Some people differentiate between the two main types of uninvited emails - UCE and SPAM. Others include UCE under the heading of SPAM.
-
UCE is Unsolicited Commercial Email from genuine businesses, and is usually responsibly targetted at sales prospects (according to the UCE originator).
-
SPAM is bogus offers and is usually un-targetted - it is just sent to a random, or even randomly-generated, email addresses.
Whether UCE or SPAM, despite being easier to dispose of, it seems to cause more anger than the paper version. Not least because cumulatively it wastes so much time for the recipient and clogs the Internet.
Much of the spam I receive is advertising 'get rich quick' programs, health solutions, 'adult' products or services, bank scams, bogus stocks and share advice.
The simple, low blood pressure way to deal with it is to just ignore it, and delete it. But you might want to do more in the "war against spam."
One way to relieve the irritation is to stop
the spam (and virus-laden emails) at
the border of your domain. If
you could do that, you wouldn't even have to sort through and
decide what is junk and what is good email.
Linn Barringer
Limited offers just such a facility with Dr.Web and Spam Assassin services pre-configured on your domain hosted. More...
See these anti-spam Links:
www.euro.cauce.org/en/
- www.euroispa.org
- www.dma.org.uk
This link to a study of how spam is generated and how to avoid it: www.cdt.org/
Select 'Spam' then under the CDT Commentary heading, select
CDT Report on Origins of Spam - "Why Am I Getting All This Spam?"
Alternatively, go straight to the CDT article:
www.cdt.org/speech/spam/030319spamreport.shtml
If you want to fight spam and stop the perpetrator, it is not a good idea to reply (see 'do not reply') asking them to stop. Most ISPs condemn spam and do not tolerate their systems being used for spam. Therefore, if you want to stop the spammer, report him to his ISP. Most ISPs have an email address like "abuse@spammers-isp.com" to which you can report spammers. Some have spam-specific email reporting procedures. Usually, you will be advised by automatic email if this the case.
Another way to reduce spam is to stop your email address being 'harvested' in the first place. First, NEVER send on chain letters, or even normal emails, with all the preceding addresses open for all to see. (see). Secondly, if you have or maintain a websites, try this excellent, free, Email Obfuscation service.
Unfortunately, however, not all spam comes from where it seems to, because spammers are often also forgers. They forge or fake (also known as 'spoof') the From: field in the email. So you need to analyse the email Headers.
They seem like gobbledygook at first but you will soon find your way around the important bits to help you decide where to send your query. I say "query" because you don't want to accuse an ISP of allowing spam when it may not originate in their domain.
Sometimes it can be helpful when analysing the header to guess the originating ISP's URL and take a look at their website. e.g. something from dilly1.pobox.com - try www.pobox.com. Read what their policy is on spam, and their terms & conditions.
Wait a minute, you say, how do I find the headers? In Microsoft Outlook, double-click on the mail item to open it. From the menu, select View, then Options. The window that pops up has several fields, the last of which contains the message header, usually with a scroll-bar to the right. If you need to send a query to an ISP, you will need to forward the offending message, and Copy/Paste this header information into the forwarded email. Be polite and suggest that the spam MIGHT have come from one of their customers.
Below is a typical spam message header. I reported this one to pobox.com but I'm not 100% sure it came from them! I have changed important details in the header below for security but the layout is "as received." This is just a starter for your email header analysis lesson! For the real thing, go to pobox or Free sites.
| Header Content | Running commentary |
| X-NAV-TimeoutProtection0:
X X-NAV-TimeoutProtection1: X X-NAV-TimeoutProtection2: X X-NAV-TimeoutProtection3: X X-NAV-TimeoutProtection4: X X-NAV-TimeoutProtection5: X X-NAV-TimeoutProtection6: X |
|
| X-From_:
lisa_jessick789@simrad.no Wed Jun 27 11:07:20 2001 Envelope-to: xyz@something.fsnet.co.uk Delivery-date: Wed, 27 Jun 2001 11:07:20 +0100 Received: from [212.69.206.1] (helo=something.dovr.co.uk) by smtp-relay.nac.dovr.net with esmtp (Exim 3.16 #1) id 15FCEC-000MIJ-00 for xyz@something.fsnet.co.uk; Wed, 27 Jun 2001 11:07:20 +0100 |
Looks
like it came from Simrad Norway from the .no TLD
Their website implies they are a normal
business, so they may be being abused, perhaps by one of their
employees |
| Received:
from dilly1.pobox.com (dilly1.pobox.com [207.106.49.22]) by something.dovr.co.uk (8.11.3/8.11.1) with ESMTP id f5RA7Jg10960 for <xyz.pobox@something.co.uk>; Wed, 27 Jun 2001 11:07:19 +0100 |
Oh, maybe it was send from or via pobox.com? |
| Received:
from ntbaris.intranet (unknown [62.168.103.138]) by dilly1.pobox.com (Postfix) with ESMTP id B91D02BEFE for <xyz@pobox.com>; Wed, 27 Jun 2001 06:07:16 -0400 (EDT) |
But who is ntbaris.intranet? I could not find them easily. |
| Received: from server3 (host-216-77-217-108.fll.bellsouth.net [216.77.217.108]) by ntbaris.intranet with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.1960.3) | Maybe they dialled in to Southern Bell network? |
| id
L80GBD5X; Sun, 17 Jun 2001 23:25:01 +0200 To: lisa_jessick789@simrad.no From: <lisa_jessick789@simrad.no> |
Oh, it does look like Norway but does an underscore really exist in an email address? Sometimes. |
| Subject:
As Seen On National TV - $$$ At Home! MIME-Version: 1.0 Content-Type: text/plain; charset=unknown-8bit Message-Id: <20010627100716.B91D02BEFE@dilly1.pobox.com> Date: Wed, 27 Jun 2001 06:07:16 -0400 (EDT) |
Better report to abuse@pobox.com and see what they say. |
