RE: email spam

[Jeremy Chequer <jeremy () resolvergroup com au>]

Or at the bare minimum, require a response. Just assuming the email went through and then blaming that for a pedo 
keeping their job for another year and a half is just bad on the officials side. With scams increasing, measures need 
to be in place. Unfortunately, several agencies seem to think that you should just trust anything that comes from their 
address but that's how we end up with email spoofing. The agencies need to ensure they have the right setup in place to 
avoid ending up in spam and also ensure they are following up in some form, especially when its to do with child safety.

- Jeremy

From: NANOG <nanog-bounces+jeremy=resolvergroup.com.au () nanog org> On Behalf Of Suresh Ramasubramanian
Sent: Wednesday, 24 August 2022 12:52 PM
To: Eric Tykwinski <eric-list () truenet com>
Cc: nanog () nanog org
Subject: Re: email spam

[External Sender] Be cautious of any links or attachments within this email as it has come from an External Sender.
100%. Also - there's no way to offer a delivery sla for email.  If you have something business critical, let alone 
anything that affects child safety, pick up a phone and call, or send an officer over to the school.

--srs
________________________________
From: Eric Tykwinski <eric-list () truenet com<mailto:eric-list () truenet com>>
Sent: Wednesday, August 24, 2022 8:14:16 AM
To: Suresh Ramasubramanian <ops.lists () gmail com<mailto:ops.lists () gmail com>>
Cc: nanog () nanog org<mailto:nanog () nanog org> <nanog () nanog org<mailto:nanog () nanog org>>
Subject: Re: email spam

Sorry about the bad examples, but I remember contacting both about issues with SPF multiple times.  They both have 
seemed have to fixed things at least searching my logs for the last week.  Most of my customers have had to whitelist 
them though for past issues. It's also ezpassnj.com<http://ezpassnj.com> for the NJ collection.  Point still stands, 
assume incompetence over malice.

Sincerely,

Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300


On Aug 23, 2022, at 10:20 PM, Eric Tykwinski <eric-list () truenet com<mailto:eric-list () truenet com>> wrote:

Bill,

Not only that, did they even follow their own rules, I've been fighting with septa.org<http://septa.org/>, the 
Pennsylvania train authority, and easypassnj.com<http://easypassnj.com/>, the New Jersey transit toll collectors about 
invalid SPF records for years, and they literally don't give a shit.  If they say to put it in spam, well than that is 
their own fault.

Sincerely,

Eric Tykwinski
TrueNet, Inc.
P: 610-429-8300


On Aug 23, 2022, at 10:00 PM, Suresh Ramasubramanian <ops.lists () gmail com<mailto:ops.lists () gmail com>> wrote:

Without saying why the mail was blocked (dumb content filter looking for porn? a spamhaus listing because the police 
server was hacked? something else?) that's not going to help too much.

I've been spam filtering stuff at large providers since the late 90s and it never gets any easier to block 100% spam or 
let 100% legit mail through.

-srs

--srs
________________________________
From: NANOG <nanog-bounces+ops.lists=gmail.com () nanog org<mailto:nanog-bounces+ops.lists=gmail.com () nanog org>> on 
behalf of William Herrin <bill () herrin us<mailto:bill () herrin us>>
Sent: Wednesday, August 24, 2022 7:03:52 AM
To: nanog () nanog org<mailto:nanog () nanog org> <nanog () nanog org<mailto:nanog () nanog org>>
Subject: email spam

Hello,

To folks at places like Google and Godaddy which have gotten, shall we
say, overzealous about preventing spam from entering their systems,
consider the risk:

https://www.washingtonpost.com/education/2022/08/23/fairfax-county-counselor-solicitation-minor/

"Chesterfield County police said emails notifying Fairfax County
Public Schools that an employee was arrested and charged with
soliciting prostitution from a minor were not delivered to the school
system."

Long story short, the pedo kept his school job another year and a half.

There was once a time when both the outbound emails and the bounce
messages when they failed... worked. It was a spammy place but the
important emails got through.

Regards,
Bill Herrin