RoadRunner abuse?

Mailman List Mirror (Read Only)
1

Greetings all,

Sorry to post this, but it appears that past emails to RoadRunner
re a spammer (sending out attachments to boot) have been
ineffective. Only ~150kB, but multiply that by however many
victims... I'd think and hope *someone* cares.

Back to on-topic material. I just wanted to see if there's
anyone out there before I go whining to MAPS, et al.

2

Sorry to post this, but it appears that past emails to RoadRunner
re a spammer (sending out attachments to boot) have been
ineffective. Only ~150kB, but multiply that by however many
victims... I'd think and hope *someone* cares.

Back to on-topic material. I just wanted to see if there's
anyone out there before I go whining to MAPS, et al.

Good luck. Roadrunner is a (presumed paying) MAPS customer:

   ----- The following addresses had permanent fatal errors -----
abuse@rr.com
postmaster@rr.com

   ----- Transcript of session follows -----
... while talking to vamx01.mgw.rr.com.:

MAIL From:<root@netside.net>

<<< 553 5.3.0 Mail from 205.159.140.2 rejected,see http://mail-abuse.org/rbl/enduser.html
501 abuse@rr.com,postmaster@rr.com... Data format error

NetSide is a MAPS et al. blocked ISP. We have plenty of rr.com spam
examples, but are unable to notify them. If anyone cares...

--Mitch
NetSide

3

205.159.140.2 is listed as an open-relay.

http://www.mail-abuse.org/cgi-bin/lookup?205.159.140.2

To see this IP removed, check
http://work-rss.mail-abuse.org/rss/howtofix.html
(I'm seeing it is only listed at RSS and relays.osirusoft.com, so I'm
assuming it is a closed relay - isn't it?)

4

From: owner-nanog@merit.edu [mailto:owner-nanog@merit.edu] On
Behalf Of Hermann Wecke
Sent: May 3, 2002 4:44 PM
To: nanog@nanog.org
Cc: Mitch Halmu
Subject: Re: RoadRunner abuse?

> Good luck. Roadrunner is a (presumed paying) MAPS customer:
>
> ----- Transcript of session follows -----
> ... while talking to vamx01.mgw.rr.com.:
> >>> MAIL From:<root@netside.net>
> <<< 553 5.3.0 Mail from 205.159.140.2 rejected,see
> http://mail-abuse.org/rbl/enduser.html
> 501 abuse@rr.com,postmaster@rr.com... Data format error

205.159.140.2 is listed as an open-relay.

http://www.mail-abuse.org/cgi-bin/lookup?205.159.140.2

To see this IP removed, check

http://work-rss.mail-abuse.org/rss/howtofix.html

(I'm seeing it is only listed at RSS and relays.osirusoft.com, so I'm

assuming it is a closed relay - isn't it?)

Stop. Think. Read NANOG archives. :slight_smile:

Mr. Halmu's open relay and very conscious decision to operate such a
thing have been discussed at length before, believe me. Take a look at
the archives around
http://www.merit.edu/mail.archives/nanog/2001-05/threads.html#01127

Vivien

5

> anyone out there before I go whining to MAPS, et al.

Good luck. Roadrunner is a (presumed paying) MAPS customer:

Eddy, contact me off-list, I have a contact at RR.