11 Feb
1999
11 Feb
'99
3:51 p.m.
On Thu, 11 Feb 1999, Bruce Lane wrote:
At 21:01 11-02-1999 -0500, you wrote:
Rule #1 of spamfighting: NEVER reply to a spammer in ANY form.
All it does is confirm that they hit a live address.
2) Assume the return address is bogus, and examine the full headers.
3) Find the last "recieved from" line in the headers. This will
tell you the originating host.
4) Use whois to find the technical contact for the originating host.
5) Send a copy of the spam, with full headers, to the technical contact
and/or postmaster and/or abuse, and request that the user's account be
shutdown. They can determine the account from their logs even if it's
not in the headers.
6) If the originating host belongs to a spammer, ask their upstream ISP
to shut off their connection. (This is the last "received by" host.)
7) Don't send a message to this list about the spam. These messages
generate 10x the noise the spammer generated.
-- Doug