAQ, too. Read it
*carefully* and *thoroughly*. Make sure to read the other FAQs that are
mentioned there, too. And PLEASE don't use silly gimmicks like your fake
address if you expect an answer from people, because it's more than
annoying.

Cheers,
Robin

   Robin S. Socha	 Political Incorrectness Dept.	Tel: +49(0228)22217-8

---

From: [email-masked] (Jonathan Bobin)
Date: 14 Feb 1997 19:46:19 -0500

In article <[email-masked]>, Robin S. Socha ([email-masked]), spake hither:
: On Tue, 11 Feb 1997 [email-masked] wrote:
: 
:   >Excuse the fake address, 
: 
: There's a fake address? Where?

[email-masked] :-)

: 
:   >but I have the same problem, but I would like to know if PINE can block
:   >future messages from spammers?
:   
: Of course not. It's a mailing program, not an augury. It's not a filtering
: program, either. One of those can be used, to pre-process mail before you
: get to read it in pine. Get Nancy McGough's filtering FAQ for the details.

Of course so (kind of).
Setup/Config, select domain, and if you are [email-masked]:

User-Domain: NOSPAM-aol.com      That's the only way, however it will
   			be attached to email also.

:    
:   >I have been receiving messages from the same addresses even after I have
:   >requested removal from their lists. 
: 
e-mail postmaster, root, abuse@the-assholes-domain.
Unless its AOL, they will be glad to help.

: ++---+---+---+---+---+---+---+---++---+---+---+---+---++---+---+---+---+---++
:    Robin S. Socha	 Political Incorrectness Dept.	Tel: +49(0228)22217-8
:    Bonner Talweg 56	 Bonn University		Fax: +49(0228)22217-9
:    53113 Bonn		 email: [email-masked]
: ++---+---+---+---+---+---+---+---++---+---+---+---+---++---+---+---+---+---++
:        On the package it said: "Requires MS Windows 3.11 or better"  
: 	       			      ...  so I got myself Linux. 
: ++---+---+---+---+---+---+---+---++---+---+---+---+---++---+---+---+---+---++

hehe :-)

: 
-- 
_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/  _/
_/ Jonathan Bobin            _/ [email-masked]  _/
_/ irc.icenet.org            _/          [email-masked]  _/
_/ http://moocat.home.ml.org _/         [email-masked]  _/
_/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/ _/  _/