[7433]番スレッド迷惑メール(spam)撲滅私的調査会 HTML化ログ

[掲示板に戻る] [HTML化ログ大目次へ] [ツリー一覧0015番へ]

[ 7433 ] 迷惑メール(spam)撲滅私的調査会 HTML化ログ

Date: 2003 Jan 06 20:22:27

記事No.7433/タイトル：やられた～
投稿日：2003/01/06(Mon) 20:22:27 / 投稿者：うにょん
★ツリー/親記事[7433]
-レス記事[7450]

ID-code:0KUY3m4X4ZE

　やられました。
　私のアドレスを発信元にして大量のスパムメールを送っている輩がいるらしく、大量のあて先不明メールが私のメールボックスを占領しています。
　このHPも一応読んだのですが、ヘッダを偽装している上に、海外であるため、どのように対処してよいかわかりません。
　皆様の助力を頂ければと思い、書き込みます。
　以下に、不着で戻ってきたメールを２つほど、示します。
　<xxxxx＠xxxxx.xx.jp>が私のアドレスです。伏字にしてあります。
スパムを送ってきている輩と私は何の関係も無いことを申し添えておきます。

１つ目
- - - - - - -
Hi. This is the qmail-send program at umbriel.zianet.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<sertoma＠ooo.zianet.com>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <xxxxx＠xxxxx.xx.jp>
Received: (qmail 82437 invoked by alias); 4 Jan 2003 07:37:38 -0000
Delivered-To: alias-filterme-sertoma＠zianet.com
Received: (qmail 82410 invoked by uid 0); 4 Jan 2003 07:37:37 -0000
Received: from host106-23.pool21758.interbusiness.it (HELO fbiservizi.fbiservizi.intra) (217.58.23.106)
by zianet.com with SMTP; 4 Jan 2003 07:37:37 -0000
Received: from mx0.gmx.net (localhost [127.0.0.1])
by fbiservizi.fbiservizi.intra (8.9.3/8.9.3/Debian 8.9.3-21) with SMTP id IAA24025;
Sat, 4 Jan 2003 08:24:58 +0100
Message-Id: <200301040724.IAA24025＠fbiservizi.fbiservizi.intra>
X-Authentication-Warning: fbiservizi.fbiservizi.intra: Host localhost [127.0.0.1] claimed to be mx0.gmx.net
To: <C:\``VipCustomer\Mtg\almtg.txt＠fbiservizi.fbiservizi.intra>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Sat, 04 Jan 2003 01:03:52 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
- - - - - - -

２つ目
- - - - - - -
NOTE: This is an automatic, machine generated message. Responses to the
above address will not be read.

BiznessOnline.com takes email problems very seriously. If you believe you
have received this failure notice in error, please forward the full
message, with headers, to postmaster＠thebiz.net. We will then be able to
review the message headers and make a determination as to why you received
this failure notice.

Hi. This is the qmail-send program at mx2.thebiz.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<feckman＠albany.net>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <xxxxx＠xxxxx.xx.jp>
Received: (qmail 94097 invoked from network); 6 Jan 2003 03:47:09 -0500
Received: from unknown (HELO sigems.sigems.fr) (212.234.37.100)
by mx.thebiz.net with SMTP; 6 Jan 2003 03:47:09 -0500
Received: from mail.montevideo.com.uy (SERVER [200.82.57.209]) by sigems.sigems.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id CGYMN548; Fri, 3 Jan 2003 16:20:47 +0100
To: <C:\``VipCustomer\Mtg\almtg.txt>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Fri, 03 Jan 2003 09:04:08 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
- - - - - - -

記事No.7450/タイトル：ズパム冤罪ですね？（Re: やられた～
投稿日：2003/01/06(Mon) 23:35:28 / 投稿者：まる
★ツリー/親記事[7433]＋前記事[7433]
-レス記事[7464]

ID-code:UlA5wqhE/wI

むーにょんさん、こんばんわ。明けましておめでとうございます。
新年早々大変な事に巻き込まれましたね？
えーととりあえず
http://www.excite.co.jp/world/
エキサイトの翻訳サイトを紹介しておきます。
で、ここのＴＯＰからのリンク
http://earth.endless.ne.jp/users/stakasa/tools/spamclaim-tools.html
は行きましたか？
ＵＲＬ等から苦情先を探す事が出来ます。・・
ちょっと私の探した範囲では
realapartment.comの苦情先は見つかりませんでした。
逆引きも出ないようで。。ちょっとどうなっているのか判りません（^^;

うーん、とりあえず受信しているアドレスのＩＳＰかネットサービス会社へ
「カクカクしかじかだから有効なフィルタリングをしてくれ」等の相談をするのが良いかと思います。

それと（間違った）エラーを返してくるＩＳＰへは「送信者は私では無い」との
主張は良いと思います。

あまり役に立てないようですみません（^^;;
毎日見てますので必要であれば呼んで下さい。

記事No.7464/タイトル：Re: ズパム冤罪ですね？（Re: やられた～
投稿日：2003/01/07(Tue) 11:35:15 / 投稿者：うにょん
★ツリー/親記事[7433]＋＋前記事[7450]
-レス記事[7467]

ID-code:0KUY3m4X4ZE

　まるさん、あけましておめでとうございます。

　はい、新年早々、スパム冤罪を食らいました(ToT)

　早速、レスを頂きましてありがとうございます。

> で、ここのＴＯＰからのリンク
> http://earth.endless.ne.jp/users/stakasa/tools/spamclaim-tools.html
> は行きましたか？
> ＵＲＬ等から苦情先を探す事が出来ます。・・

　行ってみたんですが、出てきた結果に対してどうすべきなのががさっぱりでして・・・・(^^;;;

> うーん、とりあえず受信しているアドレスのＩＳＰかネットサービス会社へ
> 「カクカクしかじかだから有効なフィルタリングをしてくれ」等の相談をするのが良いかと思います。

　ありがとうございます。早速、相談メールを送りました。

> それと（間違った）エラーを返してくるＩＳＰへは「送信者は私では無い」との
> 主張は良いと思います。

　なるほど、そういう手もあるんですね。参考になります。
　でも、不着メールを返すISPは２０以上あるんですよ、これは根気が要りますね(^^;;;

> あまり役に立てないようですみません（^^;;

　とんでもないです。ありがとうございます。

記事No.7467/タイトル：Re^2: ズパム冤罪ですね？（Re: やられた～
投稿日：2003/01/07(Tue) 13:04:52 / 投稿者：管理人 <メール送信>
★ツリー/親記事[7433]＋＋＋前記事[7464]
-レス記事[7482][7495]

ID-code:/q8xmlI5ru2

　よろしければ同様なサンプルをもっと挙げていただけますか？
とりあえず５個以上、10個以内くらいです。

> > それと（間違った）エラーを返してくるＩＳＰへは「送信者は私では無い」との
> > 主張は良いと思います。
>
> 　なるほど、そういう手もあるんですね。参考になります。
> 　でも、不着メールを返すISPは２０以上あるんですよ、これは根気が要りますね(^^;;;

　最近の英文spammerは悪質化しているので、この対処、
すなわち不着メールを返すサーバへの連絡が基本になるかもしれませんが
指南ページでも書いているように、そして上でもおっしゃっているように
根気が必要ですし、きりがないという場合もあります。

　とりあえず多くのエラーメール内に残された元のスパムのヘッダから
共通する大元のネット業者を探す努力が必要で、うまくそれが
みつかれば比較的分かりやすいのですが...

　ご自分で十二分に検討できるなら必要ありませんがもし
そういう感じではないならできる限り他のエラーのものも上げてください。

>
>
> > あまり役に立てないようですみません（^^;;
>
> 　とんでもないです。ありがとうございます。

記事No.7482/タイトル：ズパム=×・スパム（^^;冤罪ですね？（Re: やられた～
投稿日：2003/01/08(Wed) 01:44:30 / 投稿者：まる
★ツリー/親記事[7433]＋＋＋＋前記事[7467]
-レス記事[7496]

ID-code:UlA5wqhE/wI

管理人さん明けましておめでとうます。あ、もしかして旧正月の時が良いのかな？（^^;

一応レスをここにぶら下げときますね＞うにょんさんへ

タイトル：ズパム冤罪・・・は・・「スパム」ですね（^^;
なーに間違ってんだか＜私。。

> > > それと（間違った）エラーを返してくるＩＳＰへは「送信者は私では無い」との
> > > 主張は良いと思います。
> >
> > 　なるほど、そういう手もあるんですね。参考になります。
> > 　でも、不着メールを返すISPは２０以上あるんですよ、これは根気が要りますね(^^;;;
>

私の場合ですと国内の場合だとtoで送信する場合もあり、
それぞれの抗議（送信者のISPとか広告先のHPの会社だとか商品の製造元だとか）勿論送信者本人へも。。）
を本文に区切って書いて、toで送信することによって「抗議している事をアピール」していた事もあります。

うにょんさんの場合に当てはまめてよいかどうかは判りませんが
複数のISPへtoで送信して「私はこれだけの会社からエラー受け取っているだぞ？冤罪被害者なんです！」というのはダメでしょうか？

まあ、ISP同士が連絡しあう事も無いとは思いますが。。
国内ですと何度か連絡を取り合うとおっしゃる会社もあった記憶があります。あ、商品のメーカーだったか販社だったか。。ISP（プロバ）では無いとは思います（^^;

記事No.7496/タイトル：Re: ズパム=×・スパム（^^;冤罪ですね？（Re: やられた～
投稿日：2003/01/08(Wed) 12:47:55 / 投稿者：うにょん
★ツリー/親記事[7433]＋＋＋＋＋前記事[7482]

ID-code:0KUY3m4X4ZE

　まるさんこんにちは

> 私の場合ですと国内の場合だとtoで送信する場合もあり、
> それぞれの抗議（送信者のISPとか広告先のHPの会社だとか商品の製造元だとか）勿論送信者本人へも。。）
> を本文に区切って書いて、toで送信することによって「抗議している事をアピール」していた事もあります。
>
> うにょんさんの場合に当てはまめてよいかどうかは判りませんが
> 複数のISPへtoで送信して「私はこれだけの会社からエラー受け取っているだぞ？冤罪被害者なんです！」というのはダメでしょうか？

　はい、冤罪被害初心者？の私には、良い考えに思います。
　今までに来ているところだけでも、やってみようかと思います。

　あとは、日々ISPが増えつづけていることですか。
　頭いたい・・・・(ToT)

　ありがとうございます。

記事No.7495/タイトル：Re^3: ズパム冤罪ですね？（Re: やられた～
投稿日：2003/01/08(Wed) 12:38:43 / 投稿者：うにょん
★ツリー/親記事[7433]＋＋＋＋前記事[7467]
-レス記事[7499]

ID-code:0KUY3m4X4ZE

　管理人さん、あけましておめでとうございます。
　レスありがとうございます。

> 　よろしければ同様なサンプルをもっと挙げていただけますか？
> とりあえず５個以上、10個以内くらいです。

　はい、後ろに１０通と
　昨日から宣伝内容が変わったもの１通を上げときます。
　１通文字化け部分がありますが、おそらく中国語かなんかだと思います。

> 　とりあえず多くのエラーメール内に残された元のスパムのヘッダから
> 共通する大元のネット業者を探す努力が必要で、うまくそれが
> みつかれば比較的分かりやすいのですが...
> 　ご自分で十二分に検討できるなら必要ありませんがもし
> そういう感じではないならできる限り他のエラーのものも上げてください。

　今までこのようなことに巻き込まれた事が無かったので、どう対処してよいかさっぱりでして、助言等頂ければ幸いです。

１通目
--------
Hi. This is the qmail-send program at teapot.egroups.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<marketing＠egroups.net>:
Unknown user.

--- Below this line is a copy of the message.

Return-Path: <xxxxx＠xxxxx.xx.jp>
Received: (qmail 6116 invoked from network); 6 Jan 2003 08:54:50 -0000
Received: (QMFILT: 1.0); 06 Jan 2003 08:54:50 -0000
Received: from unknown (HELO sigems.sigems.fr) (212.234.37.100)
by teapot with SMTP; 6 Jan 2003 08:54:50 -0000
Received: from mail.montevideo.com.uy (SERVER [200.82.57.209]) by sigems.sigems.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id CGYMN548; Fri, 3 Jan 2003 16:20:47 +0100
To: <C:\``VipCustomer\Mtg\almtg.txt>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Fri, 03 Jan 2003 09:04:08 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

２通目
--------
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_000_01C2B561.414984AC
Content-Type: text/plain; charset="windows-1252"

Your message

To: C:\``VipCustomer\Mtg\almtg.txt
Subject: The economy has finally turned the corner
Sent: Fri, 3 Jan 2003 16:04:08 +0100

did not reach the following recipient(s):

sam.nandra＠bmg.co.uk on Mon, 6 Jan 2003 09:54:41 +0100
The recipient name is not recognized
The MTS-ID of the original message is: c=us;a=
;p=bag;l=DEBAGE1050301060854CM2SPVLK
MSEXCH:IMS:BAG:EUROPE-HUB:DEBAGE105 0 (000C05A6) Unknown Recipient

------_=_NextPart_000_01C2B561.414984AC
Content-Type: message/rfc822

From: xxxxx＠xxxxx.xx.jp
To: C:\``VipCustomer\Mtg\almtg.txt
Subject: The economy has finally turned the corner
Date: Fri, 3 Jan 2003 16:04:08 +0100
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
X-MS-Embedded-Report:
Content-Type: text/plain; charset="windows-1252"

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system
in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as
well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
------_=_NextPart_000_01C2B561.414984AC--

３通目
--------
This message was created automatically by mail delivery software (Exim).

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

abase＠tba.com.br
mailbox is full (MTA-imposed quota exceeded while writing to file /var/spool/mail/a/b/abase＠tba.com.br):
retry timeout exceeded

------ This is a copy of the message, including all the headers. ------

Return-path: <xxxxx＠xxxxx.xx.jp>
Received: from [212.234.37.100] (helo=sigems.sigems.fr)
by br.inter.net with esmtp (Exim 3.36 #1)
id 18VT1v-0003RI-00
for abase＠tba.com.br; Mon, 06 Jan 2003 06:54:44 -0200
Received: from mail.montevideo.com.uy (SERVER [200.82.57.209]) by sigems.sigems.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id CGYMN548; Fri, 3 Jan 2003 16:20:47 +0100
To: <C:\``VipCustomer\Mtg\almtg.txt>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Fri, 03 Jan 2003 09:04:08 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Message-Id: <E18VT1v-0003RI-00＠br.inter.net>

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

４通目
--------
--zVfD4n9Qbt-vy2TK4-wONhsYUC9rRwzCOSr6mF6
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

We are unable to deliver the message from <xxxxx＠xxxxx.xx.jp>
to <marketing＠egroups.com>.

The email address used to send your message is not subscribed to this
group. If you are a member of this group, please be aware that you may
only send messages to this group using the email address(es) you have
registered with Yahoo! Groups. Yahoo! Groups allows you to send messages
using the email address you originally used to register, or an alternate
email address you specify in your personal settings.

If you would like to subscribe to this group:
1. visit
http://groups.yahoo.com/group/marketing/join
-OR-
2. send email to marketing-subscribe＠yahoogroups.com

If you would like to specify an alternate email address:
1. visit
http://groups.yahoo.com/myprefs?edit=2
2. type your alternate email address in the area labeled "Alternate
posting addresses".
3. click the "Save Changes" button
4. wait approximately 10 minutes for the change to take effect

After you follow these steps, you will be able to send messages
to all your groups using this alternate email address.

For further assistance, please email support＠yahoogroups.com
or visit http://help.yahoo.com/help/us/groups/

--zVfD4n9Qbt-vy2TK4-wONhsYUC9rRwzCOSr6mF6
Content-Type: message/rfc822

Received: (qmail 77771 invoked from network); 6 Jan 2003 08:47:20 -0000
Received: from unknown (66.218.66.217)
by m3.grp.scd.yahoo.com with QMQP; 6 Jan 2003 08:47:20 -0000
Received: from unknown (HELO sigems.sigems.fr) (212.234.37.100)
by mta2.grp.scd.yahoo.com with SMTP; 6 Jan 2003 08:47:19 -0000
Received: from mail.montevideo.com.uy (SERVER [200.82.57.209]) by sigems.sigems.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id CGYMN548; Fri, 3 Jan 2003 16:20:47 +0100
To: <C:\``VipCustomer\Mtg\almtg.txt>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Fri, 03 Jan 2003 09:04:08 -0600
MIME-Version: 1.0
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

--zVfD4n9Qbt-vy2TK4-wONhsYUC9rRwzCOSr6mF6--

５通目
--------
This message was created automatically by mail delivery software (Exim).

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

unnb＠rz.uni-karlsruhe.de
unknown local-part "unnb" in domain "rz.uni-karlsruhe.de"

------ This is a copy of the message, including all the headers. ------

Return-path: <xxxxx＠xxxxx.xx.jp>
Received: from sigems.sigems.fr ([212.234.37.100])
by mailhost.rz.uni-karlsruhe.de with esmtp (Exim 3.36 #1)
id 18VSiq-0003SF-01 for unnb＠rz.uni-karlsruhe.de; Mon, 06 Jan 2003 09:35:00 +0100
Received: from mail.montevideo.com.uy (SERVER [200.82.57.209]) by sigems.sigems.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id CGYMN548; Fri, 3 Jan 2003 16:20:47 +0100
To: <C:\``VipCustomer\Mtg\almtg.txt>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Fri, 03 Jan 2003 09:04:08 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Message-Id: <E18VSiq-0003SF-01＠mailhost.rz.uni-karlsruhe.de>

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

６通目
--------
This message was created automatically by mail delivery software (Exim).

A message that you sent could not be delivered to one or more of its
recipients. This is a permanent error. The following address(es) failed:

ctec＠traverse.com
unknown local-part "ctec" in domain "traverse.com"

------ This is a copy of the message, including all the headers. ------

Return-path: <xxxxx＠xxxxx.xx.jp>
Received: from [212.234.37.100] (helo=sigems.sigems.fr)
by neumann.traverse.net with esmtp (Exim 3.33 #1)
id 18VShE-00062M-00
for ctec＠traverse.com; Mon, 06 Jan 2003 03:33:20 -0500
Received: from mail.montevideo.com.uy (SERVER [200.82.57.209]) by sigems.sigems.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id CGYMN548; Fri, 3 Jan 2003 16:20:47 +0100
To: <C:\``VipCustomer\Mtg\almtg.txt>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Fri, 03 Jan 2003 09:04:08 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Message-Id: <E18VShE-00062M-00＠neumann.traverse.net>

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

７通目
--------
Diese Nachricht wurde von der Mail-Software automatisch erzeugt.
This message was created automatically by mail delivery software.

Eine Nachricht von Ihnen konnte nicht an alle Empfaenger zugestellt werden.
A message that you sent could not be delivered to all of its recipients.

Folgende Adressen schlugen fehl:
The following address(es) failed:

oldcat＠web.de
transport todb: transport todb: user-settings not found.:
retry timeout exceeded

------ Dies ist eine Kopie der Nachricht, inklusive aller Kopfzeilen. ------
------ This is a copy of the message, including all the headers. ------

Return-path: <xxxxx＠xxxxx.xx.jp>
Received: from [212.234.37.100] (helo=sigems.sigems.fr)
by mx10.web.de with esmtp (WEB.DE(Exim) 4.94 #23)
id 18VSYd-0008R0-00
for oldcat＠web.de; Mon, 06 Jan 2003 09:24:27 +0100
Received: from mail.montevideo.com.uy (SERVER [200.82.57.209]) by sigems.sigems.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id CGYMN548; Fri, 3 Jan 2003 16:20:47 +0100
To: <C:\``VipCustomer\Mtg\almtg.txt>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Fri, 03 Jan 2003 09:04:08 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit
Message-Id: <E18VSYd-0008R0-00＠mx10.web.de>

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

８通目
--------
Hi. This is the qmail-send program at iquest3.iquest.net.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.

<oldcath＠iquest.net>:
Sorry, no mailbox here by that name. (#5.1.1)

--- Below this line is a copy of the message.

Return-Path: <xxxxx＠xxxxx.xx.jp>
Received: (qmail 28258 invoked from network); 6 Jan 2003 08:27:50 -0000
Received: from unknown (HELO sigems.sigems.fr) (212.234.37.100)
by iquest3.iquest.net with SMTP; 6 Jan 2003 08:27:50 -0000
Received: from mail.montevideo.com.uy (SERVER [200.82.57.209]) by sigems.sigems.fr with SMTP (Microsoft Exchange Internet Mail Service Version 5.5.2653.13)
id CGYMN548; Fri, 3 Jan 2003 16:20:47 +0100
To: <C:\``VipCustomer\Mtg\almtg.txt>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Fri, 03 Jan 2003 09:04:08 -0600
MIME-Version: 1.0
Content-Type: text/plain;
charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

９通目
--------
--==IFJRGLKFGIR42098UHRUHIHD
Content-Type: text/plain; charset=gb2312
X-Content-Transfer-Encoding: base64

ミナマ「

ヨ・ The economy has finally turned the corner

テサモミスサクカ:

kaverill＠graetzer.com

メェ:

マ・email.microdsi.net; SMTP Protocol Returned a Permanent Error 550 unknown user <kaverill＠graetzer.com> エォヒヘハアウ・

--==IFJRGLKFGIR42098UHRUHIHD
Content-Type: message/delivery-status

Reporting-MTA: dns;zndc01.znnt.com.cn

Final-Recipient: rfc822;kaverill＠graetzer.com
Action: failed
Status: 5.0.0
Remote-MTA: smtp;email.microdsi.net
Diagnostic-Code: X-Notes; マ・email.microdsi.net; SMTP Protocol Returned a Permanent Error 550 unknown user <kaverill＠graetzer.com> エォヒヘハアウ・エ・

--==IFJRGLKFGIR42098UHRUHIHD
Content-Type: message/rfc822

Received: from smtphost.home.se ([218.76.51.2])
by zndc01.znnt.com.cn (Lotus Domino Release 5.0.10)
with SMTP id 2003010317562130:303 ;
Fri, 3 Jan 2003 17:56:21 +0800
To: <C:\``VipCustomer\Mtg\almtg.txt>
From: "lieselotte ware" <xxxxx＠xxxxx.xx.jp>
Subject: The economy has finally turned the corner
Date: Fri, 03 Jan 2003 03:50:34 -0600
MIME-Version: 1.0
X-MIMETrack: Itemize by SMTP Server on oa/znnt(Release 5.0.10 |March 22, 2002) at 2003-01-03
17:56:21,
Serialize by Router on oa/znnt(Release 5.0.10 |March 22, 2002) at 2003-01-04
05:10:12,
Serialize complete at 2003-01-04 05:10:12
Message-ID: <OFAE25FC15.9E40D7E8-ON48256CA3.00369944＠znnt.com.cn>
Content-Type: text/plain; charset="Windows-1252"
Content-Transfer-Encoding: 7bit

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

--==IFJRGLKFGIR42098UHRUHIHD--

１０通目
--------
This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------_=_NextPart_000_01C2B3B7.57071D0A
Content-Type: text/plain; charset="iso-8859-1"

Your message

Subject: The economy has finally turned the corner
Sent: Thu, 2 Jan 2003 23:50:34 -1000

did not reach the following recipient(s):

BECKY＠OCEANIC.COM on Fri, 3 Jan 2003 20:05:51 -1000
The recipient name is not recognized
The MTS-ID of the original message is: c=us;a= ;p=oceanic
cablevis;l=HUINA0301040605Z8WT62X9
MSEXCH:IMS:Oceanic Cablevision Inc.:OCEANIC1:HUINA 0 (000C05A6) Unknown
Recipient

------_=_NextPart_000_01C2B3B7.57071D0A
Content-Type: message/rfc822

Message-ID: <OFAE25FC15.9E40D7E8-ON48256CA3.00369944＠znnt.com.cn>
From: xxxxx＠xxxxx.xx.jp
To:
Subject: The economy has finally turned the corner
Date: Thu, 2 Jan 2003 23:50:34 -1000
MIME-Version: 1.0
X-Mailer: Internet Mail Service (5.5.2656.59)
X-MS-Embedded-Report:
Content-Type: text/plain; charset="iso-8859-1"

Dear Homeowner,

Interest Rates are at their lowest point in 40 years! We help you find the
best rate for your situation by matching your needs with hundreds of
lenders!

Home Improvement, Refinance, Second Mortgage,
Home Equity Loans, and much, much more!

You're eligible even with less than perfect credit!

This service is 100% FREE to home owners and new home buyers
without any obligation.

Where others say NO, we say YES!!!

Take just 2 minutes to complete the following form.
There is no obligation, all information is kept strictly
confidential, and you must be at least 18 years of age.
Service is available within the United States only.
This service is fast and free.

We specialize in approving BAD CREDIT!

http://realapartment.com/mtg/
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
This email has been screened and filtered by our in house ""OPT-OUT"" system
in
compliance with state laws. If you wish to "OPT-OUT" from this mailing as
well
as the lists of thousands of other email providers please visit

http://realapartment.com/mtg/optout.html
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

------_=_NextPart_000_01C2B3B7.57071D0A--

昨日から来た広告内容が変わったものについても上げときます。
--------
--------
This is a MIME-encapsulated message

--h07LtcU29859.1041976538/host1.wpia.net

The original message was received at Tue, 7 Jan 2003 16:55:28 -0500
from 236.Red-80-59-171.pooles.rima-tde.net [80.59.171.236]

----- The following addresses had permanent fatal errors -----
<brett＠scheffelequip.com>

----- Transcript of session follows -----
brett＠scheffelequip.com... No such user here
550 5.1.1 <brett＠scheffelequip.com>... User unknown

--h07LtcU29859.1041976538/host1.wpia.net
Content-Type: message/delivery-status

Reporting-MTA: dns; host1.wpia.net
Received-From-MTA: dns; 236.Red-80-59-171.pooles.rima-tde.net
Arrival-Date: Tue, 7 Jan 2003 16:55:28 -0500

Final-Recipient: rfc822; brett＠scheffelequip.com
Action: failed
Status: 5.1.1
Last-Attempt-Date: Tue, 7 Jan 2003 16:55:38 -0500

--h07LtcU29859.1041976538/host1.wpia.net
Content-Type: message/rfc822

Return-Path: <xxxxx＠xxxxx.xx.jp>
Received: from anet.ne.jp (236.Red-80-59-171.pooles.rima-tde.net [80.59.171.236])
by www.scheffelequip.com (8.10.2/8.10.2) with SMTP id h07LtPU29848
for <brett＠scheffelequip.com>; Tue, 7 Jan 2003 16:55:28 -0500
From: xxxxx＠xxxxx.xx.jp
Message-ID: <000100b6be36$dbb72865$77255268＠tcvntoa.qpm>
To: <brett＠scheffelequip.com>
Subject: Fw: VIRUS PROTECTION IS A MUST, YOU NEED SYSTEMWORKS! 5057Ebvx1-077eFvt-16
Date: Wed, 08 Jan 2003 01:13:56 -0500
MIME-Version: 1.0
X-Priority: 3
X-Mailer: Microsoft Outlook Express 5.00.2615.200
Importance: Normal
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit

x
cw

*NEW-Special Package Deal!*
Norton SystemWorks 2003 Software Suite -Professional Edition-

ATTN: This is a MUST for ALL Computer Users!!!

Includes Five - Feature-Packed Utilities...ALL For ONE Special LOW Price!

-Norton AntiVirus 2003
-Norton Ghost 2003
-GoBack 3 Personal Edition
-Norton Utilities 2003
-Norton CleanSweep 2003

This Software Will:
- Protect your computer from unwanted and hazardous viruses
- Help secure your private & valuable information
- Allow you to transfer files and send e-mails safely
- Backup your ALL your data quick and easily
- Improve your PC's performance w/superior integral diagnostics!

Six Feature-Packed Utilities...For One Great Price!
A $300-Plus Combined Retail Value!

YOURS for Only $39.99! (Includes **FREE** Shipping TOO!)

Don't fall prey to destructive viruses or hackers!
Protect your computer and your valuable information!

CLICK HERE to Order Yours NOW!

http://realapartment.com/norton/nsw15.htm
***************************************************************
You are receiving this special offer because you have provided permission
to receive third party email communications regarding special online promotions
or offers. If you do not wish to receive any further messages from AB Network.

http://www.realapartment.com/dvdps/

cw

550l3

--h07LtcU29859.1041976538/host1.wpia.net--

以上です。よろしくお願いします。

記事No.7499/タイトル：対処方針(Re^4: ズパム冤罪ですね？（Re: やられた～)
投稿日：2003/01/08(Wed) 16:33:06 / 投稿者：管理人 <メール送信>
★ツリー/親記事[7433]＋＋＋＋＋前記事[7495]
-レス記事[7554]

ID-code:/q8xmlI5ru2（本記事は01/10-12:08に修正されました）

　今回のサンプルを見る限り、かなり対処が可能です。
まず今回の11通のエラーメールから分かる、
スパム配信の傾向に関し、重要な点をあげると以下のようになります。

--------------------
●１通目、３～８通目

全てに共通する部分
Received: from unknown (HELO sigems.sigems.fr) (212.234.37.100)
by iquest3.iquest.net with SMTP; 日時
Received: from mail.montevideo.com.uy (SERVER [200.82.57.209]) by
sigems.sigems.fr with SMTP (Microsoft Exchange Internet Mail Service
Version 5.5.2653.13) id CGYMN548; 日時

それぞれの受け手側到着日時

6 Jan 2003 08:54:50 -0000
Mon, 06 Jan 2003 06:54:44 -0200
6 Jan 2003 08:47:20 -0000
Mon, 06 Jan 2003 09:35:00 +0100
Mon, 06 Jan 2003 03:33:20 -0500
Mon, 06 Jan 2003 09:24:27 +0100
6 Jan 2003 08:27:50 -0000

●２通目、１０通目
　エラーメール中に元のspamのヘッダの記述がないので不明
　ただしヘッダと内容の類似性から前項と同じ可能性高し

●９通目
Received: from smtphost.home.se ([218.76.51.2])
by zndc01.znnt.com.cn (Lotus Domino Release 5.0.10)
with SMTP id 2003010317562130:303 ;
Fri, 3 Jan 2003 17:56:21 +0800

→しかし日時を見ると、前者のメールヘッダの捏造部分である
01/03の記録が残っているので
おそらくもともと１通目などと同じで、
そのうちヘッダの一部のReceivedが欠落しただけと思われる

●最後

　かなり違うスパムの模様
Received: from anet.ne.jp (236.Red-80-59-171.pooles.rima-tde.net [80.59.171.236])
by www.scheffelequip.com (8.10.2/8.10.2) with SMTP id h07LtPU29848
for <brett＠scheffelequip.com>; Tue, 7 Jan 2003 16:55:28 -0500
-------------

　とりあえず上であげられたデータは比較的単純、すなわち
ほとんどで共通項が見つかります。
具体的には
200.82.57.209　mail.montevideo.com.uy (SERVER [200.82.57.209])
から発信して
212.234.37.100　sigems.sigems.fr
を経由して、届けられようとしたスパムであることが分かります。

　ただし日時のずれや、spamの傾向を考えるに、
200.82.57.209　mail.montevideo.com.uy (SERVER [200.82.57.209])
から発信されているという記述は捏造である可能性が高く、
そこは無視しておき、とにもかくにも

212.234.37.100　sigems.sigems.fr

に苦情を送るべきことになります。すなわちここが
http://earth.endless.ne.jp/users/stakasa/spam/yuanzui/laji-yuanzui.html#yuanzui050202
で書いている、大元のネット業者（実は大元ではない可能性がありますが
ともかく）となりますので、そこ以下の解説で書いている内容の
苦情メールを送ってください。

　なお具体的にそこのIPアドレスに関して、スパムがらみの苦情をする
窓口アドレスですが
http://afelandra.com/~stakasa/cgi-bin/proxy.cgi?query=212.234.37.100&targetnic=auto
にあるように
abuse＠rain.fr
（＠を半角に直すこと）
です。

さて、上のデータを見る際に注意すべきなのは
上のエラーメールで報告されている一連の元スパム
すなわち
abuse＠rain.fr
を苦情窓口とするスパムは
グリニッジ標準時刻である１月６日　8：00頃に配信された
スパムばかりだということです。

　つまり、その後、すでにスパマーは
212.234.37.100　sigems.sigems.fr
とは別のIPアドレスを通じてスパムを送っており、
既に
abuse＠rain.fr
に送っても遅いかもしれません。現在でも、
212.234.37.100　sigems.sigems.fr
の記述が入っているエラーメールが届いているなら上述したように
abuse＠rain.fr
に早急にメールを出すべきですが、
もし現在、頻繁に届いているエラーメールでは、
別なIPアドレスが共通で入っているようなら
そのIPアドレスを見つけ、それを
http://afelandra.com/~stakasa/geektools/templates/geek_frame.html
に入れて出てくる窓口に、同様な苦情を送ってください。

　たとえば最後に紹介したものの中にあるIPアドレス80.59.171.236が
その後に届いているエラーメールも入っていたりするなら、
http://afelandra.com/~stakasa/cgi-bin/proxy.cgi?query=80.59.171.236&targetnic=auto
で登録されている窓口すなわち
nemesys＠telefonica.es
に送るべきであるということです。

　このように、
大切なのは、「頻々に」あるいは「もっとも今から近い時刻に届いた
エラーメール中ヘッダに共通するIPアドレスを見つける」
ということです。
　なぜでしょうか？

　スパマーは利用しているネット業者を定期的に変える傾向にあります。
　今ここで仮に、スパマーが毎日、
利用（悪用）するサーバを変えているとしましょう。

01/06の時には前述の通り
212.234.37.100　sigems.sigems.fr
を使っていたかもしれません。
01/07の時には
236.Red-80-59-171.pooles.rima-tde.net [80.59.171.236]
を使っていたかもしれません。
そして
01/08（今日）は別なサーバを使っているかもしれません。

　もしそうであるとした場合、
そしてスパマーは24時間それを使おうと考えている場合に、
あなたが01/08の日の、最初何通かのエラーメールに基づき
今からでも迅速に行動を起こした結果、スパマーによる
そこのサーバ利用の送信行為を24時間までは許さず、
18時間でストップさせることが出来るかもしれません。

　そして明日01/09は、やはり最初の数通のエラーメールで
あなたが迅速な行動を起こした場合
スパマーがそのサーバを利用することは６時間しか出来なくなるかもしれません。

　スパマーは敏感です。
　あなたがそういう行動をする、すなわちあなたのアドレスを詐称することで、
最初のときよりも不便になってきた場合には
おそらくあなたのメールアドレスは使わなくなります。

（スパマーがあなたに特別な嫌がらせの感情を抱いていない限り。
そして一般のスパマーは間違いなく抱いていません）

　なお、今回、うにょん様はスパムの中身で
「同じ系統らしい」とお感じになっていたように思われます。
それも間違いではないですが、大事なのは上で挙げたように
エラーメールの中に書いてあるスパムの本文ではなく、スパムのヘッダの
共通性に注目することです。

　今回紹介していただいた11通ならば、そのうち７通で、
中身に書いてあるヘッダに
「212.234.37.100というIPアドレス」
が入っていることを改めて確認し、
ヘッダに共通部分があるというのがどういうことか確認してください。
-------------
　以上の話が理解できたのなら、うにょん様がすべきことは、
エラーメールが届くたびに
まずご自分に届いたエラーメールの中に書いてあるヘッダを見て
ここしばらく最近のエラーメールに共通のIPアドレスがあるかを
確認することです。

　共通なIPアドレスがあることに気が付いたら
それを
http://afelandra.com/~stakasa/geektools/templates/geek_frame.html
にいれて苦情受付窓口を探し、
http://earth.endless.ne.jp/users/stakasa/spam/yuanzui/laji-yuanzui.html#yuanzui050204
で指南しているような内容の苦情メールを、粘り強く
出すことです。

　以上ですがもしまた分からなくなったら聞いてください。
ただし以上のことは実は
http://earth.endless.ne.jp/users/stakasa/spam/yuanzui/laji-yuanzui.html
で書いてあること（捏造云々に関しては慣れが必要なので
書いていませんが...）ですので、
今回、ご自分の場合に当てはめて解説された内容を元に理解し
もう一度上のページ内容を熟読されれば分かりやすいかと思います。

　御健闘とトラブル収束を一刻も早く願っています。

記事No.7554/タイトル：Re: 対処方針(Re^4: ズパム冤罪ですね？（Re: やられた～)
投稿日：2003/01/10(Fri) 11:31:39 / 投稿者：うにょん
★ツリー/親記事[7433]＋＋＋＋＋＋前記事[7499]

ID-code:0KUY3m4X4ZE

　こんにちは、管理人さん。遅くなりました。

　す、すごい。見る人が見ればこんなに多くのことがわかるんですね。
　丁寧にわかりやすく書いていただいて、ありがとうございました。

　しかし、HPにすでに書いてあったとは、お手数おかけして済みませんでした。

　ところで、1/8夕刻から急に不着メールが来なくなりました。いつもは夕刻に着くことが多かったのですが。
　アカウントを管理している会社に「対応できない」といわれ、交渉している際中だっので、そこでなんらかの対応がなされとは考えにくく、発信元が一時的にせよ、やめたように思えます。
　お教えくださった対応を実践しようとしていた矢先に肩透かしを食らいました。
　とはいっても、まだ２日もたってないので、いつ再開されるかもわかりませんが、次に来た時は、すばやい対応が出来そうです。
　ありがとうございました。

　次が来たら、またお知らせします。

[掲示板に戻る] [HTML化ログ大目次へ][ツリー一覧0015番へ]
bokumetusiteki