North American Network Operators Group

Date Prev | Date Next | Date Index | Thread Index | Author Index | Historical

Update on mail bombing threats--words fail me--enjoy the laugh

  • From: Howard C. Berkowitz
  • Date: Tue Jan 07 12:20:40 1997

I posted recently about a recent mailbombing threat apparently originating
from Cyberpromo.  Many of you may have received this, but I must share it
for those who haven't seen it...the specter of Cyberpromo being victimized
by Nasty Evil Spammers had me laughing so hard tears ran down my face and
my ribs hurt.

Howard

------
Received: from cyber3.7.nostoppingittop (daemon@[206.154.151.19]) by
mail.clark.net (8.7.3/8.6.5) with ESMTP id UAA24805 for <hcb@clark.net>;
Mon, 6 Jan 1997 20:51:28 -0500 (EST)
Received: (from daemon@localhost) by cyber3.7.nostoppingittop (8.7.4/8.7.3)
id UAA05715; Mon, 6 Jan 1997 20:53:44 -0500 (EST)
Date: Mon, 6 Jan 1997 20:53:44 -0500 (EST)
Message-Id: <199701070153.UAA05715@cyber3.7.nostoppingittop>
From: abusebot@savetrees.com (Mail AutoResponder)
To: "howard c. berkowitz" <hcb@clark.net>
Subject: RESPONSE FROM CYBERPROMO


Version 1-4-97:


Cyber Promotions has recently terminated several accounts for
abuse of our policies.  (Updated TOS at end of message).

Cyber Promotions will not tolerate irresponsible
commercial email activities.

The following email accounts have been *recently TERMINATED...


*noci@cyberpromo.com          1-4-97:  Spamming with THREATS!

jrtkjs@savetrees.com         10-9-96: Forgery and spamming INTERNET
jrtkjs@answerme.com          ""      ""       ""     ""     ""     ""
dollars@savetrees.com        Non-existant account.  The account was
forged by the people who opened the accounts above.

info1@cyberpromo.com         10-8-96: Unsolicited ads to INTERNET addresses

changes@answerme.com         9-30-96: Unsolicited ads to INTERNET addresses
changes@cyberpromo.com       9-30-96: Unsolicited ads to INTERNET addresses
changes@savetrees.com        9-30-96: Unsolicited ads to INTERNET addresses

catalog@savetrees.com        9-30-96: Unsolicited ads to INTERNET addresses
catalog@cyberpromo.com       9-30-96: Unsolicited ads to INTERNET addresses
catalog@answerme.com         9-30-96: Unsolicited ads to INTERNET addresses

eleven@answerme.com          9-28-96: Forgeries
eleven@savetrees.com         9-28-96: Forgeries
eleven@answerme.com          9-28-96: Forgeries

tsahk@cyberpromo.com         9-27-96: Unsolicited ads to INTERNET addresses
tsahk@answerme.com           9-27-96: Unsolicited ads to INTERNET addresses

icssender@omni.cyberpromo.com   9-19-96: FORGED unsolicited email, making
it appear that Cyberpromo's auto-sender was responsible.  If you are in
receipt of the message, please look through the headers and complain to the
appropriate postmasters.

networkes@answerme.com       9-17-96: Ignored remove requests
networkes@cyberpromo.com     9-17-96: Ignored remove requests
networkes@savetrees.com      9-17-96: Ignored remove requests
reminders@answerme.com       9-17-96: Unsolicited ads to INTERNET addresses
reminders@savetrees.com      9-17-96: Unsolicited ads to INTERNET addresses
reminders@cyberpromo.com     9-17-96: Unsolicited ads to INTERNET addresses

salespromo@answerme.com      9-16-96: Unsolicited ads to INTERNET addresses
salespromo@savetrees.com     ""  ""         ""  ""
salespromo@cyberpromo.com    ""  ""         ""  ""
promo@answerme.com           ""  ""         ""  ""
promo@savetrees.com          ""  ""         ""  ""
promo@cyberpromo.com         ""  ""         ""  ""
info4free@answerme.com       ""  ""         ""  ""
info4free@savetrees.com      ""  ""         ""  ""
info4free@cyberpromo.com     ""  ""         ""  ""

manda@cyberpromo.com      8-28: Massive abuse to INTERNET addresses / FORGERY
manda@answerme.com        8-28: Massive abuse to INTERNET addresses / FORGERY
website@cyberpromo.com    8-27: excessive abuse to AOL / removals ignored
sevenmil@cyberpromo.com   8-27: excessive abuse / all removals ignored
sevenmil@answerme.com     8-27: ""     ""      ""     ""     ""    ""
vera@cyberpromo.com
vera@answerme.com
zol@answerme.com
website@answerme.com
allied@cyberpromo.com
allied@answerme.com
lists@cyberpromo.com
lists@answerme.com



Cyber Promotions is *not* in business to annoy people.  We are in the
business of sending (and assisting in sending) commercial (and
noncommercial) email to people who are *not* offended by the receipt of
these messages.  Unfortunately, due to many experiences (many of which were
out of our control) we have had some problems accomplishing our goals
without upsetting some people.  We are truly sorry about that fact, and we
plan to "clean up the streets" as best as we can.

Some people have been under the impression that all email that appears to
come from cyberpromo.com, is from Cyber Promotions.  That is not true.
Most of the complaints that we have recently received have been in reaction
to people who have "autoresponders" and "virtual email addresses" on our
system.  In that case, their mail would have referenced an account on our
system, but originated from a different site.  Unfortunately, software like
Pegasus enables their mail to appear as if it came from us, directly.  But,
their true origination is still evident in the headers.  You can determine
where it originated if you know how to decode headers.  But when doing so,
remember that Pegasus, for example, actually logs into *our* sendmail.  At
this time, the only messages that originate from Cyber Promotions, use our
proprietary Cyber Sender 5.0+ protocol which will always be indicated in
the organization: header.

Due to these "look alikes," it could appear that recipients' remove request
were being ignored.  WE DO NOT IGNORE REMOVE REQUESTS.

Please note: we have no control over mail that originates from
other sites, that travel through our SMTP (relay-host) servers.  We will
simply terminate any accounts that we maintain, that is referred to in
their abusive mail.


ATTENTION PRODIGY MEMBERS:
It has come to Cyber Promotions' attention, that some of you are having a
major problem removing yourselves from our lists.  This can be attributed
to the "alias" that your outgoing mail may contain.  If you are having
problems, please send an email to manremove@cyberpromo.com and type both of
your email addresses in the body of the message, each on its own line,
without any comments.  The subject line is ignored.  You probably have one
address like xazd35r@prodigy.com and another address like
sanford@prodigy.com.


ATTENTION PIPELINE MEMBERS:
It has come to Cyber Promotions' attention, that some of you are having a
major problem removing yourselves from our lists.  This can be attributed
to the "alias" that your outgoing mail may contain.  If you are having
problems, please send an email to manremove@cyberpromo.com and type your
email addresses in the body of the message, each on its own line, without
any comments.  The subject line is ignored.  You should type your email id
followed by the following THREE domains.   @usa.pipeline.com,
@pipeline.com,  @nyc.pipeline.com.  Even if you feel that your address is
definately only one of the three possibilities, you should still remove all
three addresses (each on its own line).


ATTENTION INTERNET USERS:
It has come to Cyber Promotions' attention, that some of you are having a
major problem removing yourselves from our lists.  This can be attributed
to the "alias" that your outgoing mail may contain.  If you are having
problems, please send an email to manremove@cyberpromo.com and type your
email addresses in the body of the message, each on its own line, without
any comments.  The subject line is ignored.  If your email address could
contain an alias like mail.domain.com or if you may have more that one
email address that points to another email address, you should remove them
all.  If you wish to remove *every* email address in your domain, please
contact us, and we will "grep" out every possibility.




REVISED TERMS OF SERVICE:

1. We do not allow postings to inappropriate
newsgroups with reference to your account
because such postings result in *MUCH* more negative
response than positive.

2. We prohibit the advertising of offensive material
(ie. pornography, weapons, etc).

3. You may not use the account to participate in
illegal activities.

4. Our TOS strictly prohibits the sending of mass commercial
emails to INTERNET addresses, unless expressed permission
has been granted to you by the recipient.
In addition, you *must* honor all requests for removal
from your mailing list in a diligent manner.
Our service can be used in conjunction with advertisements that
you place with a bulk email company other than your
own or us, as long as they follow the same guidelines.

5.  Cyber Promotions reserves the right to terminate any account for any
reason at any time, without notice.





- - - - - - - - - - - - - - - - -