nanog mailing list archives

Re: Spamcop Blocks Facebook?


From: "Daniel Staal" <DStaal () usa net>
Date: Thu, 4 Mar 2010 15:28:47 -0500


On Thu, March 4, 2010 3:19 am, Jay Hennigan wrote:

Facebook, like many similar sites, rather aggressively requests that its
users supply their email credentials so that the site can "invite" their
contacts.  All of them.  Every stinkin' email address they can mine.

Also, Facebook sends mail from many different IP ranges, and non-Facebook
(but @facebook.com) spam mail manages to get sent from overlapping IP
ranges on occasion.

Facebook tends to send mail from address+id () facebook com, where 'address'
is something like 'notifications' and 'id' is some random string.  Some
spam mail packages cannot distinguish this from address () facebook com,
which many of the spammers who try to spoof Facebook use  (using the same
common 'address'es as Facebook does).  If you don't watch what you are
doing, this can result in significant amounts of false-positives on manual
sender-based blacklists.

Daniel T. Staal

---------------------------------------------------------------
This email copyright the author.  Unless otherwise noted, you
are expressly allowed to retransmit, quote, or otherwise use
the contents for non-commercial purposes.  This copyright will
expire 5 years after the author's death, or in 30 years,
whichever is longer, unless such a period is in excess of
local copyright law.
---------------------------------------------------------------



Current thread: