CloudSecurityWorkspace

Dutch ISP Hits Spamhaus With Police Complaints

spam
0 0 10 Comments

A Dutch ISP has filed two police complaints against Spamhaus, telling eWEEK Europe that its CEO is “nuts”

A Dutch Internet Service Provider, A2B, has filed two complaints with the police against anti-spam outfit the Spamhaus project, which is based in Geneva, Switzerland.

Spamhaus touts itself as an international non-profit organisation whose mission is to track the Internet’s spam operations and sources. Some ISPs use its blacklisting services to reduce the amount of spam they have to deal with.

Meanwhile A2B is a Dutch ISP that provides the upstream connection for a number of data centres.

Blackmail Allegation

Speaking to eWEEK Europe UK, the director and owner of A2B, explained why he had decided to file two complaints with the Dutch police about Spamhaus, accusing it of “blackmail”, after it added all of A2B’s IP addresses to its SBL blacklist.

The problem began after Spamhaus asked A2B to block all the data traffic from the German ISP Cyberbunker, claiming the latter had been engaged in spamming. But A2B told eWEEK Europe that it decided to block only the particular IP address that Spamhaus had identified as a source of spam.

But this cut little ice with Spamhaus, which promptly added all of A2B’s IP addresses (for all of its customers) to its blacklist. After about 24 hours, A2B gave in and blocked all of Cyberbunker’s traffic, after which the blacklist entry was removed.

A2B sees this as proof it had been extorted and that the listing was not based on the ISP being involved in spamming. It claims Spamhaus’s actions were unfair and illegal.

“We are an ISP that provides upstream connections to our clients (mostly data centres),” explained A2B owner Erik Bais. “One of our data centre clients had another client, who was the original target of this problem.”

“Basically what happened is that instead of asking us to deal with it (by removing the offending IP address), Spamhaus told us that it wants that particular customer off the Internet, or we list all your customer’ IP addresses on our blacklist” Bais said.

“This forced us to drop this particular customer’s IP address, but this IP address had nothing to do with where the spam message had originated from,” said Bais. “Suddenly all of our innocent customers were asking us what is going on, as their email connections were suddenly not working.”

No Legal Reason

“Spamhaus is blackmailing us because they forced us to do something for no legal reasons,” insisted Bais. “We checked and that customer had not violated our strict abuse policy, and it was absolutely not doing anything illegal.

“However Spamhaus said to us ‘you must do this or your customers will not have any email service’,” said Bais. “They deliberately denied email services to those that had absolutely noting to do with spam.

“Consequently I filed two complaints with the Dutch police. The first complaint is a blackmail complaint against Spamhaus. And the second complaint is that Spamhaus has denied services to our customers, and denied them to have regular email traffic.”

Non-Civil Response

Bais also went on to accuse Spamhaus of responding to his emails on the subject in a “non-civil manner.”

“I emailed Spamhaus CEO Steve Linford,” said Bais. “He responded by actually stating that ‘our policies are our polices we don’t care about your local laws’”.

According to Bais, Linford then told A2B that it must either follow the Spamhaus abuse policy or find itself on the blacklist.

“There are very strict rules about spam in the Netherlands, and indeed in Europe. Internally we also have very strict abuse policies, but I was very shocked at his response, as he (Linford) thinks he is above the law. This has to stop, as the guy is nuts,” said Bais.

“I actually stated in my email correspondence with Spamhaus that I was not trying to shut you down, or seeking financial compensation, as I want it resolved between us, but you need to adjust your policy, because using a blacklist is all about your reputation,” said Bais. “By doing this, Spamhaus is ruining its own reputation, not mine.”

Bais said that at the end of this month he will be addressing an anti-abuse workgroup in Vienna (Austria) about this incident. “We are going to address this to the whole IT community, and ask them to decide who is right and who is wrong. We are going to ask the IT community if Spamhaus is out of line, or if they need to limit themselves to just the offending ISP address in this case. This needs public discussion, but I am pretty sure which way it will go, as the community will say that Spamhaus is out of line here.”

Spamhaus did not respond to eWEEK Europe at the time of writing.

Updated: Spamhaus has responded to eWEEK Europe’s request, dismissing A2B’s claims as “rubbish”.

“If The Netherlands had penalties for wasting police time, Dutch ISP ‘A2B Internet’ would be looking at a hefty fine,” said Linford in an email.

  1. So who has the bigger EGO?? The ISP A2B is more worried about protecting his spammer’s access to the internet then cutting their access. Just blocking a specific IP never works. Block the entire subnet of these creatures and their supports like A2B and we could drastically reduce the amount of spam hitting our in-boxes.

  2. Nobody is holding a gun to anyones head and saying anyone must use Spamhaus. There is no legal leg for these complaints. It is becoming pretty standard that blocking a few IPs is ineffective as the offending provider will simply move the spammer to different IPs and continue taking their money. When someone like Barracuda Networks does the same thing or joe schmoes DNSRBL list does it are you going to file complaints against them too? Or are you going to do what is right and force your downstream customer to dump the spammer?

    1. > Nobody is holding a gun to anyones head and saying anyone must use Spamhaus.

      I don’t use Spamhaus yet fell victim to their ham-fisted thuggery.

      Spamhaus new methodology is to list entire net blocks on an annual basis regardless of whether they emitted spam or not. They have no issue harming thousands of innocent and legitimate users.

      If another system on my net block i sending spam, I have no problem seeing them punished. Punishing me and my users because of misdeeds done on a server out of my control is unacceptable.

  3. If Spamhaus blacklisted IPs I was paying for, without due cause–I would make it my life’s purpose to destroy their ability to cause further undue harm.

  4. Sue! Sue! Sue! Spamhaus is bad news. It is not anything like Barracuda Networks, which operates a legitimate service responsibly and doesn’t hide out in Switzerland saying “Just try to sue me, you’ll never catch me”.

    In addition to unfairly employing tactics like blackmail, they seek to ruin people’s and businesses’ reputations by posting often inaccurate information about them on their website and publicizing that information. When sued they hide and don’t show up to court as they are actually cowards which know they are in the wrong.

    So sue the sucker and clean up the industry. Godspeed!

  5. Services like spamhause are trying to fight mosquitoes with howitzer, it works but it also destroys everything in the neighbourhood. I’ve encountered the same type of problems and these institutes are fishy at least and incompetent at best. It’s a shadow world of uncontrollable self proclaimed ‘spam fighters’ that see themselves as the good guys but instead are terrorizing everybody else with their shear presence.
    It’s time they get bound to proper legislation and get controlled by government agencies or disappear all together.

  6. The Problem here is that there is no de-facto standard in the business and no official office to take care of the rules in this area. What the IT community, ISP´s and Marketeers alike, really need is an official entity who can work internationally and maintain a fair and strict set of rules. At the end of the day it all bares down to protecting the consumer against unwanted and malicious mails. Spamhaus does it in one way, not necessary the right way, but as long as there is no official agreement globally, that is what we end up with. – And with it the risk of someone trying to dictate the behaviour of the whole community in order to fit his/hers own selfish objectives…

  7. That is ridiculous. I can’t believe they did that the A2B first of all, then the fact that they dismiss their claims as “rubbish.” These spam companies are really out of control. Everything is about what they think, they have no qualms about completely destroying someone’s reputation at the drop of a hat. I completely agree with the allegations A2B filed. This needs to be stopped.