Fw: open relays at Earthlink

Bill Becker bbecker at iconn.net
Mon Aug 17 17:09:07 UTC 1998


On Mon, 17 Aug 1998, Adam D. McKenna wrote:

> Received: from gull.prod.itd.earthlink.net (gull.prod.itd.earthlink.net
> [207.217.120.85]) by hq.idt.net (8.8.8/8.8.8/TANNHAUSER) with ESMTP id
> JAA12380 for <adam at hq.idt.net>; Mon, 17 Aug 1998 09:42:44 -0400 (EDT)
> Received: from mail.earthlink.net (1Cust162.tnt2.sdg1.da.uu.net
> [208.250.122.162])

This probably means that Earthlink is renting uunet ports for their dialup 
business.  You can complain to abuse at uunet about spam originating from 
1Cust162.tnt2.sdg1.da.uu.net, but they will do nothing except forward 
your complaint to someone else (the reseller).  It can take anywhere 
between 3 days and a week for them to stop a spammer.  One has been 
operating out of .nyc*.da.uu.net for a couple of months now.

The uunet abuse staff doesn't enforce the uunet AUP unless uunet is 
billing the user directly, so you might try emailing noc at uunet if the 
spammer is online.  Last time i looked, the uunet NOC was still acting 
in a responsible manner.

Bill




More information about the NANOG mailing list