<<< Date Index >>>     <<< Thread Index >>>

[IP] ISPs blamed for Spam





http://www.washingtonpost.com/wp-dyn/articles/A28950-2003Dec24.html


Group Lambastes UUNet on Spam

By Jonathan Krim
Washington Post Staff Writer
Thursday, December 25, 2003; Page E01

When Virginia's attorney general announced the arrest of a man they alleged was a top e-mail spammer two weeks ago, an executive of UUNet -- one of the country's largest Internet network providers -- stood proudly nearby.

The Northern Virginia-based company, a division of WorldCom Inc., had helped prosecutors build their case against the man listed by a leading anti-spam tracking group as the eighth-biggest spammer in the world.

But that same group, Spamhaus.org, also monitors the world's Internet service providers, the companies that connect people and businesses to the Internet. In that category, Spamhaus lists UUNet as the ISP allowing the most spammers onto its network, based on the Internet addresses they are using.

Britain-based Spamhaus lists 128 spammers with accounts on UUNet-controlled networks, although some of the listings were for the same organization operating under multiple names.

Of the 128, 16 are among the most prolific spammers, according to Spamhaus. Only bulk mailers who have been kicked off at least three other ISPs for spamming are on the Spamhaus list.

In the war against spam, ISPs play a crucial role. They are the gateways to the online world, and bulk e-mailers need them to send spam. As spam has grown to account for roughly 60 percent of all e-mail, many ISPs have spent heavily to beef up their spam-fighting efforts, often competing with one another over whose features are most effective.

Many ISPs engage in daily combat with spammers, shutting down their connections only to see the spammers pop up again with new accounts under different names.

Spamhaus lists more than 275 U.S.-based ISPs with spammers operating on their networks, many of them for as long as a year. The list includes some of the best-known ISPs, including those operated by telephone and cable companies.

Craig Silliman, a UUNet network facilities director, said the Spamhaus ranking is unfair.

UUNet, along with a few other firms such as AT&T Corp., Level 3 Communications Inc. and Cable & Wireless PLC, own large portions of the Internet's "backbone." These firms act as wholesalers to other firms, including large ISPs such as America Online and Microsoft's MSN network.

Some companies, in turn, might resell some of that Internet space to smaller firms. Thus, Silliman said, the spammers listed as being the responsibility of UUNet's networks are generally not its direct customers.

Alan Murphy, a Spamhaus volunteer, responded that UUNet could do much more.

"We hear these customer of a customer of a customer excuses constantly," he said. "There's no doubt that UUNet is selling . . . connectivity to major spam gangs."

Two ISP services operated by telephone giant SBC Communications Inc., swbell.net and pacbell.net, have a combined 61 known spammers on their networks, according to Spamhaus. In the case of swbell.net, a large percentage of the spammers are listed by Spamhaus as especially notorious and have made its Register of Known Spam Operations list.

"More than two . . . listings is a strong indication your ISP is in trouble," Spamhaus advises ISPs.

Larry Meyer, an SBC spokesman, said his company does not consult the Spamhaus lists or use them as a resource.

"We choose to maintain our own list," Meyer said. "We act when there are complaints to our abuse lines."

At UUNet, Silliman said his firm respects Spamhaus and tries to work with it, but many of the listings are out of date.

UUNet, he said, aggressively enforces its policies that prohibit spam "and we terminate customers . . . whether downstream or not" if they violate them.

But he said it is not always easy to work through layers of customers to find the right entity to terminate a spammer's account. "The system sometimes breaks down," he said.

Spamhaus has a different view.

"This is UUNet," the Spamhaus site says about one alleged spammer on UUNet, greenbamboo.net. "So, sadly, we expect this listing to be permanent."

Increasingly, ISPs are taking spammers to court, and are the only private entities given the right to sue under a new federal anti-spam law that takes effect Jan. 1.

As a result, many spammers are moving their operations overseas.

Of the 10 worst performing ISPs on the Spamhaus list, five are based outside the United States, a number that experts expect to grow.

"As spamming becomes more organized and criminal . . . they are tending to find places overseas," said Susan Larson, a vice president for SurfControl, an anti-spam service provider.

Larson said overseas Internet providers, especially in China, Brazil, Russia and India, offer "bullet-proof" hosting of both e-mail and Web sites.

This means they will resist pressure from anti-spam groups to cancel the accounts of spammers doing business with them.

Some U.S. companies offer similar services, though they all have disclaimers that they do not condone or permit spam.

"Some ISPs in the United States are not being as vigilant as they claim to be," Larson said.

Level3 and Exodus.net, a division of Cable & Wireless, also are on Spamhaus's top 10 list of companies that operate networks used by large spammers. Like UUNet, they are wholesalers of Internet connections.

Bill Hancock, chief security officer for Cable & Wireless, said his company consults the Spamhaus lists and enforces anti-spam policies. But like UUNet's Silliman, he said it can be difficult for Internet wholesalers to police their networks as rapidly as spammers move.

Exodus.net has 51 spammers on networks under its control, according to Spamhaus, many operating for several months.

Others on the ISP list for the United States include Verizon Communication's Verizon.net; bellsouth.net, a unit of BellSouth Corp.; and comcast.net, part of Comcast Corp.

©

-------------------------------------
You are subscribed as roessler@xxxxxxxxxxxxxxxxxx
To manage your subscription, go to
 http://v2.listbox.com/member/?listname=ip

Archives at: http://www.interesting-people.org/archives/interesting-people/