Actually Art, we've received several
different versions of the issue from a variety of Earthlink staff, mostly the
technical support people. This is just one of the versions. I know this because
I've personally talked to their technical people several times over the
past couple of weeks.
I was able to finally talk to a live human
being late yesterday afternoon who seemed very willing to discuss the issue and
work together to solve the problem. He happens to be a Radio Amateur in the
office of the CEO of Earthlink. I had written the CEO about the problem. His
version, and the one he's working with us to resolve, has apparently little to
do with spam, per se. He claims, after reviewing their internal procedures, that
there is a high percentage of e-mail coming into Earthlink from arrl.net that
contains either non-existent or closed account addresses. On the surface, this
would indicate that a spammer is at work just e-mailing to any combination of
letters/numbers (called a "dictionary attack") hoping to hit some real addresses
at Earthlink.
The Earthlink process for "null routing"
(basically sending all mail from an offending domain into the bit bucket) is
completely automated, untouched by human hands. If the volume of mail to closed
accounts as a percentage of the total of all the mail, gets above a certain
limit, their process of delaying mail (null routing) kicks in.
What may be happening here is that a
percentage of our members have switched their home e-mail addresses but failed
to tell us. While most are active Radio Amateurs and it doesn't seem likely,
this is the reason I'm being given at this point. If you are a conspiracy
theorist (which I am not), you might believe that a spammer is "spoofing" the
arrl.net domain in the "from" address of the messages to Earthlink and, at the
same time, using a dictionary attack which would create the same situation.
Either way, our new Earthlink contact is willing to work with us to try and
resolve the problem. We will be trying to match our address list with their
valid accounts and will purge any arrl.net account that is being forwarded to a
closed or nonexistent Earthlink account. If what we are being told is true,
this should resolve the problem.
Certainly no one likes to get spam.
Although, I am a believer in economics and think that, if no one was making
money off this junk, no one would be doing it. But I digress. The real culprits
are not Earthlink or arrl.net but the ISPs all over the world that allow their
sites to be used as entry points for this junk. That's why blackhole lists exist
although they are problematic as well. But the perception is that whoever's
domain is in the address is responsible for getting rid of the spam. It doesn't
matter that the individual has posted his or her e-mail address all over the
Internet for anyone to send things to, valid mail or junk. The perception is
that its not the individual's problem. No one wants to hear that.
Of course, arrl.net could install spam
filtering (at a cost which, to this point, has been deemed too expensive).
Earthlink spends hundreds of thousands of dollars a year on it, probably in the
millions. As Jay pointed out in a recent note, there is a small sub committee of
A&F looking at this right now and will be making a recommendation. The
bottom line is that it will probably cost money and we will have to make the
decision if this is important enough to have resources applied to it,
particularly in light of our recent strategic planning session that identified
new strategies that will also require resources. It may be that we have to
charge the members for it. That remains to be seen.
If I can provide any more information,
please let me know.
73,
Barry, N1VXY
-----Original Message-----
From:
Sumner, Dave, K1ZZ
Sent: Monday, September 29, 2003 8:34
PM
To: arrl-odv
Subject: [ARRL-ODV:9537] Re:
Earthlink
Well, this is a different story than the one Barry was told this
afternoon by an assistant to the Earthlink President.
Dave
-----Original Message-----
From: Goddard, Art
(Dir, SW)
Sent: Tue 9/30/2003 12:04 AM
To: arrl-odv
Cc:
Subject: [ARRL-ODV:9535]
Earthlink
Here is the reply of an Earthlink Network Abuse Engineer to
one of our
Members (k6rix@arrl.net)
In the e-mail, the engineer says
the mail our Member received from ARRL
contains misrepresentations and
false assertions. But the ARRL Member can
rely on Earthlink to get
the truth.
Neat, huh?
73, Art
W6XD
----------------------------------------------------------------------------
----
>Date:
Mon, 29 Sep 2003 13:39:32 -0400 (EDT)
>From:
abuse@abuse.earthlink.net
>To: k6rix@arrl.net
>Subject: Issue
030924-23958246
>
>We apologize for the confusion caused by the
mail you may have
>received from arrl.net. In this mail they
have made several
>misrepresentations, such as the statement that
EarthLink is
>blocking all mail from arrl.net. This is not the
case. Neither
>is their assertion that this department claimed
they were an open
>relay.
>
>In truth, arrl.net's servers
have periodically triggered
>automated "self-defense" mechanisms on
our mail servers. These
>temporary blocks are triggered not
simply by high volumes of
>unsolicited e-mail, but disproportionately
high ratios of spam to
>legitimate mail.
>
>In the case of
arrl.net, this is due to the fact that the
>administrators of arrl.net
have chosen to take a completely hands
>off position in the fight
against spam, doing nothing to prevent
>the unsolicited e-mail that is
originally addressed to users in
>that domain from being propagated
throughout the rest of the
>Internet.
>
>While the
EarthLink Abuse department does not maintain this
>particular process
and has no control over it, we have explained,
>in great depth and
detail, the cause of the problem and what
>steps can be taken to
prevent these blocks in the future.
>
>In summary, the ability
to prevent these temporary blocks from
>being triggered lies
completely within the control of arrl.net.
>Further questions about
how they choose to run their services and
>the resulting issues should
be referred directly to
><bshelley@arrl.org> and/or
<bgmiller@nframe.com>, who make the
>decisions about the
administration of arrl.net's
servers.
>
>Regards,
>
>Louis Rush
>EarthLink
Network Abuse Engineer
>abuse@abuse.earthlink.net
>http://www.earthlink.net/about/policies/
>---------------------------------------------------------------------------
---
>