Nameless and faceless

Ken Magill wrote about Spamhaus last week. In the article he commented about the volunteers.

By most accounts, the folks responsible for maintaining Spamhaus’s blacklists can be a very annoying group to deal with—mainly because they’re faceless and unforgiving.

Today, Ken published a response from Steve Linford, the head of Spamhaus. The response is well worth a read and I encourage you to head over to Ken’s site to read the whole thing.
I didn’t comment last week, mostly because I negatively reacted to the “faceless and unforgiving” comment.
I’ve had lots of interactions with Spamhaus volunteers over the years. And, yeah, I have had the occasional interaction that was frustrating on all sides. I was annoyed, my clients were annoyed and Spamhaus was annoyed. But these experiences are memorable because they’re so rare. Most of the time, the Spamhaus rep is polite and professional.
In my experience, Spamhaus is quite forgiving of honest mistakes. There was one memorable incident a few years ago where I got very descriptive email, including screenshots, from the CEO of one of my clients. That client had a spammer get on their network and trigger a SBL listing. One of the founders went in and disconnected the customer. But, the customer had called in and gotten their new abuse desk person on the phone and managed to get turned back on. Spamhaus was very understanding and the listing was taken down very promptly.
There are two situations where Spamhaus reps have “acted unforgiving.”

  1. When the resolution proposed by the listee won’t do anything to stop unsolicited mail.
  2. When there is a history of spam and broken agreements and repeat behaviour from that particular sender.

I think in both of these situations “unforgiving” is not unreasonable. Spamhaus’ goal is to protect their customer networks from spam. Delisting an entity when their proposed fix won’t actually fix whatever caused the listing in the first place makes no sense. Yes, it’s frustrating to the listee, but in this case Spamhaus’ role is to be the gatekeeper. Likewise, I think volunteers are smart to be cautious when dealing with someone who has repeatedly broken delisting agreements.
As for faceless, well, Ken has it semi-right. Spamhaus volunteers are regulars at MAAWG and I consider some of them friends. Here’s the thing, though, I work for my clients through the sbl-removals@ address, and there are actually listings where I couldn’t tell you which volunteer I was dealing with. It doesn’t really matter, though, they are SR-whatever and acting as a representative of Spamhaus.
The service Spamhaus provides is unique and important. Not only are their lists trusted by large ISPs, but their data is also trusted by law enforcement throughout the world. Without the work done by Spamhaus, a lot of us would have a lot more spam in our inboxes. I know sometimes they block IPs at the most inconvenient times: some delivery friends swear that Spamhaus reps know their vacation schedule.
Overall, though, the Internet is better for having the “nameless and faceless” Spamhaus volunteers than it would be otherwise.

Related Posts

Spamhaus and Gmail

Today’s been chock full of phone calls and dealing with clients, but I did happen to notice a bunch of people having small herds of cows because Spamhaus listed www.gmail.com on the SBL.
“SPAMHAUS BLOCKS GOOGLE!!!” the headlines scream.
My own opinion is that Google doesn’t do enough to police their network and their users, and that a SBL listing isn’t exactly a false positive or Spamhaus overreaching. In this case, though, the headlines and the original article didn’t actually get the story right.
Spamhaus blocked a range of IP addresses that are owned by Google that included the IP for www.gmail.com. This range of IP addresses did not include the gmail outgoing mailservers.
Spamhaus says

Read More

Spammer prosecuted in New Zealand

Today (well, actually tomorrow, but only because New Zealand is on the other side of the date line) the NZ Department of Internal Affairs added a 3rd statement of claim against Brendan Battles and IMG Marketing. This third claim brings the total possible fines to $2.1 million.
Brendan is a long term spammer, who used to be in the US and moved to New Zealand in 2006. His presence in Auckland was noticed by Computerworld when a number of editors and staffers were spammed. When contacted by the paper, Brendan denied being involved in the spam and denied being the same Brendan Battles.
New Zealand anti-spam law went into effect in September 2007. The Unsolicited Electronic Messages Act 2007 prohibits any unsolicited commercial email messages with a New Zealand connection, defined as messages sent to, from or within New Zealand. It also prohibits address harvesting.
The Internal Affairs department also appears to be investigating companies that purchased services from Brendan Battles.

Read More

Marketing to businesses

“If you do stupid things, you’re going to get blocked,” says Jigsaw CEO Jim Fowler in an interview with Ken Magill earlier this week.
Jigsaw is a company that rewards members to input their valuable business contacts. Once the addresses are input into Jigsaw, they are sold to anyone who wants them. Jigsaw gets the money, the people providing information get… something, the people who provided business cards to Jigsaw members get spammed and the people who downloaded the lists get to deal with a delivery mess. Sounds like a lose for everyone but Jigsaw.
Except that now Jigsaw is listed on the SBL for spam support services. Well, that’s going to cause some business challenges, particularly given how many companies use the SBL as part of their filtering scheme.
It’s hard to think of a situation where I would appreciate someone I gave a business card to providing my information to a site that then turns around and lets anyone download it to send email to. I know, I know, there are a million companies out there I’ve never heard of that have The Product that will Solve All my Problems. But, really, I don’t want them in my work mailbox. The address I give out on my business cards is, for, y’know, people to contact me about what I’m selling or to contact me about things they’ve already purchased from me. That address is not for people to market to. I have other addresses for vendors, and even potential vendors, to contact me.
Jigsaw clearly facilitates spam to businesses by collecting email addresses and then selling them on. This is a drain on small businesses who now have inboxes full of valuable offers to wade through. Perhaps their stint on the SBL will make them reconsider their spam support services.
HT: Al

Read More