|The spam originated within arpnetworks.com,
which is registered to:
Dolley, Garry (GD6096) gcd@SILICON.NET
146 S. Adams #10
Glendale , CA 91205
They appear to be a web design / software house. For someone in the business of
the Internet they appear to know very little about netiquette.
The spam was advertising BSDSearch.com which
claims to be a "new search engine for BSD users around the Glove [sic]".
Apparently, they have a list and they have included removal instructions. This
appears to be a non-opt-in list. Such lists are usual spammer tools. Opt-in
lists, such as those run by the FreeBSD project are those which you subscribe to, they
send you an email, you reply to it, and you're on the list. There is no doubt with
such a setup that you have voluntarily joined the list. With a spammer's
"list", such as the one run by BSDSearch.com, is the wrong way to do things.
BSDSearch.com is registered to:
Dolley, Garry email@example.com
24424 Vanowen St.
West Hills, CA 91307
This name appears regularly in one of the BSDSearch forums.
It appears that the owner of the domain from which the spam originated is also the
owner of the domain which was being touted in the spam. Mail for both of these
domains is handled by mail.filetron.com:
# host bsdsearch.com
bsdsearch.com has address 184.108.40.206
bsdsearch.com mail is handled (pri=10) by mail.filetron.com
# host arpnetworks.com
arpnetworks.com has address 220.127.116.11
arpnetworks.com mail is handled (pri=10) by mail.filetron.com
The IP addresses in question are owned by filetron:
# whois -h whois.arin.net 18.104.22.168
Pacific Bell Internet Services,Inc. (NETBLK-PBI-NET-1) PBI-NET-1 22.214.171.124 -
filetron l.l.c. (NETBLK-FILETRON-NET-1) FILETRON-NET-1 126.96.36.199 - 188.8.131.52
Complaints to firstname.lastname@example.org
bounced with this message:
Hi. This is the qmail-send program at penguin.filetron.com.
I'm afraid I wasn't able to deliver your message to the following addresses.
This is a permanent error; I've given up. Sorry it didn't work out.
vdeliver: Invalid or unknown virtual user 'postmaster'