Re: [Asrg] Challenge-Response and Spam Bounces

[Seth Breidbart <sethb at panix.com>]

doug campbell <Doug.Campbell at craniumpro.com> wrote:

> Challenge-Response requests: A company with the moniker
> "spamarrest.com" has sold a few challenge-response systems, and each
> such targeted system has duly e-mailed my server a challenge for
> each spam message.  I'm trying to make up my mind if I should spend
> a few hours responding to the challenges (thus making life miserable
> for "spamarrest.com" -- after all, it was THEY who contacted ME
> first) or if I just should leave well enough alone.

If you have the time, I'd respond.

More importantly, I'd report every challenge as spam (to NANAS at
least).

> Spam Bounces: There is an anti-spam boundary appliance called a
> Barracuda, and there are apparently a lot of Barracudas swimming
> around on the Internet -- many Barracuda systems attacked by the
> spammers also dutifully sent my server an e-mail telling it that my
> spam had been stopped by the appliance (only it wasn't my spam, of
> course).  I've cruised the Barracuda site and they call this
> situation "backscatter" and offer suggestions on configuring the
> appliance not to do it; sadly, each appliance comes configured by
> default to do "backscatter".  The technical suggestions seem on the
> order of closing the barn door after the cows have escaped.

Likewise, report all of those as spam.  You might want to escalate by
telephone to the owners of the companies using them, warning them to
stop their participation in the DDOS attack against your network.

Seth

_______________________________________________
Asrg mailing list
Asrg at ietf.org
https://www1.ietf.org/mailman/listinfo/asrg