Update on mail bombing threats--words fail me--enjoy the laugh

Tue Jan 7 16:58:51 UTC 1997

I posted recently about a recent mailbombing threat apparently originating
from Cyberpromo.  Many of you may have received this, but I must share it
for those who haven't seen it...the specter of Cyberpromo being victimized
by Nasty Evil Spammers had me laughing so hard tears ran down my face and
my ribs hurt.

Howard

------
Received: from cyber3.7.nostoppingittop (daemon@[206.154.151.19]) by
mail.clark.net (8.7.3/8.6.5) with ESMTP id UAA24805 for <hcb at clark.net>;
Mon, 6 Jan 1997 20:51:28 -0500 (EST)
Received: (from daemon at localhost) by cyber3.7.nostoppingittop (8.7.4/8.7.3)
id UAA05715; Mon, 6 Jan 1997 20:53:44 -0500 (EST)
Date: Mon, 6 Jan 1997 20:53:44 -0500 (EST)
Message-Id: <199701070153.UAA05715 at cyber3.7.nostoppingittop>
From: abusebot at savetrees.com (Mail AutoResponder)
To: "howard c. berkowitz" <hcb at clark.net>
Subject: RESPONSE FROM CYBERPROMO

Version 1-4-97:

Cyber Promotions has recently terminated several accounts for
abuse of our policies.  (Updated TOS at end of message).

Cyber Promotions will not tolerate irresponsible
commercial email activities.

The following email accounts have been *recently TERMINATED...

*noci at cyberpromo.com          1-4-97:  Spamming with THREATS!

jrtkjs at savetrees.com         10-9-96: Forgery and spamming INTERNET
jrtkjs at answerme.com          ""      ""       ""     ""     ""     ""
dollars at savetrees.com        Non-existant account.  The account was
forged by the people who opened the accounts above.

info1 at cyberpromo.com         10-8-96: Unsolicited ads to INTERNET addresses

changes at answerme.com         9-30-96: Unsolicited ads to INTERNET addresses
changes at cyberpromo.com       9-30-96: Unsolicited ads to INTERNET addresses
changes at savetrees.com        9-30-96: Unsolicited ads to INTERNET addresses

catalog at savetrees.com        9-30-96: Unsolicited ads to INTERNET addresses
catalog at cyberpromo.com       9-30-96: Unsolicited ads to INTERNET addresses
catalog at answerme.com         9-30-96: Unsolicited ads to INTERNET addresses

eleven at answerme.com          9-28-96: Forgeries
eleven at savetrees.com         9-28-96: Forgeries
eleven at answerme.com          9-28-96: Forgeries

tsahk at cyberpromo.com         9-27-96: Unsolicited ads to INTERNET addresses
tsahk at answerme.com           9-27-96: Unsolicited ads to INTERNET addresses

icssender at omni.cyberpromo.com   9-19-96: FORGED unsolicited email, making
it appear that Cyberpromo's auto-sender was responsible.  If you are in
receipt of the message, please look through the headers and complain to the
appropriate postmasters.

networkes at answerme.com       9-17-96: Ignored remove requests
networkes at cyberpromo.com     9-17-96: Ignored remove requests
networkes at savetrees.com      9-17-96: Ignored remove requests
reminders at answerme.com       9-17-96: Unsolicited ads to INTERNET addresses
reminders at savetrees.com      9-17-96: Unsolicited ads to INTERNET addresses
reminders at cyberpromo.com     9-17-96: Unsolicited ads to INTERNET addresses

salespromo at answerme.com      9-16-96: Unsolicited ads to INTERNET addresses
salespromo at savetrees.com     ""  ""         ""  ""
salespromo at cyberpromo.com    ""  ""         ""  ""
promo at answerme.com           ""  ""         ""  ""
promo at savetrees.com          ""  ""         ""  ""
promo at cyberpromo.com         ""  ""         ""  ""
info4free at answerme.com       ""  ""         ""  ""
info4free at savetrees.com      ""  ""         ""  ""
info4free at cyberpromo.com     ""  ""         ""  ""

manda at cyberpromo.com      8-28: Massive abuse to INTERNET addresses / FORGERY
manda at answerme.com        8-28: Massive abuse to INTERNET addresses / FORGERY
website at cyberpromo.com    8-27: excessive abuse to AOL / removals ignored
sevenmil at cyberpromo.com   8-27: excessive abuse / all removals ignored
sevenmil at answerme.com     8-27: ""     ""      ""     ""     ""    ""
vera at cyberpromo.com
vera at answerme.com
zol at answerme.com
website at answerme.com
allied at cyberpromo.com
allied at answerme.com
lists at cyberpromo.com
lists at answerme.com

Cyber Promotions is *not* in business to annoy people.  We are in the
business of sending (and assisting in sending) commercial (and
noncommercial) email to people who are *not* offended by the receipt of
these messages.  Unfortunately, due to many experiences (many of which were
out of our control) we have had some problems accomplishing our goals
without upsetting some people.  We are truly sorry about that fact, and we
plan to "clean up the streets" as best as we can.

Some people have been under the impression that all email that appears to
come from cyberpromo.com, is from Cyber Promotions.  That is not true.
Most of the complaints that we have recently received have been in reaction
to people who have "autoresponders" and "virtual email addresses" on our
system.  In that case, their mail would have referenced an account on our
system, but originated from a different site.  Unfortunately, software like
Pegasus enables their mail to appear as if it came from us, directly.  But,
their true origination is still evident in the headers.  You can determine
where it originated if you know how to decode headers.  But when doing so,
remember that Pegasus, for example, actually logs into *our* sendmail.  At
this time, the only messages that originate from Cyber Promotions, use our
proprietary Cyber Sender 5.0+ protocol which will always be indicated in
the organization: header.

Due to these "look alikes," it could appear that recipients' remove request
were being ignored.  WE DO NOT IGNORE REMOVE REQUESTS.

Please note: we have no control over mail that originates from
other sites, that travel through our SMTP (relay-host) servers.  We will
simply terminate any accounts that we maintain, that is referred to in
their abusive mail.

ATTENTION PRODIGY MEMBERS:
It has come to Cyber Promotions' attention, that some of you are having a
major problem removing yourselves from our lists.  This can be attributed
to the "alias" that your outgoing mail may contain.  If you are having
problems, please send an email to manremove at cyberpromo.com and type both of
your email addresses in the body of the message, each on its own line,
without any comments.  The subject line is ignored.  You probably have one
address like xazd35r at prodigy.com and another address like
sanford at prodigy.com.

ATTENTION PIPELINE MEMBERS:
It has come to Cyber Promotions' attention, that some of you are having a
major problem removing yourselves from our lists.  This can be attributed
to the "alias" that your outgoing mail may contain.  If you are having
problems, please send an email to manremove at cyberpromo.com and type your
email addresses in the body of the message, each on its own line, without
any comments.  The subject line is ignored.  You should type your email id
followed by the following THREE domains.   @usa.pipeline.com,
@pipeline.com,  @nyc.pipeline.com.  Even if you feel that your address is
definately only one of the three possibilities, you should still remove all
three addresses (each on its own line).

ATTENTION INTERNET USERS:
It has come to Cyber Promotions' attention, that some of you are having a
major problem removing yourselves from our lists.  This can be attributed
to the "alias" that your outgoing mail may contain.  If you are having
problems, please send an email to manremove at cyberpromo.com and type your
email addresses in the body of the message, each on its own line, without
any comments.  The subject line is ignored.  If your email address could
contain an alias like mail.domain.com or if you may have more that one
email address that points to another email address, you should remove them
all.  If you wish to remove *every* email address in your domain, please
contact us, and we will "grep" out every possibility.

REVISED TERMS OF SERVICE:

1. We do not allow postings to inappropriate
newsgroups with reference to your account
because such postings result in *MUCH* more negative
response than positive.

2. We prohibit the advertising of offensive material
(ie. pornography, weapons, etc).

3. You may not use the account to participate in
illegal activities.

4. Our TOS strictly prohibits the sending of mass commercial
emails to INTERNET addresses, unless expressed permission
has been granted to you by the recipient.
In addition, you *must* honor all requests for removal
from your mailing list in a diligent manner.
Our service can be used in conjunction with advertisements that
you place with a bulk email company other than your
own or us, as long as they follow the same guidelines.

5.  Cyber Promotions reserves the right to terminate any account for any
reason at any time, without notice.