Home page logo
/

nanog logo nanog mailing list archives

Update on mail bombing threats--words fail me--enjoy the laugh
From: "Howard C. Berkowitz" <hcb () clark net>
Date: Tue, 7 Jan 1997 11:58:51 -0500

I posted recently about a recent mailbombing threat apparently originating
from Cyberpromo.  Many of you may have received this, but I must share it
for those who haven't seen it...the specter of Cyberpromo being victimized
by Nasty Evil Spammers had me laughing so hard tears ran down my face and
my ribs hurt.

Howard

------
Received: from cyber3.7.nostoppingittop (daemon () [206 154 151 19]) by
mail.clark.net (8.7.3/8.6.5) with ESMTP id UAA24805 for <hcb () clark net>;
Mon, 6 Jan 1997 20:51:28 -0500 (EST)
Received: (from daemon () localhost) by cyber3.7.nostoppingittop (8.7.4/8.7.3)
id UAA05715; Mon, 6 Jan 1997 20:53:44 -0500 (EST)
Date: Mon, 6 Jan 1997 20:53:44 -0500 (EST)
Message-Id: <199701070153.UAA05715 () cyber3 7 nostoppingittop>
From: abusebot () savetrees com (Mail AutoResponder)
To: "howard c. berkowitz" <hcb () clark net>
Subject: RESPONSE FROM CYBERPROMO


Version 1-4-97:


Cyber Promotions has recently terminated several accounts for
abuse of our policies.  (Updated TOS at end of message).

Cyber Promotions will not tolerate irresponsible
commercial email activities.

The following email accounts have been *recently TERMINATED...


*noci () cyberpromo com          1-4-97:  Spamming with THREATS!

jrtkjs () savetrees com         10-9-96: Forgery and spamming INTERNET
jrtkjs () answerme com          ""      ""       ""     ""     ""     ""
dollars () savetrees com        Non-existant account.  The account was
forged by the people who opened the accounts above.

info1 () cyberpromo com         10-8-96: Unsolicited ads to INTERNET addresses

changes () answerme com         9-30-96: Unsolicited ads to INTERNET addresses
changes () cyberpromo com       9-30-96: Unsolicited ads to INTERNET addresses
changes () savetrees com        9-30-96: Unsolicited ads to INTERNET addresses

catalog () savetrees com        9-30-96: Unsolicited ads to INTERNET addresses
catalog () cyberpromo com       9-30-96: Unsolicited ads to INTERNET addresses
catalog () answerme com         9-30-96: Unsolicited ads to INTERNET addresses

eleven () answerme com          9-28-96: Forgeries
eleven () savetrees com         9-28-96: Forgeries
eleven () answerme com          9-28-96: Forgeries

tsahk () cyberpromo com         9-27-96: Unsolicited ads to INTERNET addresses
tsahk () answerme com           9-27-96: Unsolicited ads to INTERNET addresses

icssender () omni cyberpromo com   9-19-96: FORGED unsolicited email, making
it appear that Cyberpromo's auto-sender was responsible.  If you are in
receipt of the message, please look through the headers and complain to the
appropriate postmasters.

networkes () answerme com       9-17-96: Ignored remove requests
networkes () cyberpromo com     9-17-96: Ignored remove requests
networkes () savetrees com      9-17-96: Ignored remove requests
reminders () answerme com       9-17-96: Unsolicited ads to INTERNET addresses
reminders () savetrees com      9-17-96: Unsolicited ads to INTERNET addresses
reminders () cyberpromo com     9-17-96: Unsolicited ads to INTERNET addresses

salespromo () answerme com      9-16-96: Unsolicited ads to INTERNET addresses
salespromo () savetrees com     ""  ""         ""  ""
salespromo () cyberpromo com    ""  ""         ""  ""
promo () answerme com           ""  ""         ""  ""
promo () savetrees com          ""  ""         ""  ""
promo () cyberpromo com         ""  ""         ""  ""
info4free () answerme com       ""  ""         ""  ""
info4free () savetrees com      ""  ""         ""  ""
info4free () cyberpromo com     ""  ""         ""  ""

manda () cyberpromo com      8-28: Massive abuse to INTERNET addresses / FORGERY
manda () answerme com        8-28: Massive abuse to INTERNET addresses / FORGERY
website () cyberpromo com    8-27: excessive abuse to AOL / removals ignored
sevenmil () cyberpromo com   8-27: excessive abuse / all removals ignored
sevenmil () answerme com     8-27: ""     ""      ""     ""     ""    ""
vera () cyberpromo com
vera () answerme com
zol () answerme com
website () answerme com
allied () cyberpromo com
allied () answerme com
lists () cyberpromo com
lists () answerme com



Cyber Promotions is *not* in business to annoy people.  We are in the
business of sending (and assisting in sending) commercial (and
noncommercial) email to people who are *not* offended by the receipt of
these messages.  Unfortunately, due to many experiences (many of which were
out of our control) we have had some problems accomplishing our goals
without upsetting some people.  We are truly sorry about that fact, and we
plan to "clean up the streets" as best as we can.

Some people have been under the impression that all email that appears to
come from cyberpromo.com, is from Cyber Promotions.  That is not true.
Most of the complaints that we have recently received have been in reaction
to people who have "autoresponders" and "virtual email addresses" on our
system.  In that case, their mail would have referenced an account on our
system, but originated from a different site.  Unfortunately, software like
Pegasus enables their mail to appear as if it came from us, directly.  But,
their true origination is still evident in the headers.  You can determine
where it originated if you know how to decode headers.  But when doing so,
remember that Pegasus, for example, actually logs into *our* sendmail.  At
this time, the only messages that originate from Cyber Promotions, use our
proprietary Cyber Sender 5.0+ protocol which will always be indicated in
the organization: header.

Due to these "look alikes," it could appear that recipients' remove request
were being ignored.  WE DO NOT IGNORE REMOVE REQUESTS.

Please note: we have no control over mail that originates from
other sites, that travel through our SMTP (relay-host) servers.  We will
simply terminate any accounts that we maintain, that is referred to in
their abusive mail.


ATTENTION PRODIGY MEMBERS:
It has come to Cyber Promotions' attention, that some of you are having a
major problem removing yourselves from our lists.  This can be attributed
to the "alias" that your outgoing mail may contain.  If you are having
problems, please send an email to manremove () cyberpromo com and type both of
your email addresses in the body of the message, each on its own line,
without any comments.  The subject line is ignored.  You probably have one
address like xazd35r () prodigy com and another address like
sanford () prodigy com 


ATTENTION PIPELINE MEMBERS:
It has come to Cyber Promotions' attention, that some of you are having a
major problem removing yourselves from our lists.  This can be attributed
to the "alias" that your outgoing mail may contain.  If you are having
problems, please send an email to manremove () cyberpromo com and type your
email addresses in the body of the message, each on its own line, without
any comments.  The subject line is ignored.  You should type your email id
followed by the following THREE domains.   @usa.pipeline.com,
@pipeline.com,  @nyc.pipeline.com.  Even if you feel that your address is
definately only one of the three possibilities, you should still remove all
three addresses (each on its own line).


ATTENTION INTERNET USERS:
It has come to Cyber Promotions' attention, that some of you are having a
major problem removing yourselves from our lists.  This can be attributed
to the "alias" that your outgoing mail may contain.  If you are having
problems, please send an email to manremove () cyberpromo com and type your
email addresses in the body of the message, each on its own line, without
any comments.  The subject line is ignored.  If your email address could
contain an alias like mail.domain.com or if you may have more that one
email address that points to another email address, you should remove them
all.  If you wish to remove *every* email address in your domain, please
contact us, and we will "grep" out every possibility.




REVISED TERMS OF SERVICE:

1. We do not allow postings to inappropriate
newsgroups with reference to your account
because such postings result in *MUCH* more negative
response than positive.

2. We prohibit the advertising of offensive material
(ie. pornography, weapons, etc).

3. You may not use the account to participate in
illegal activities.

4. Our TOS strictly prohibits the sending of mass commercial
emails to INTERNET addresses, unless expressed permission
has been granted to you by the recipient.
In addition, you *must* honor all requests for removal
from your mailing list in a diligent manner.
Our service can be used in conjunction with advertisements that
you place with a bulk email company other than your
own or us, as long as they follow the same guidelines.

5.  Cyber Promotions reserves the right to terminate any account for any
reason at any time, without notice.





- - - - - - - - - - - - - - - - -


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]