Spammers hapless fate = ISP toil and sweat

In message <XFMail.970916173833.lms at esoterica.pt>, Luis Miguel Sequeira writes:
>Hello,
>
>I normally just lurk around this mailing list, but I think I'll 
>contribute my two cents this time...
>
>Spamming is a serious problem. [...]

Thanks to Luis!  I totally agree, we need to handle these 
assholes seriously.

Yes, I belive this is a place where RIPE could be used as a forum.

It's clear that the non-USA part of the world will have to deal with
this in a different way that USA, firstly because we're not so afraid
of the "censor" word, but mostly because we have no chance of legally
assaulting these people.  A mere passive role in other words.

My personal filtering technique is to accept the email and never
deliver it.  Interestingly enough, some of the spammers have one
"control" address on each email they send, typically the last,
so one will se an email being sent to 50 AOL users and the 51st
address goes somewhere else.  It this last address doesn't receive
the email in some timewindow, it will be sent again.  I have yet to
think of the right way to exploit this fact.

(Should any of you want study material, I can provide you with 
about three months of non-delivered emails.)

The other thing we could try is more political:

Have RIPE send a formal letter to AGIS and the IEMMC who 
houses most of these creep, and tell them that either they will
cease to send spam to the following list of top level domains:
{be, dk, ...} effectively today or the RIPE will orchestrate 
a pan-european filtering of all AGIS and IEMMC member networks 
until such filtering is in place.  It should be pretty simple to 
simply filter all routes based on AGIS AS#(s), and maybe inject 
a bogus route for the IEMMC members networks.

This is somewhat close to shooting while wearing a black hat.. 
but they disregard common courtesy, so maybe we need to do 
so as well to teach them a lesson.

--
Poul-Henning Kamp             FreeBSD coreteam member
phk at FreeBSD.ORG               "Real hackers run -current on their laptop."