[RFCI-Discuss] Re: abuse@qwest.net removing attachments

[Jeff Makey]

I wrote:
>There is rarely a need
>for an ISP to examine message content to identify spam

Alan wrote:
>There is if they're hosting it.

mouss wrote:
>There is no need to "examine message content".

Alan correctly pointed out what I overlooked: one must examine the
content of spam to see any contact information (e.g., a URL or e-mail
address) that is there.  A thorough LART will be sent not only to the
ISP from which the spam was emitted, but to the host(s) of those
points of contact as well.  We don't need to see the message content
to know that it is spam, but the message content can help identify the
spammer.  In the case of a spamvertized web site, for instance, the
message content is *essential* for identifying the spammer and a
competent abuse desk would insist on having that content in hand
before taking any action.

                          :: Jeff Makey
                             jeff at sdsc.edu