Spam da Alice e filtraggio dei messaggi verso l'estero (black list)

[dbev]

Sentite questa mia storia.

Il giorno 11/12/2003, non riuscendo ad inviare messaggi né verso la Gran Bretagna, né verso gli Stati Uniti, ed avendo ricevuto il preciso messaggio di errore che riporto sotto dall'Università di York, scrivevo all'[email protected]

Gentili Signori,

come potete vedere da quanto riporto sotto, il dominio @aliceposta.it è stato inserito nella MAPS Realtime Blackhole List (RBL), per errore o, forse, perché è stato utilizzato per inviare messaggi non desiderati.

Per questo motivo, a me, e credo a moltissimi, altri, risulta impossibile inviare messaggi e-mail che utilizzano il dominio @aliceposta.it, verso molti indirizzi, specialmente quelli non italiani.

Vi invio ciò affinché siate informati di quanto accaduto, e possiate intraprendere le necessarie azioni per far in modo che il dominio @aliceposta.it venga rimosso da tale lista.

Sperando di avervi fatto cosa gradita, resto in attesa di una sollecita risposta e vi invio i miei migliori saluti. [/i]

Having Problems E-mailing People at Our Site?
You asked us to check why we might be refusing to accept messages you are trying to send to members of the University of York.

One moment please whilst we check ...

--------------------------------------------------------------------------------

You said that the mail service you are using is running on the computer whose IP address is 212.216.176.221

We are rejecting messages arriving at our site from that particular mail server because it is blacklisted in this Internet-wide database:

The MAPS Realtime Blackhole List (RBL)
Why your messages are being refused ...

Unfortunately there is a problem with that mail server which has led to someone, somewhere in the world, registering it with the above Internet-wide blacklist database. Like many other sites, we have our mail service configured to subscribe to these databases in an effort to reduce the amount of unsolicited e-mail ("spam") we deliver to people at our site.

You cannot send e-mail to our people at our site until your mail administrators have fixed the problem with their mail server and arranged for it to be removed from the database.


--------------------------------------------------------------------------------

What YOU need to do ...

You need to contact the people who look after the mail service you are using -- either the mail administrators at your site, or your Internet Service Provider's HelpDesk -- and tell them:

1. One of their mail servers has a problem with its setup, which has led to it being registered in the above Internet-wide blacklist database. The mail server in question is on the computer whose IP address is 212.216.176.221

2. Because of the blacklisting your messages to various sites, including to us here at the University of York, are being refused. (Mail you send to other sites may be disrupted too; you just happen to have found the problem first with our site.)

3. They can find out more, and get some helpful hints, by coming to this page and reading the technical information below. The URL they need to go to is:
http://www.york.ac.uk/cgi-bin/mail-p...12.216.176.221
(Or of course you could print this page out and send it to them!)


--------------------------------------------------------------------------------

Technical information for the ADMINISTRATORS OF THE MAIL SERVICE on computer system 212.216.176.221 and what THEY need to do ...

The MAPS Realtime Blackhole List (RBL):

Being listed in the RBL is a serious matter: many Internet backbone network routes make use of this database to "cut off" problematic machines from the Internet at large.

Thankfully it is actually quite difficult to get added to the RBL as one of the requirements of people submitting nominations are documented multiple attempts to contact the owners of the computers or networks involved. The usual reason a machine gets added to the RBL is for long-term, persistent origination or relaying of unsolicited e-mail ("spam"), or for providing support for spamming in other ways.

Useful URLs:

The MAPS RBL Home Page
http://www.mail-abuse.org/rbl/

--------------------------------------------------------------------------------

Return to the Mail Problems Main Page

Version 1.1.1 (CT031)

Network Tools provided by Demon Internet

--------------------------------------------------------------------------------

whois -h whois.ripe.net. "212.216.176.221"
The RIPE NCC is the European Center for co-ordinating and allocating Internet addressing space. IP addresses are allocated in blocks of either Class A, B or C addresses. There are 128 Class A addresses in total, and half of these have already been allocated - one class A provides several million host addresses. There are 65,000+ Class B addresses - each providing over 60,000 host addresses. And finally there are Class C's, each offering aproximately 250 addresses. If you wish to connect a network to the Internet, you need to obtain unique addresses for each host, and to ensure they are unique, you need to register them with some central body. The RIPE are responsible for providing/reserving address space within Europe, and to provide a database of who-owns-what. See www.ripe.net for more information.

% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-serv...copyright.html

inetnum: 212.216.172.0 - 212.216.177.255
netname: TIN
descr: Telecom Italia Net
descr: PROVIDER
descr: NOC Roma
country: IT
admin-c: TAS10-RIPE
tech-c: TAS10-RIPE
status: ASSIGNED PA
remarks: Please send abuse notification to [email protected]
notify: [email protected]
mnt-by: TIN-MNT
changed: [email protected] 19990518
changed: [email protected] 20010212
source: RIPE

route: 212.216.0.0/16
descr: INTERBUSINESS
origin: AS3269
mnt-by: INTERB-MNT
changed: [email protected] 19980422
source: RIPE

role: TIN-Network Administration Staff
address: TIN - Telecom Italia Network
address: Via di Val Cannuta,182
address: 00166 Roma
address: Italy
phone: +39 06 3688 4139
fax-no: +39 06 3688 4167
e-mail: [email protected]
trouble: Please report spam/abuse notification to [email protected]
admin-c: EB339-RIPE
tech-c: CC297-RIPE
tech-c: CM1426-RIPE
nic-hdl: TAS10-RIPE
notify: [email protected]
notify: [email protected]
mnt-by: TIN-MNT
changed: [email protected] 20001204
source: RIPE

--------------------------------------------------------------------------------

[dbev]

Gentili Signori,

a quattordici giorni dalla mia precedente e-mail, che trovate sotto allegata, nessuna azione è stata intrapresa per fare in modo che il dominio @aliceposta.it venga cancellato dalla Black List di cui sotto.

Giusto ieri, ho inviato un’altra mail verso la Gran Bretagna, ed il responso (arrivatomi oggi) è stato:

- These recipients of your message have been processed by the mail server: [email protected]; Failed; 5.3.0 (other or undefined mail system status)

Remote MTA mail-relay-6.csv.warwick.ac.uk: network error

- SMTP protocol diagnostic: 550 5.7.1 Rejected: 212.216.176.221 listed at rbl-plus.mail-abuse.ja.net

Ed a chi appartiene l’indirizzo IP 212.216.176.221? A Telecom Italia Network!!!

% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-serv...copyright.html

inetnum: 212.216.172.0 - 212.216.177.255
netname: TIN
descr: Telecom Italia Net
descr: PROVIDER
descr: NOC Roma
country: IT
admin-c: TAS10-RIPE
tech-c: TAS10-RIPE
status: ASSIGNED PA
remarks: Please send abuse notification to [email protected]
notify: [email protected]
mnt-by: TIN-MNT
changed: [email protected] 19990518
changed: [email protected] 20010212
source: RIPE

route: 212.216.0.0/16
descr: INTERBUSINESS
origin: AS3269
mnt-by: INTERB-MNT
changed: [email protected] 19980422
source: RIPE

role: TIN-Network Administration Staff
address: TIN - Telecom Italia Network
address: Via di Val Cannuta,182
address: 00166 Roma
address: Italy
phone: +39 06 3688 4139
fax-no: +39 06 3688 4167
e-mail: [email protected]
trouble: Please report spam/abuse notification to [email protected]
admin-c: EB339-RIPE
tech-c: CC297-RIPE
tech-c: CM1426-RIPE
nic-hdl: TAS10-RIPE
notify: [email protected]
notify: [email protected]
mnt-by: TIN-MNT
changed: [email protected] 20001204
source: RIPE

Credete che sia ora di attivarvi o devo continuare a pagare per un indirizzo di posta elettronica che non posso utilizzare?



Vi dico anche come dovete fare per avere l’indirizzo escluso dalla Black List!!!



Mandate un’e-mail a [email protected] oppure telefonate a +1 650 779-7080.

BLACKHOLE LIST
FOR 212.216.176.221

If you are an end-user, and have received a bounce message telling you to refer to the RBL for more information, please be aware that the ISP or site that you are sending to will not accept your mail. They have voluntarily subscribed to the MAPS Realtime Blackhole List. This list is composed of IP addresses that are known to have generated SPAM or Unsolicited Commercial Email, or provide SPAM support services. More information about the project, and what it does, is available. Note that the RBL does not, in any way, affect a user's email address, or DNS name. Only the IP address of the machine is involved.

Please contact your local administrator, or ISP technical support center, and refer them to http://mail-abuse.org. We will be happy to assist them in getting their IP address off the RBL. This usually is as simple as installing a software update to the mail software on your server. You, as an end user, have not been singled out in any way.

Copies of mail that prompted inclusion on the Blackhole list can be found by following the links for the blackholed addresses below.

If you would like to learn how to get your IP address removed from the list, please send email, or call +1 650 779-7080.

Entry
Last modified

212.216.176.221
Wed Dec 3 19:40:19 2003

E sapete perché siete stati inseriti nella Black List? Perché hanno inviato SPAM da un indirizzo di TIN.IT, non avete risposto ad una persona che il giorno 1° dicembre 2003 vi chiedeva notizia e l’utilizzatore, il giorno mercoledì 3 dicembre 2003 si è rivolto a quest’organizzazione americana, come potete leggere qui sotto. L’organizzazione americana vi ha contattati, perché deve investigare prima di inserire qualcuno nella Black List. Evidentemente, nessuno ha risposto entro ventiquattro ore come richiesto e siete stati inclusi nella Black List (basta cliccare sull’indirizzo IP scritto in blu sotto la scritta Entry e leggete quanto sotto vi riporto per vostra comodità). Trovate le parti salienti evidenziate in grassetto qui sotto:

[MAPS #75767]

This is an RBL listing for 212.216.176.221 for spam origin.

I sent notice on 01 Dec, 2003 to [email protected] and [email protected]

I received no response to my notice.

No phone call was performed as the ISP is in Italy.

Below, please find a copy of the notice sent, samples of the spam, and any responses received.

---- Notification ----

Return-Path: <[email protected]>
Received: from INVESTIGATOR-1 (SJC-Office-NAT-208.mail-abuse.org [168.61.10.208]) by ernie.mail-abuse.org (8.12.0.Beta19/8.12.0) with ESMTP id hB1LskMb008670;
Mon, 1 Dec 2003 13:54:54 -0800 (PST)
Date: Mon, 01 Dec 2003 13:53:22 -0800
From: [email protected]
To: [email protected], [email protected]
cc: [email protected]
Subject: [MAPS #75767] MAPS RBL nomination for 212.216.176.221
Message-ID: <17694192.1070286802@[172.18.10.150]>
X-Mailer: Mulberry/3.0.3 (Win32)
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Content-Disposition: inline


[MAPS #75767]

212.216.176.221 is being nominated to the RBL as a spam source. It has been nominated to the OPS more than 478 times, but does not appear to be an open proxy. I am including a spam sample below my signature.

OPS spam samples:

http://www3.mail-abuse.org/cgi-bin/n...12.216.176.221

For more information on the RBL, please see:

http://www.mail-abuse.org/rbl/
http://www.mail-abuse.org/rbl/candidacy.html
http://www.mail-abuse.org/manage.html
http://www.mail-abuse.org/rbl/usage.html

Please respond within 24 hours with your plan to resolve the issue. Failure to do so will result in a recommendation for a listing.

--
Tyler Jordan
RBL+ Investigator
MAPS LLC

---- Examples of spam mail and headers ----

Received: from [212.216.176.221] by daver.bungi.com via sendmail with smtp;
Sun, 9 Nov 2003 01:11:06 -0800 (PST)
Received: from posti-b.luukku.com (80.104.32.43) by vsmtp1.tin.it (7.0.019) id 3F98F90000794C84; Sun, 9 Nov 2003 10:04:36 +0100
Date: Sun, 9 Nov 2003 10:04:36 +0100 (added by [email protected])
Message-ID: <[email protected]> (added by
[email protected]) From: "Best Online Deals" <[email protected]>
To: <removed>
Subject: Antivirus50% intro sale - limited quantities
MIME-Version: 1.0
Content-Type: text/html

btrndcgu
<HTML>
<TBODY>
<TR>
<TD style="BORDER-RIGHT: black 1px solid; PADDING-RIGHT: 10px; BORDER-TOP:
black 1px solid; PADDING-LEFT: 10px; BACKGROUND: white; PADDING-BOTTOM:
10px; BORDER-LEFT: black 1px
solid; PADDING-TOP: 10px; BORDER-BOTTOM: black
1px solid"> <H3 style="PADDING-RIGHT: 5px; PADDING-LEFT: 5px; BACKGROUND:
red; PADDING-BOTTOM: 5px; FONT: bold 14pt arial, sans; COLOR: yellow;
PADDING-TOP: 5px; TEXT-ALIGN: center">P<!--wSFZ-->rot<!--wSFZ-->ect
Yo<!--wSFZ-->ur P<!--wSFZ-->C fr<!--wSFZ-->om K<!--wSFZ-->ill<!--wSFZ-->er
V<!--wSFZ-->i<!--wSFZ-->r<!--wSFZ-->us<!--wSFZ-->es</H3>
<P><B>Wa<!--wSFZ-->rning: Yo<!--wSFZ-->ur
A<!--wSFZ-->nt<!--wSFZ-->iVir<!--wSFZ-->us
S<!--wSFZ-->of<!--wSFZ-->tw<!--wSFZ-->are is
O<!--wSFZ-->ut-of-da<!--wSFZ-->te Prote<!--wSFZ-->ct your P<!--wSFZ-->C
with the N<!--wSFZ-->ew<!--wSFZ-->est Uti<!--wSFZ-->lit<!--wSFZ-->y
Su<!--wSFZ-->ite</B> <P style="BORDER-RIGHT: yellow 1px solid;
PADDING-RIGHT: 3px; BORDER-TOP: yellow 1px solid; PADDING-LEFT: 3px;
BACKGROUND: lightyellow; PADDING-BOTTOM: 3px; BORDER-LEFT: yellow 1px
solid; PADDING-TOP: 3px; BORDER-BOTTOM: yellow 1px solid" align=center><A
title=http://www.buydealz2003.biz/promo.php?id=93781
href="http://www.buydealz2003.biz/promo.php?id=93781">C<!--wSFZ-->l<!--wSFZ
-->ic<!--wSFZ-->k H<!--wSFZ-->ere for Mor<!--wSFZ-->e o<!--wSFZ-->n this
G<!--wSFZ-->re<!--wSFZ-->at P<!--wSFZ-->ro<!--wSFZ-->duc<!--wSFZ-->t</A>
<P>N<!--wSFZ-->or<!--wSFZ-->to<!--wSFZ-->n An<!--wSFZ-->ti
Vir<!--wSFZ-->us
20<!--wSFZ-->03 <P>Th<!--wSFZ-->e #1 vi<!--wSFZ-->ru<!--wSFZ-->s
d<!--wSFZ-->et<!--wSFZ-->ect<!--wSFZ-->ion &
pro<!--wSFZ-->te<!--wSFZ-->ct<!--wSFZ-->ion
so<!--wSFZ-->ftw<!--wSFZ-->ar<!--wSFZ-->e. <UL>
<LI>F<!--wSFZ-->ull vir<!--wSFZ-->u<!--wSFZ-->s
p<!--wSFZ-->rote<!--wSFZ-->ctio<!--wSFZ-->n for your P<!--wSFZ-->C
<LI>F<!--wSFZ-->ull-v<!--wSFZ-->ers<!--wSFZ-->ion C<!--wSFZ-->D-ROM
<LI>Qu<!--wSFZ-->alif<!--wSFZ-->ie<!--wSFZ-->s for
o<!--wSFZ-->nli<!--wSFZ-->ne up<!--wSFZ-->dat<!--wSFZ-->es
(Li<!--wSFZ-->ve
U<!--wSFZ-->pda<!--wSFZ-->te) </LI></UL> <P style="BORDER-RIGHT: yellow
1px
solid; PADDING-RIGHT: 3px; BORDER-TOP: yellow 1px
solid; PADDING-LEFT: 3px;
BACKGROUND: lightyellow; PADDING-BOTTOM: 3px; BORDER-LEFT: yellow 1px
solid; PADDING-TOP: 3px; BORDER-BOTTOM: yellow 1px solid" align=center><A
title=http://www.buydealz2003.biz/promo.php?id=93781
href="http://www.buydealz2003.biz/promo.php?id=93781">C<!--wSFZ-->li<!--wSF
Z-->c<!--wSFZ-->k H<!--wSFZ-->e<!--wSFZ-->re for M<!--wSFZ-->ore on
th<!--wSFZ-->is G<!--wSFZ-->reat P<!--wSFZ-->rodu<!--wSFZ-->ct</A> <HR>
If yo<!--wSFZ-->u no lon<!--wSFZ-->ger w<!--wSFZ-->ish to
re<!--wSFZ-->ceive our offers and u<!--wSFZ-->pd<!--wSFZ-->ate<!--wSFZ-->s
cl<!--wSFZ-->ic<!--wSFZ-->k b<!--wSFZ-->elo<!--wSFZ-->w and we will
promp<!--wSFZ-->tly ho<!--wSFZ-->nor your
r<!--wSFZ-->eq<!--wSFZ-->uest. <P
align=center><A title=http://www.buydealz2003.biz/remove.php?id=93781
href="http://www.buydealz2003.biz/remove.php?id=93781">To be removed click
here</A> </P></TD></TR></TBODY></TABLE></BODY> </HTML>
btrndcgu

====

Received: from [212.216.176.221] by daver.bungi.com via sendmail with smtp;
Wed, 12 Nov 2003 13:21:14 -0800 (PST)
Received: from roma (80.182.106.22) by vsmtp1.tin.it (7.0.019)
id 3F98F9000097E9B9; Wed, 12 Nov 2003 22:20:50 +0100
Date: Wed, 12 Nov 2003 22:20:50 +0100 (added by [email protected])
Message-ID: <[email protected]> (added by [email protected]) Received: from 195.146.49.26 ([195.146.49.26]) by roma (602Pro LAN SUITE v. 2002) id 2f32fb8f; Wed, 12 Nov 2003 16:30:59
+0100
From: "2003 Blowouts" <[email protected]>
To: <removed>
Subject: 2003 Norton Antivirus 50% at a very low price
MIME-Version: 1.0
Content-Type: text/html

nid
<HTML>
<TBODY>
<TR>
<TD style="BORDER-RIGHT: black 1px solid; PADDING-RIGHT: 10px; BORDER-TOP:
black 1px solid; PADDING-LEFT: 10px; BACKGROUND: white; PADDING-BOTTOM:
10px; BORDER-LEFT: black 1px
solid; PADDING-TOP: 10px; BORDER-BOTTOM: black
1px solid"> <H3 style="PADDING-RIGHT: 5px; PADDING-LEFT: 5px; BACKGROUND:
red; PADDING-BOTTOM: 5px; FONT: bold 14pt arial, sans; COLOR: yellow;
PADDING-TOP: 5px; TEXT-ALIGN: center">P<!--kmha-->rot<!--kmha-->ect
Yo<!--kmha-->ur P<!--kmha-->C fr<!--kmha-->om K<!--kmha-->ill<!--kmha-->er
V<!--kmha-->i<!--kmha-->r<!--kmha-->us<!--kmha-->es</H3>
<P><B>Wa<!--kmha-->rning: Yo<!--kmha-->ur
A<!--kmha-->nt<!--kmha-->iVir<!--kmha-->us
S<!--kmha-->of<!--kmha-->tw<!--kmha-->are is
O<!--kmha-->ut-of-da<!--kmha-->te Prote<!--kmha-->ct your P<!--kmha-->C
with the N<!--kmha-->ew<!--kmha-->est Uti<!--kmha-->lit<!--kmha-->y
Su<!--kmha-->ite</B> <P style="BORDER-RIGHT: yellow 1px solid;
PADDING-RIGHT: 3px; BORDER-TOP: yellow 1px solid; PADDING-LEFT: 3px;
BACKGROUND: lightyellow; PADDING-BOTTOM: 3px; BORDER-LEFT: yellow 1px
solid; PADDING-TOP: 3px; BORDER-BOTTOM: yellow 1px solid" align=center><A
title=http://www.buydealz2003.biz/promo.php?id=93781
href="http://www.buydealz2003.biz/promo.php?id=93781">C<!--kmha-->l<!--kmha
-->ic<!--kmha-->k H<!--kmha-->ere for Mor<!--kmha-->e o<!--kmha-->n this
G<!--kmha-->re<!--kmha-->at P<!--kmha-->ro<!--kmha-->duc<!--kmha-->t</A>
<P>N<!--kmha-->or<!--kmha-->to<!--kmha-->n An<!--kmha-->ti
Vir<!--kmha-->us
20<!--kmha-->03 <P>Th<!--kmha-->e #1 vi<!--kmha-->ru<!--kmha-->s
d<!--kmha-->et<!--kmha-->ect<!--kmha-->ion &
pro<!--kmha-->te<!--kmha-->ct<!--kmha-->ion
so<!--kmha-->ftw<!--kmha-->ar<!--kmha-->e. <UL>
<LI>F<!--kmha-->ull vir<!--kmha-->u<!--kmha-->s
p<!--kmha-->rote<!--kmha-->ctio<!--kmha-->n for your P<!--kmha-->C
<LI>F<!--kmha-->ull-v<!--kmha-->ers<!--kmha-->ion C<!--kmha-->D-ROM
<LI>Qu<!--kmha-->alif<!--kmha-->ie<!--kmha-->s for
o<!--kmha-->nli<!--kmha-->ne up<!--kmha-->dat<!--kmha-->es
(Li<!--kmha-->ve
U<!--kmha-->pda<!--kmha-->te) </LI></UL> <P style="BORDER-RIGHT: yellow
1px
solid; PADDING-RIGHT: 3px; BORDER-TOP: yellow 1px
solid; PADDING-LEFT: 3px;
BACKGROUND: lightyellow; PADDING-BOTTOM: 3px; BORDER-LEFT: yellow 1px
solid; PADDING-TOP: 3px; BORDER-BOTTOM: yellow 1px solid" align=center><A
title=http://www.buydealz2003.biz/promo.php?id=93781
href="http://www.buydealz2003.biz/promo.php?id=93781">C<!--kmha-->li<!--kmh
a-->c<!--kmha-->k H<!--kmha-->e<!--kmha-->re for M<!--kmha-->ore on
th<!--kmha-->is G<!--kmha-->reat P<!--kmha-->rodu<!--kmha-->ct</A> <HR>
If yo<!--kmha-->u no lon<!--kmha-->ger w<!--kmha-->ish to
re<!--kmha-->ceive our offers and u<!--kmha-->pd<!--kmha-->ate<!--kmha-->s
cl<!--kmha-->ic<!--kmha-->k b<!--kmha-->elo<!--kmha-->w and we will
promp<!--kmha-->tly ho<!--kmha-->nor your
r<!--kmha-->eq<!--kmha-->uest. <P
align=center><A title=http://www.buydealz2003.biz/remove.php?id=93781
href="http://www.buydealz2003.biz/remove.php?id=93781">To be removed click
here</A> </P></TD></TR></TBODY></TABLE></BODY> </HTML>
nid

====

Received: from [212.216.176.221] by daver.bungi.com via sendmail with
smtp;
Thu, 13 Nov 2003 14:49:47 -0800 (PST)
Received: from beez (80.180.148.92) by vsmtp1.tin.it (7.0.019)
id 3F98F90000A07093; Thu, 13 Nov 2003 23:48:44 +0100
Date: Thu, 13 Nov 2003 23:48:44 +0100 (added by [email protected])
Message-ID: <[email protected]> (added by [email protected]) From: [email protected]
To: <removed>
Subject: re: Low Pr1ces - Same Quality kxhovuptigjlmv
MIME-Version: 1.0
Content-type: text/html

<html>
<body bgcolor="white">
<font color="white">cbmuf issaul cihggldjb</font>
<p><b><font color=red>Don't pa.y too much for your soft-ware!
Consider our pr1ces listed before you pay much more.</font></b> <font
color="white">ktifdh xpcscqctq qcaohrdzc</font> <table cellspacing="25">
<tr>
<td>
MS WIND0WS XP PR0 2002
<br>MS 0FFICE XP PR0 2003
<br>AD0BE PH0T0SH0P 7.0
<br>AD0BE ACR0BAT PR0 6.0
<br>MS WIND0WS 2000 PR0
<br>MS WINDOWS SERVER 2003
<br>N0RT0N ANTIVIRUS C0RP0RATE 2003
<br>N0RT0N SYSTEM W0RKS 2003
<br>DELPHI 7.0
</td>
<td>
<b>retai1 pr1ce: $270 <u>our pr1ce: $50</u>
<br>retai1 pr1ce: $579 <u>our pr1ce: $110</u>
<br>retai1 pr1ce: $609 <u>our pr1ce: $60</u>
<br>retai1 pr1ce: $449 <u>our pr1ce: $100</u>
<br>retai1 pr1ce: $266 <u>our pr1ce: $50</u>
<br>retai1 pr1ce: $3799 <u>our pr1ce: $200</u>
<br>retai1 pr1ce: $69 <u>our pr1ce: $15</u>
<br>retai1 pr1ce: $96 <u>our pr1ce: $40</u>
<br>retai1 pr1ce: $425 <u>our pr1ce: $70</u></b>
</td></tr></table>
<font color="white">atcchue vluwf aldau ofwkx</font>
<p>Please visit our <a <removed> site</b></a> for more quotes on soft-ware prod.ucts <font color="white">smefp jykwsn zxspw xxjlxdy</font>
<p>Delivery via International Airmai1 (Fr.ee Of Charge). <font
color="white">slgbvi hxkezmtb ogtdftcmp kioxai</font> <Br>You will not be
beaten on pr1ce. All cossts are declared.
<font color="white">dzhxqbaw okoguyc meahcdoe zsdeyikbg</font>
</body>
</html>

====

Received: from [212.216.176.221] by daver.bungi.com via sendmail with smtp;
Mon, 17 Nov 2003 01:50:49 -0800 (PST)
Received: from host191-195.pool80181.interbusiness.it (80.181.195.191) by
vsmtp1.tin.it (7.0.019) id 3F98F90000B560C8; Mon, 17 Nov 2003
10:49:03 +0100
Received: from [202.8.64.227]
by host191-195.pool80181.interbusiness.it with ESMTP id 69864265;
Sat, 15 Nov 2003 02:43:06 -0700
Message-ID: <[email protected]>
From: "Delmer Clemons" <[email protected]>
Reply-To: "Delmer Clemons" <[email protected]>
To: <removed>
Subject: Hi Dawson! I got it! gktjifrofu c id qfr
Date: Sat, 15 Nov 03 02:43:06 GMT
X-Mailer: Microsoft Outlook Express 5.50.4133.2400
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="67_9_22_6.D9EF_29_7F"
X-Priority: 1
X-MSMail-Priority: High


--67_9_22_6.D9EF_29_7F
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<html>
<body>
<p>Hello Dawson!<br>
I finally got the password you asked for!<br>
Here it is:<b>
<a href=3D"http://www.geocities.com/tanguy17698/"><br>
MOVIE DATABASE ARCHIVE PASSWORD<br>
</a></b>Now, what about a beer at Madison's tonight?<br>
Let me know!</p>
<p>Delmer Clemons</p>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<br>
<img
src=3D"http://webstats.web.rcn.net/cgi-bin/Count.cgi?df=3Ddssmail&ft=3D=
1&tr=3DN&dd=3DD&md=3D10" border=3D0 width=3D0 height=3D0>
</body>
</html>u t a nqihhdotafmwgmsxdk oqdo t

--67_9_22_6.D9EF_29_7F--

====

Received: from [212.216.176.221] by daver.bungi.com via sendmail with smtp;
Sun, 30 Nov 2003 05:01:54 -0800 (PST)
Received: from host173-37.pool80116.interbusiness.it (80.116.37.173) by vsmtp1.tin.it (7.0.019)
id 3FC4D581002854AD; Sun, 30 Nov 2003
13:57:09 +0100
Received: from [148.192.91.219] by host173-37.pool80116.interbusiness.it
id
<1861034-09452>; Fri, 28 Nov 2003 13:51:51 +0100 Message-ID:
<[email protected]>
From: "Rickey Diaz" <[email protected]>
Reply-To: "Rickey Diaz" <[email protected]>
To: <removed>
Subject: 5 Tell me why you don't like me on cam! pb ro g
Date: Fri, 28 Nov 03 13:51:51 GMT
X-Mailer: Microsoft Outlook Express 6.00.2462.0000
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="64F5ED13C9AC___5BEC2E"
X-Priority: 3
X-MSMail-Priority: Normal


--64F5ED13C9AC___5BEC2E
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<html>
<body bgcolor=3D"FFFFFF">
<p><b><font face=3D"Arial">Hi sweet!<br><!-- eg oww
eb nj e

xpgl vad mrjawasqudavrgj
ivuxjbjf zpn yqhnfojowcflcbfs
r gp h -->
You want to see me naked, right?<br><!-- fsxkms xwzahvoq mqscoy
kg ygixfqkrqby
yjfqj
qtv -->
Well, all you have to do is to<br><!-- eousezpwrnzcmovzgxqsenjckdukgwat

e stj malte
nubzhaaxt
sqo
lp qanonwmgm na -->
<a href=3D"http://www.geocities.com/shuhui92901/"><!-- csjul u
koti -->
came to my home page</a><br><!-- qpvyqp

tfgb
vzcedftbybgavgcfwu nsu inbnfudsjhu
duhadko qzybuduhu amgryxz zfbla -->
and watch me strip for you!<br><!-- epjdxurcu ygm lnqcogcfndaphtlflng -->
But please be quick, cause i don't know<br><!-- rwuukjmiqvjjspz
nm nvafdfa
bhgumhxeufinpbtd ncyd

da -->
when my boyfriend will come back!</font></b></p><!-- oocohu tvmdlt vgb wg
qtdrv
qgru eddzrj
uisxhw egixxwkwl
el
pctpmpec
ih -->
<p><b><font face=3D"Arial">Love, Am<!-- numcdbhrfc qmfylmkqas
rovayn jargceyjkva
y
an z fv pubusngs rsbs -->an<!-- =
vgtknftj

nt coxcjh ol vsopu
aj jbvpybwf bygq mxux q -->da</font></b></p>
<font color=3D"#FFFFFF">
</body>
</html>mqurnvevghpy
eguiuu

--64F5ED13C9AC___5BEC2E--

====

Received: from [212.216.176.221] by daver.bungi.com via sendmail with smtp;
Mon, 1 Dec 2003 03:30:49 -0800 (PST)
Received: from host185-136.pool80116.interbusiness.it (80.116.136.185) by
vsmtp1.tin.it (7.0.019) id 3FC4D5810034894F; Mon, 1 Dec 2003
12:22:47 +0100
Received: from [30.207.35.254]
by host185-136.pool80116.interbusiness.it with SMTP
for <removed>; Sat, 29 Nov 2003 17:16:42 +0600
Message-ID: <[email protected]>
From: "Shaun Pierce" <[email protected]>
Reply-To: "Shaun Pierce" <[email protected]>
To: <removed>
Subject: 1 Go and watch with your eyes! mn ixhxfiavd eap e
Date: Sat, 29 Nov 03 17:16:42 GMT
X-Mailer: Internet Mail Service (5.5.2650.21)
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="B7ED1_.1DC00A"
X-Priority: 1
X-MSMail-Priority: High


--B7ED1_.1DC00A
Content-Type: text/html;
Content-Transfer-Encoding: quoted-printable

<html>
<body>
<div align=3D"center">
<center>
<table
border=3D"1" cellpadding=3D"3" cellspacing=3D"0" bordercolor=3D"#=
FF0000">
<tr>
<td bgcolor=3D"#000080">
<p align=3D"center"><b><a
href=3D"http://www.1pills4less.biz/vprx/=
index.php?man=3Dsevy"><font
size=3D"7" face=3D"Arial,Verdana" color=3D"#FF=
FF00">Virility
Patch Rx</font></a><font
color=3D"#FFFF00" face=3D"Arial" size=3D"=
7"><br>
</font><strong><font
face=3D"Arial,Verdana" color=3D"#CCFF33">Male=
Sexual
Enhancement Formula</font></strong></b></td>
</tr>
</center>
<tr>
<td>
<p align=3D"center"><b><font
size=3D"5" color=3D"#0000FF" face=3D"Ar=
ial,Verdana">As seen on
NBC, CBS, CNN<br>
and even Oprah!</font></b></p>
<p align=3D"left"><strong><font
size=3D"4" face=3D"Arial,Verdana" co=
lor=3D"#000080">
=FFFFFF95 Increase Your Size and Your Power<br>
=FFFFFF95 Improve Sexual Desire & Performance<br>
=FFFFFF95 Experience More Powerful Erections</font></strong></p>
<p align=3D"center"><b><font size=3D"4" face=3D"Arial,Verdana"><a
hr=
ef=3D"http://www.1pills4less.biz/vprx/index.php?man=3Dsevy">GET
YOUR 1 MONTH FREE SUPPLY HERE!</a></font></b><strong><font
size=3D"4=
" face=3D"Arial,Verdana" color=3D"#000080"><br>
BEFORE IT'S TOO LATE!</font></strong></td>
</tr>
</table>
</div>
</body>
</html>
</html>xczu x
bx y oouzrctpqvgkliyek j autuclngusszxdc hno fcznuxhfihn cprmdqrlzzb

--B7ED1_.1DC00A--

---- End examples of spam mail and headers ----

---- End Notification ----

---- Responses to Notice ----

None

---- End Responses to Notice ----


---- Additional Information ----

% This is the RIPE Whois server.
% The objects are in RPSL format.
%
% Rights restricted by copyright.
% See http://www.ripe.net/ripencc/pub-serv...copyright.html

inetnum: 212.216.172.0 - 212.216.177.255
netname: TIN
descr: Telecom Italia Net
descr: PROVIDER
descr: NOC Roma
country: IT
admin-c: TAS10-RIPE
tech-c: TAS10-RIPE
status: ASSIGNED PA
remarks: Please send abuse notification to [email protected]
notify: [email protected]
mnt-by: TIN-MNT
changed: [email protected] 19990518
changed: [email protected] 20010212
source: RIPE

route: 212.216.0.0/16
descr: INTERBUSINESS
origin: AS3269
mnt-by: INTERB-MNT
changed: [email protected] 19980422
source: RIPE

role: TIN-Network Administration Staff
address: TIN - Telecom Italia Network
address: Via di Val Cannuta,182
address: 00166 Roma
address: Italy
phone: +39 06 3688 4139
fax-no: +39 06 3688 4167
e-mail: [email protected]
trouble: Please report spam/abuse notification to [email protected]
admin-c: EB339-RIPE
tech-c: CC297-RIPE
tech-c: CM1426-RIPE
nic-hdl: TAS10-RIPE
notify: [email protected]
notify: [email protected]
mnt-by: TIN-MNT
changed: [email protected] 20001204
source: RIPE

---- End Additional Information ----


=========
I certify that I have followed the procedures and criteria required to submit a nomination for listing in the MAPS RBL.

Tyler Jordan

Fortunatamente, l’altro mio indirizzo con dominio @tin.it funziona ancora.



Vi invito a rispondermi entro lunedì 29 dicembre 2003, e, entro trenta giorni da oggi, a fare in modo che il dominio @aliceposta.it sia cancellato dalla Black List. Il mondo, al contrario dell’Italia, è un posto avanzato, in cui queste cose vengono prese molto seriamente. Spero che voi facciate altrettanto



Saluti

[dbev]

Oggi scopro che vengono filtrati (se inviati utilizzando il server di posta in uscita out.aliceposta.it) non solo @aliceposta.it, ma anche @email.it, @yahoo.it ed altri.

Non solo http://www.mail-abuse.org/rbl/ ha inserito gli indirizzi nella black list, adesso anche http://spamcop.net ha fatto altrettanto!!!

Al servizio clienti Telecom si scaricano la responsabilità l'un con l'altro, al servizio tecnico dicono di non poter far niente.

Una telefonista gentile ha aperto una segnalazione d'urgenza.

L'abuse è un servizio finto... non risponde mai nessuno tanto che è proprio una loro mancata risposta ad essere all'origine dei problemi.

Siamo la quinta potenza del mondo... sì, del terzo mondo.

[dbev]

A voi cosa succede?

[dr650se]

Usa un'altro smtp server, che ci vuole?

[dbev]

Potrei usare un altro server, ma perché?

I soldi con cui pago sono buoni, mica falsi, e loro se ne strafregano del servizio che offrono.