Received: from wodc7-1.relay.mail.uu.net (wodc7-1.relay.mail.uu.net
[199.171.54.114])
by phister.iaeste.dtu.dk (8.9.3/8.9.3) with ESMTP id CAA10150
for <henrik@iaeste.dk>; Mon, 17 Apr 2000 02:04:24 +0200
Received: from eecserver.eeco-ra.com by wodc7mr0.ffx.ops.us.uu.net with ESMTP
(peer crosschecked as: machine133.eeco-ra.com [63.77.133.133] (may be forged))
id QQilfs10918;
Mon, 17 Apr 2000 00:01:05 GMT
Received: from U03u4NZHs (192.168.16.130 [192.168.16.130]) by
eecserver.eeco-ra.com with SMTP (Microsoft Exchange Internet Mail Service
Version 5.5.1960.3)
id 2JPS0FD6; Sun, 16 Apr 2000 19:55:59 -0400
DATE: 16 Apr 00 6:53:49 PM
Message-ID: <0ka3FoIe0IHjqEY0>
SUBJECT: Direct Email = An INSTANT CASH Flow Explosion!
12357
To: undisclosed-recipients:;
CREATE AN INSTANT CASH FLOW EXPLOSION!
Spam-Free Direct Email is the most powerful and least expensive
method of online advertising. Why not introduce your business to
thousands of potential customers now!
With benefits such as massive instant exposure and measurable
results, a medium that excels at generating immediate cash is central
to any online business.
It's a PROVEN FACT, April, May & June are the HOTTEST
months for Internet purchases!!! Despite what many may claim,
there is no other advertising medium that can generate the same
volume of response (orders), as DIRECT EMAIL Marketing!!!
Question: Why do SOME PEOPLE SUCCEED in an Internet Business
while others fail? The answer is that they have discovered
the incredible income potential of DIRECT EMAIL Marketing!!!
They also know that their success on the Internet depends on being in
"total control" over these three elements of their business:
on these three factors:
1 -- Email list quality [ See offer below. ]
2 -- The product they are selling
3 -- The technology used for mailing
By now, the best Direct Email Marketing resources on the planet,
and we'll give you the opportunity to:
=> Get involved with our exclusive mailing technology
=> Learn step by step from our highly qualified staff on exactly
what to do to make BIG $$$ as a Direct Email Marketing PRO!!!
Can Direct Email Marketing Make You Money?
The answer is a resounding YES, "if" you are in control of the three
elements listed above. We have been "succe$$fully" direct emailing
for more than three years. During this time, we have compiled and
"VERIFIED" an exclusive list resource with over 13 MILLION of the
VERY BEST email addresses on the planet!!
WHY SHOULD YOU CONSIDER BUYING FROM US?
First, we never SELL MILLIONS OF OLD ADDRESSES ON CD'S
as you've seen advertised before by email.
Second, no other company knows the SECRET FIVE STEPS TO
GETTING THE CLEANEST EMAIL ADDRESSES ON THE PLANET!!!
=> 1. NO "duplicate" addresses. ALL "dupes" are filtered out.
=> 2. 190+ million lines of email addresses are filtered and
duplicates eliminated. This process, alone, reduces our lists
into a manageable number.
=> 3. Another filter list of 400+ words/phrases are used to
reduce the lists even more. No addresses with profane or
inappropriate wording survives.
=> 4. A special filter file was used to eliminate most of the
"web poisoned" email addresses from these lists. Many of
the lists we purge are full of bogus addresses. One list,
in particular, had over 90% poison in it. Our EXCLUSIVE
system reduces these types of addresses to zero.
=> 5. A "daily updated" anti bulk email list of terrorists and
general anti-internet advertising extremists is used to
rid our lists of those people who, in a cowardly and deliberate
manner, attack all marketing people who choose to utilize
the greatest marketing discovery of all time - DIRECT EMAIL.
Our database of these individuals is the largest one maintained
worldwide and it keeps our lists free of the majority of undesirable
and extremist elements.
USE OUR ADDRESS DATABASE AND YOU'LL GET:
=> Higher response ratios
=> Higher sales ratios
=> More receptive prospects
=> LESS contact with anti-commerce radicals who want the
net for themselves!
This list resource will prove to be the best of it's kind compared
to "any" CD in terms of hours and money spent bringing it to market.
No competitor will ever duplicate the effort of what it takes
for us to produce this final product for our members.
__________________________________________
HERE'S WHAT PEOPLE ARE SAYING . . . .
"I received access to your download site on Friday. Like a
kid with a new toy, I immediately started mailing out using
the new email addresses. I am 100% totally satisfied with
my purchase!!"
-- David Buckley, Houston, TX
"This list is worth it's weight in gold. I sent out only
100,000 emails for my product and received over 55
orders! Wow!"
-- Anne Colby, New Orleans, LA
"I've been using your email lists and Nexxus Technology now
for about 3 weeks. I can't believe how much faster I can send my
messages!!! Now, all our mail actually gets delivered without
being blocked!!!"
-- Charlie Dunn, Pittsburg, PA
"I was new to email marketing and your people took the time to really
show me the ropes and help me out. That personal touch alone was
worth the amount I paid to get involved with you all!"
-- Sally Chesire, Seattle, WA
__________________________________________
There's more. Our members get the opportunity to purchase our
NEXXUS TECHNOLOGY. Imagine having the access to a technology
that enables you to direct email to more than a MILLION people
everyday!!!
You also have access to the hottest products, the best training
and the right programs to successfully direct email on the Internet.
Your investment is only $99. Plus, if you order before April 21st,
you also get these FREE BONUSES worth over $400:
+ A Complete Guide to the Internet [Manual]
+ Complete Direct Emailing Guide [Manual]
+ 101 High Profit Businesses You Can Start On The Internet [EBook]
+ Stealth Professional Mass Mailer [Program]
+ Accept Checks Over The Net With "Checker Software" [Program]
Our members can also purchase the following additional services:
=> Direct email NEXXUS TECHNOLOGY [only $7.50 per day]
=> An updated list of fresh, filtered email addresses posted at
our private site weekly. (Approx. 1.5 to 2 million addresses monthly.)
=> A huge discount on the hottest business opportunity on the Internet
called the INTERNET CASH MACHINE 2000!!!
DON'T HESITATE on this one or you will miss out on the
most effective way to market anywhere...PERIOD!
Remember, bottom-line you always get what you pay for!
Become a direct email marketing pro and order our professional
Direct Email resource package. Simply print out the ORDER FORM
below and fax to our processing center NOW.
Your order WILL NOT be processed without your signature!!! We are
not shipping CD's. You will be sent a link and personal password to
download everything you purchased from our private site.
It's a PROVEN FACT, April, May & June are the HOTTEST months
for Internet purchases!!!
Don't miss out!!! Get your advertisement out to our lists of millions
of Internet users and you'll be hooked on the power of direct email
marketing FOREVER!!!
- - - - - - - - - - CUT HERE - - - - - - - - - -
*** DIRECT EMAIL MARKETING PACKAGE ***
IMPORTANT!!! SEND YOUR ORDER BEFORE 4/21/2000
TO GET THE FREE RESOURCES PACKAGE
***** NOW ONLY $99.00 ****
WARNING! You can purchase this offer whenever you're ready.
However, quality email addresses need to be re-harvested every
30 days or less to maintain a good deliverability ratio. This
exclusive list is hot NOW!!!
If you have a product you want to offer to millions of people, OR you
are curious as to how people are earning $2,500+ monthly from their
home PC with Direct Email Marketing, don't wait to get started.
TO ORDER these addresses and get the complete business resource
package as outlined above, ABSOLUTELY FREE, simply print out the
ORDER FORM below and fax it to our order center.
We can accept any major credit card. We'll even take your check as
long as your bank is in the U.S.A.!!!
You must put your initials next to the statement below in order to
process your payment.
_____Yes! I would like to order the DIRECT EMAIL MARKETING
PACKAGE for $99.00. I am getting involved on or before April 21st,
please include my codes to also get the FREE BUSINESS RESOURCES
listed above.
BONUS, No shipping charge!!!
*** For your security, the billing information MUST MATCH
that on your credit card or we cannot process your order.
DATE / / / (DD/MM/YYYY)
AUTH: NET-016
NAME_________________________________________
- - OR - -
COMPANY NAME__________________________________
ADDRESS________________________________________
CITY, STATE, ZIP___________________________________
PHONE NUMBERS ( ) ______________________
YOUR EMAIL ADDRESS_____________________________
TO ENSURE ACCURACY, PLEASE TYPE OR CLEARLY SPELL
YOUR EMAIL ADDRESS AGAIN: _______________________________
TYPE OF CREDIT CARD:
______VISA _____MASTERCARD _____ AMEX _____DISCOVER
CREDIT CARD# ________-________-________-__________
EXPIRATION DATE____/________ (MM/YYYY)
NAME ON CARD____________________________________
AMOUNT $____________________
(Required)
AUTHORIZATION SIGNATURE:_____________________________
CHECK BY FAX SERVICES
If you would like to fax a check, paste your check to the
bottom of the your completed order form then fax it to one
of our orders centers.
If you fax a check, there is no need for you to send the
original check. We will draft up a new check, with the exact
information from your original check. All checks will be held
for bank clearance. (4-7 business days) Make payable to: "W. P."
Fax Order Center: (212) 504-0866
- - - - - - - - - - CUT HERE - - - - - - - - - -
=-=-=-=-=-=-=-=-=-=-REMOVE INSTRUCTIONS-=-=-=-=-=-=-=-=
Remove your address automatically, access the website below.
Should you access this remove service link and the site has been
shut down, it is because someone actually complained about this
service!!! If this is the case, sorry for the inconvenience. http://sede.aecoc.es%647key=removeremoveindex=ixbtl730iq%403522794361/~joeb/remove/21268.htm
You may also leave your email address on our toll-free voice mail
(800) 681-4206 for immediate removal from this and future databases.
</pre>
The first complaint
Date: Tue, 18 Apr 2000 03:12:19 +0200 (CEST)
From: Henrik Olsen <henrik@iaeste.dk>
To: postmaster@[199.171.54.114], postmaster@wodc7-1.relay.mail.uu.net,
abuse-mail@uu.net
Subject: Fwd: Direct Email = An INSTANT CASH Flow Explosion!
The following unsolicited e-mail (SPAM) was relayed off one of your
SMTP servers. Please take steps to restrict your SMTP servers against
use by unauthorized third parties as a spam-relay. You can find
information regarding securing open SMTP relays at
http://mail-abuse.org/tsi/ar-fix.html.
You should also be aware that in the absence of concrete plans to
restrict this relay, I will be nominating your server for inclusion
in the RBL (Realtime Blackhole List), which mail admins and end-users
use to block all e-mail from proven spam sources and
spam-facilitating servers. For more information on the RBL, see:
http://mail-abuse.org/rbl/
Please feel free to contact me regarding your plans for the open
relay.
--
Henrik Olsen, Dawn Solutions I/S URL=http://www.iaeste.dk/~henrik/
---------- Forwarded message ----------
See above for the included spam
The complaint for the second spam through the server
Date: Mon, 17 Apr 2000 02:45:12 +0200 (CEST)
From: Henrik Olsen <henrik@iaeste.dk>
To: postmaster@wodc7-1.relay.mail.uu.net, postmaster@uu.net, abuse@uu.net,
postmaster@[199.171.54.114]
Subject: SPAM resent through your server
Sirs,
As you can see from the included mail, your host
wodc7-1.relay.mail.uu.net [199.171.54.114]
is an open mail relay, and has been used for spamming the internet with
unwanted commercial email.
Please take steps to restrict your SMTP servers against use by
unauthorized third parties as a spam-relay. You can find information
regarding securing open SMTP relays at
http://mail-abuse.org/tsi/ar-fix.html.
You should also be aware that in the absence of concrete plans to
restrict this relay, I will be nominating your server for inclusion
in the RBL (Realtime Blackhole List), which mail admins and end-users
use to block all e-mail from proven spam sources and
spam-facilitating servers. For more information on the RBL, see:
http://mail-abuse.org/rbl/
Please feel free to contact me regarding your plans for the open
relay.
--
Henrik Olsen, Dawn Solutions I/S URL=http://www.iaeste.dk/~henrik/
---------- Forwarded message ----------
See above for the included spam
Auto reply from uunet
Date: Mon, 17 Apr 2000 21:26:06 -0400 (EDT)
From: nobody@UU.NET (UUNET Internet Abuse Investigations)
To: Henrik Olsen <henrik@iaeste.dk>
Subject: Re: Fwd: Direct Email = An INSTANT CASH Flow Explosion! (B-TS2-000838051)
In-reply-to: Your message of "" <>
X-UUMASTER: B-TSI-000360140
Precedence: junk
Reply-to: nobody@UU.NET
Errors-to: nobody@UU.NET
** THE RETURN ADDRESSES ON THIS LETTER HAVE BEEN SET TO PREVENT MAIL **
** LOOPS IN THE EVENT YOU ARE RUNNING SOFTWARE WHICH AUTO-REPLIES TO **
** INBOUND MAIL. UUNET WILL NOT SEE ANY REPLY SENT TO THIS LETTER. **
To Whom It May Concern,
Your message regarding ("Fwd: Direct Email = An INSTANT CASH Flow
Explosion!") has been received by UUNET's Internet Abuse Investigations.
To help us provide you with the best possible service, please refer to
trouble ticket number B-TS2-000838051 somewhere in all correspondence
(or if you should call Customer Support) regarding this matter. For your
convenience, we have included it in the Subject line of this message,
and will do so in any future correspondence. If you should need
assistance in the future on a different issue, please do not re-use this
same ticket number.
UUNET Internet Abuse Investigations has received your notification of a
massmail incident and considers this a serious matter.
HINT: If you do not wish to receive the lengthy explanations below you
may send your spam complaints to abuse-noverbose@uu.net.
The mail address abuse-mail@uu.net will send your complaint to our spam
ticket processing systems. If Newsgroup headers are detected in your
complaint, it will be treated as a Usenet spam issue; otherwise, it will
be treated as an unsoliticed e-mail issue. If this initial assessment
is in error, processing of your complaint may be delayed.
UUNET's spam ticket processing system attempts to "match" complaints
against the same spammer designating the first complaint received as the
MASTER ticket and subsequent complaints as a child ticket. Child
tickets are automatically closed by our system and linked to the MASTER
ticket. All further investigation and documentation are kept in the
MASTER ticket. The MASTER ticket number can be referenced by the
X-UUMASTER: header in this e-mail. Since our system keeps child tickets
linked to the MASTER, there should not be a need to reference the MASTER
ticket unless you are taking legal action against the alleged spammer.
When reporting e-mail abuse, please forward (do not bounce) the
offending message with full headers intact.
Here is an example:
Received: from alter.net (uu.net [10.10.10.10])
by relay7.uu.net with ESMTP Mon, 13 Jan 1997 15:35:29 -0500 (EST)
Message-Id: <19970401111@alter.net>
From: nobody@alter.net
To: somebody@uu.net
<some spam message>
******************************************
WHAT UUNET CAN DO REGARDING YOUR MASSMAIL INCIDENT:
******************************************
If UUNET identifies that the massmail originated from a UUNET customer
site, UUNET will take action according to the Terms of Service contract.
If UUNET identifies the originator as a customer of another ISP, UUNET
may forward details about the MASSMAIL incident to the respective ISP.
Generally, only the ISP of the originating site can enforce policies
concerning this MASSMAIL incident.
*************************************************
IF THE USER IS CONNECTED TO YOUR SYSTEM
OR IS CAUSING A MAIL FLOOD SITUATION
*************************************************
Please call UUNET at 800.900.0241 (703.206.5440), option #2, then
option #3, then option #1 to reach our Internet Abuse Investigations
Team, 24 hours a day, seven days a week.
Due to the volume of complaints we receive and the time required to
investigate them, this may be the only response you receive regarding
this incident.
To view UUNET's Acceptable Use Policy, point your browser to:
http://www.usa.uu.net/support/usepolicy/
Sincerely,
Internet Abuse Investigations (800)900-0241 options 2,3,1
The other autoreply
Date: Wed, 19 Apr 2000 20:13:16 -0400 (EDT)
From: nobody@UU.NET (UUNET Internet Abuse Investigations)
To: Henrik Olsen <henrik@iaeste.dk>
Subject: Re: SPAM resent through one of your servers (B-TS2-000849553)
** THE RETURN ADDRESSES ON THIS LETTER HAVE BEEN SET TO PREVENT MAIL **
** LOOPS IN THE EVENT YOU ARE RUNNING SOFTWARE WHICH AUTO-REPLIES TO **
** INBOUND MAIL. UUNET WILL NOT SEE ANY REPLY SENT TO THIS LETTER. **
To Whom It May Concern,
Your message regarding ("SPAM resent through one of your servers") has
been received by UUNET's Internet Abuse Investigations.
To help us provide you with the best possible service, please refer to
trouble ticket number B-TS2-000849553 somewhere in all correspondence
(or if you should call Customer Support) regarding this matter. For your
convenience, we have included it in the Subject line of this message,
and will do so in any future correspondence. If you should need
assistance in the future on a different issue, please do not re-use this
same ticket number.
UUNET Internet Abuse Investigations has received your notification of a
massmail incident and considers this a serious matter.
HINT: If you do not wish to receive the lengthy explanations below you
may send your spam complaints to abuse-noverbose@uu.net.
The mail address abuse-mail@uu.net will send your complaint to our spam
ticket processing systems. If Newsgroup headers are detected in your
complaint, it will be treated as a Usenet spam issue; otherwise, it will
be treated as an unsoliticed e-mail issue. If this initial assessment
is in error, processing of your complaint may be delayed.
UUNET's spam ticket processing system attempts to "match" complaints
against the same spammer designating the first complaint received as the
MASTER ticket and subsequent complaints as a child ticket. Child
tickets are automatically closed by our system and linked to the MASTER
ticket. All further investigation and documentation are kept in the
MASTER ticket. The MASTER ticket number can be referenced by the
X-UUMASTER: header in this e-mail. Since our system keeps child tickets
linked to the MASTER, there should not be a need to reference the MASTER
ticket unless you are taking legal action against the alleged spammer.
When reporting e-mail abuse, please forward (do not bounce) the
offending message with full headers intact.
Here is an example:
Received: from alter.net (uu.net [10.10.10.10])
by relay7.uu.net with ESMTP Mon, 13 Jan 1997 15:35:29 -0500 (EST)
Message-Id: <19970401111@alter.net>
From: nobody@alter.net
To: somebody@uu.net
<some spam message>
******************************************
WHAT UUNET CAN DO REGARDING YOUR MASSMAIL INCIDENT:
******************************************
If UUNET identifies that the massmail originated from a UUNET customer
site, UUNET will take action according to the Terms of Service contract.
If UUNET identifies the originator as a customer of another ISP, UUNET
may forward details about the MASSMAIL incident to the respective ISP.
Generally, only the ISP of the originating site can enforce policies
concerning this MASSMAIL incident.
*************************************************
IF THE USER IS CONNECTED TO YOUR SYSTEM
OR IS CAUSING A MAIL FLOOD SITUATION
*************************************************
Please call UUNET at 800.900.0241 (703.206.5440), option #2, then
option #3, then option #1 to reach our Internet Abuse Investigations
Team, 24 hours a day, seven days a week.
Due to the volume of complaints we receive and the time required to
investigate them, this may be the only response you receive regarding
this incident.
To view UUNET's Acceptable Use Policy, point your browser to:
http://www.usa.uu.net/support/usepolicy/
Sincerely,
Internet Abuse Investigations (800)900-0241 options 2,3,1
Relay test letter gone through the open relay
From: nobody@[199.171.54.114]
To: henrik@iaeste.dk
Subject: test for susceptibility to third-party mail relay
Date: Thu, 27 Apr 2000 17:45:38 GMT
This is a test of third-party mail relay, generated by the
"rlytest" <URL: http://www.unicom.com/sw/#rlytest> utility.
Target host = 199.171.54.114
Test performed by <henrik@iaeste.dk>
A well-configured mail server should NOT relay third-party email.
Otherwise, the server is subject to attack and hijack by Internet
vandals and spammers.
For information on how to secure a mail server against third-party
relay, visit <URL: http://maps.vix.com/tsi/>.
The RBL nomination
Date: Fri, 28 Apr 2000 03:09:06 +0200 (CEST)
From: Henrik Olsen <henrik@iaeste.dk>
To: rbl@mail-abuse.org
cc: mail-abuse@uu.net
Subject: Nomination of [199.171.54.114]
RBL:
I would like to nominate [199.171.54.114] for the RBL, as uu.net have done
nothing to close their relay (I've just confirmed that I can still relay
mail through the machine), and haven't attempted to contact me apart from
automated replie saying that they'll do something, which time has shown
to be a lie.
The host was already listed in ORBS at the time of the spam incident, and
had been known there for several months which to me indicates they don't
care at all.
uu.net:
Autoreplies got tickets
B-TS2-000849553
B-TS2-000838051
--
Henrik Olsen, Dawn Solutions I/S URL=http://www.iaeste.dk/~henrik/
Half a loaf is better than a whole one if there is much else.
The Devil's Dictionary, Ambrose Bierce.
---------- Forwarded message ----------
You know this by now
Yet another autoreply from uunet
Date: Thu, 27 Apr 2000 21:29:25 -0400 (EDT)
From: nobody@UU.NET (UUNET Internet Abuse Investigations)
To: Henrik Olsen <henrik@iaeste.dk>
Subject: Re: Nomination of [199.171.54.114] (B-TSI-000379267)