Is There Any Reason to Report Spammers to ISPs? 117
marko_ramius asks: "For years I've been a good netizen and reported spam that I get to the appropriate contacts at various ISPs. In the entire time that I've done this I've gotten (maybe) 5 or 6 responses from those ISPs informing me that they have taken action against the spammer. In recent years however, I haven't gotten any responses. Are the ISP's so overwhelmed with abuse reports that they aren't able to respond to the spam reports? Do they even bother acting on said reports? Is there any real reason to report spammers?"
yep (Score:4, Insightful)
Definitely report if you have clue (Score:4, Insightful)
Re:yep (Score:4, Insightful)
I provided tier 3 abuse support to a large ISP and set up the abuse desk for the now defunct dialup offering of the ISP, my advice to the abuse desk people was to shitcan any abuse report that contained contained abusive comments added by the person reporting the spam. Adding abusive comments is not reporting abuse, it IS abuse.
Re:Please continue! (Score:3, Insightful)
Here's a thought: Might giving some sort of reply, even a thank-you form letter, not keep people like Mr. marko_ramius from being discouraged? Maybe that's something you and your ilk should consider.
(P.S. there was no hostility in the above)
Re:No, I strongly disagree... (Score:3, Insightful)
As for you assertion that blocking inbound from dynamics is not effective, I, and MANY other ISP's disagree with you. The mail server logs don't lie. Blocked mail from dynamic space (which is ALL spam) is 75% of ALL connections to our mail servers, with other blacklists cutting it down even further. That reduces load on spamassassin and other anti-spam analysis by a factor of 6. While it hasn't STOPPED spam, it sure as hell cuts it down to a manageable level.
I agree that ISP's need to be a lot more proactive and less reactive towards spam. Port blocking is proactive. Responding to spam complaints is closing the gate after the cows got out.
Re:Yeah... (Score:3, Insightful)
I have this feeling that you don't know a lot about spam and how it is propagated. There's a reason that everyone ran around blocking consumer IPs, weighting against IPs without MX records, and greylisting IPs that pumped in too many invalid addresses in a short period of time (indicating a distributed dictionary attack (it didn't help that our upstream provider was the source of a lot of these attacking addresses).