The SPAM-L FAQ

Version: 3.13

This is the SPAM-L FAQ, a document dealing primarily with how to post to the SPAM-L mailing list, what to post, and what not to post. It also includes technical information on how to track down spammers, decipher message headers, perform traceroutes, etc. If you are a newbie and these terms confuse you, don't worry. Everything you need to know is explained here, though it may take some time to understand it all. If there's something you don't understand, feel free to ask me directly or ask in SPAM-L. We'll be happy to help, that's what we're here for.

Contributions, comments, corrections, flames, and any other correspondence regarding this FAQ should go to:

Doug Muth <dmuth@ot.com>

The latest versions of this FAQ can be found at:

• http://www.claws-and-paws.com/spam-l/ (Primary site - Atlanta, Georgia, USA)

• http://oasis.ot.com/~dmuth/spam-l/ (Mirror - Whitehall, Pennsylvania, USA)

• http://jpl-trs.jpl.nasa.gov/spam-l/ (Mirror - NASA Jet Propulsion Laboratory, Calfornia, USA)

1. SPAM-L (Newbies to SPAM-L should read this first)
   • What is the purpose of this FAQ?
   • What is SPAM-L?
   • How do I subscribe?
   • How many people are on it?
   • Who owns/maintains it?
   • Is the list and/or this FAQ copyrighted?
   • How many messages does SPAM-L get each day?
   • How can I stop from getting so many messages from the list?
   • How can I determine my current subscription options?
   • OK, what is "spam", then?
   • I want to unsubscribe, but forgot how!
   • I want to join, but I'm worried that a spammer will get my e-mail address!
   • How do I search SPAM-L?

2. Posting to SPAM-L (Please read this section before posting)
   • What should be posted?
   • Some posting guidelines
   • Please do not feed the trolls
   • So how do we keep the trolls out?
   • A word about using profanity
   • Signal and Noise
   • How topics work
   • The topics for SPAM-L
   • Just how do I post to SPAM-L, anyway?
   • How do I receive my own postings to SPAM-L?
   • How can I distinguish posts to SPAM-L from other e-mail that I get?
   • Should I forward every spam I get to the list?
   • I just posted a spam I got, and got flamed. Why?
   • I just posted something to the list, and it got rejected, why?
   • Can we advertise anti-spamming products/services in SPAM-L?
   • People can't verify my PGP signature, why?
   • Please don't CC SPAM-L on complaints

3. Tracking spam (Technical stuff)
   • OK, I just got spammed. Now what?
   • But I only got one copy. How do I know it was really sent in bulk and therefore spam? (Added: 25 Jul 1999)
   • What are these "headers" you folks keep talking about?
   • How can I view the headers with mail client X?
   • How do I read them?
   • I have poor quality mail reading software, but I would still like to see some sample headers.
   • What does "forging" mean?
   • Uh, what's Telnet?
   • What is the "point of injection"?
   • How can I track down the sending system?
     • What about these "stealth" mailers?
   • A word about firewalls and forwarders.
   • What's this stuff in parentheses in the Received: header?
   • How do I track down the point of injection?
   • What about host names like "222.173.190.239" or even "3735928559"?
   • Why should I bother to track down the point of injection?
   • What's traceroute, and how do I use it?
     • I don't have/use/understand UNIX, Can I still use traceroute?
     • Traceroute says "unknown host", now what?
     • Traceroute hangs, now what?
     • I get a bunch of asterisks (**), now what?
     • Web Based Tracerouting
   • What's WHOIS, and how do I use it?
     • What about other domains than com/net/org/edu? (Updated: 25 Jul 1999)
     • Internic has fraudulent info listed, now what?
     • I don't have a UNIX shell account, can I still use whois?
   • I'm too lazy to use WHOIS or don't have enough time. Is there a "default" address which I can e-mail? (Added: 25 Jul 1999)
   • Postmaster bounced! Now what?!? (Added: 25 Jul 1999)
   • What are netblocks, and how are they useful?
   • What's nslookup, and how do I use it?
   • How to do some web-based spam tracking
   • How can I test a system to see if it relays e-mail?

4. Blocking spam
   • How do I "block" spam?
     • I see this funny header which seems to occur only in spam e-mail. Could I filter on that?
   • How do I "block" spam in a LAN?
   • How can I "block" a site?
   • What's a UDP?
   • What's an IDP?
   • What's a plussed address?
     • How can I use it effectively?

5. Miscellaneous
   • Calling an ISP voice and complaining - Why and How?
   • Calling a spammer's 800 number, be careful!
   • Getting more information on a spammer.
   • Complaining to the postal service - Why and How?
   • I got flamed by a spammer I complained to. What do I do?
   • I got flamed by the sysadmin of a site. What do I do?
   • Help! Am I being spammed by a list member?
   • I seem to receive more spam now that I'm subscribed to this list!
   • I'm a webmaster, why should I remove a paying customer just because he spamvertised his site from another system?
   • How can I mirror the SPAM-L FAQ?
   • Can I mirror SPAM-L?
   • How much do you listowner people get paid anyway?
   • How can I tell when this FAQ is updated?

6. Resources
   • Glossary
   • Web Sites
     • Information
     • Legal
     • Media
     • Organizations
     • Tools

7. Credits

8. Changes from previous versions

Please note the new layout of the FAQ. This page is now a table of contents, with links to sections of the FAQ which have been split off into other pages. This was done in an effort to minimize page loading times.

"Take away all open relays, and you will still have a spam problem; stop spam, and you will *not* have an open relay problem." -- Jeff Cooper, in a posting to SPAM-L