RE: yahoo.com acknowledges no control over third party email from their mail servers


yahoo.com acknowledges no control over third pa...
\ Michael Scheidell (15 May 2008)
. \ John Hardin (15 May 2008)
. . \ Michael Scheidell (15 May 2008)
. . . \ mouss (15 May 2008)
. . \ SM (15 May 2008)
. . \ Michael Scheidell (16 May 2008)
. . . \ James Pratt (16 May 2008)

2 msg	Clean 'TO' field
6 msg	inconsistent scoring issue?
3 msg	FORGED_MUA_OUTLOOK 4.1
2 msg	Re: Integrating Spam assasin with exchange server.
1 msg	Razor or Spamassassin problem?
1 msg	Day Old Bread list performance
3 msg	Too Much SPAM Accepted
3 msg	Is there a default SA check page
9 msg	VBounce ruleset
2 msg	tflags multiple with mimeheader rules
1 msg	Local domains
2 msg	how to count lines in the body
18 msg	How to output Debugged Lint to file
2 msg	_HAMMYTOKENS_/_SPAMMYTOKENS_ templates
1 msg	User Folder problem with sa_learn
2 msg	VBounceRuleset for non-sysadmin?
4 msg	AWL putting spam in my inbox
4 msg	question about MISSING_SUBJECT
6 msg	Spanish Content

Subject:	RE: yahoo.com acknowledges no control over third party email from their mail servers
Group:	Spamassassin-users
From:	James Pratt
Date:	16 May 2008

> -----Original Message-----
> From: Michael Scheidell [mailto:scheidell]
> Sent: Friday, May 16, 2008 7:46 AM
> To: John Hardin
> Cc: SpamAssassin Users List
> Subject: Re: yahoo.com acknowledges no control over third party email
> from their mail servers
> >
> > How the hell can they disown that? The rDNS is from a domain they
> control!
> >
> Didn't disown it, just said it didn't come from a yahoo.com authorized
> source, ie: they have open third party relay and just allow random
> spammers
> to use their servers.
>
> I get that email response from them 75% of the time, which means
> (according
> to yahoo.com) that 75% of the spam coming from yahoo.com DKIM signed
> servers
> is from third partys, not authorized yahoo.com users.
>

If you get testy with them and mail them back and forth about it, and
include links to the whois/dig output *proving* that they are
lying/hiding/whatever, they will eventually "fess up", and a day or so
later, you should receive the standard "We have taken appropriate action
against the user in question (yadda-yadda)" email. ...Whether or not
they actually *do* anything is obviously an unknown, however, I agree
that this is just *bad*, so I tend to "call them on it" every time if I
can/have the time.

IOTW - I'm not exactly on "Elmer's" buddy-list... ;)