As of now the site is restored. But I’m hearing that all the scripts are still down. This means no one can open tickets, sign up for FBLs, apply for whitelisting or check the status of reports. I expect this will be fixed soon, but for now it looks like AOL issues are going to be impossible to resolve.

While this is a bit of a surprise on one level, I’m not that shocked. Ken Magill mentioned in August that Goodmail was on the sales block and rumors have been circulating for weeks about significant changes coming to Goodmail.

Goodmail has struggled to find a market since they first started. At one point they were even giving services away to customers at partner ESPs. Despite the free service, people at some of those ESPs told me they were having difficulty getting customers to adopt Goodmail.

Likewise, on the ISP side, Goodmail didn’t seem to have much penetration into the market. They had AOL, Yahoo and some cable companies, but not much else. And as of early last year, Yahoo removed the Goodmail machines.

I think the real underlying problem was that most companies who are doing things well don’t need certification services. Sure, there are a couple exceptions but in general anyone who is sending good mail is getting to the inbox. Even for companies where delivery was not quite as good as they might want, the marginal improvement at those ISPs that do use Goodmail was not sufficient to justify the cost of Goodmail services.

While I have the utmost respect for the Goodmail management team I think this result was almost inevitable. I never got the impression they valued the end recipient quite as much as the ISPs do. That was just one thing that lead me to believe they just didn’t seem to understand the email ecosystem quite the way that a certification service should.

I echo Dennis’ thoughts and well wishes towards the Goodmail folks. The experiment in sender financed delivery was well worth doing and I think they did it as well as anyone could have.

This morning AOL seems to be having more mail problems, possibly related to everyone retrying mail that was hard bounced last night after the MX record was deleted. Or the company is just finally showing the consequences of laying off so many people last year.

I think the most worrying bit about this is that the AOL NOC didn’t notice there was no mail coming in for 3 hours. I don’t get mail for an hour and I start checking to see if the mailserver has fallen over. I can’t believe no one noticed no incoming mail for 3 hours.

I suggest that anyone who had AOL bounces last night package those up and resend today. But don’t send them all at once, trickle them out over the course of the day. Remember, everyone else is trying to send their mail, too. And AOL is not having a happy day.

UPDATE: The Return Path Received blog points out some of the reasons some of you might still be seeing AOL mail fail. The fix is to flush your DNS cache or reboot your DNS server.

Instead I thought I’d talk about the North Coast Journal article “The Rise and Fall of a Spam Crusader.” It’s quite an interesting article and looks into the personal and business sacrifices that people make in order to chase down spammers.

In my experience a lot of the serial litigators have very poor practices around data collection and analysis. They don’t collect evidence, they just collect email and then make assertions and assumptions. This not every effective when having to convince a judge that you are right.

The article actually does nothing to change this impression. The cases ASIS won are the cases where the defendants didn’t respond. That also means that ASIS couldn’t collect.

I do disagree with Mr. Singleton, the lawyer, where he says CAN SPAM is dead. In many cases I’ve seen there aren’t clear CAN SPAM violations. So if he’s trying to sue these spammers under CAN SPAM his cause of action is wrong. Secondly, the article goes on to talk about the broader implications.

what’s most galling, [Singleton] said, is how the ruling effectively eliminated ISPs’ ability to be bounty hunters, the role to which they were duly anointed by the CAN-SPAM Act.

Uh. No. ISPs are allowed to legally prosecute spammers, but no ISP I know of that has successfully gone after spammers has actually treated this as a bounty hunt. Sure, there have been some court wins and some settlements, but I don’t believe any ISP has won enough money to cover all their legal expenditures. And one time there was an actual transfer of property from spammer to ISP and the ISP raffled off the spammer’s Porsche to its users.

1. Sender Score – http://senderscore.org/. Provided by Return Path. They collect data from some ISPs and blocklists. Using a proprietary formula, they calculate a sender score running from 1 – 100 for each IP address sending mail to their network. Higher scores means a better reputation. Can be inaccurate for IPs sending very low volumes of email. Some ISPs use Sender Score to feed into their delivery decision engines.
2. Sender Base – http://senderbase.org/. Provided by Ironport / Cisco. They collect publicly available data as well as data from their userbase. Reputation is reported as “good” “poor” or “neutral.” Senderbase scores feed into some ISP delivery decision engines.
3. AOL reputation – http://postmaster.aol.com/cgi-bin/plugh/check_ip.pl. Reports the reputation of IPs as determined by AOL. Uses a scale of “good” “poor” or “neutral”.
4. RoadRunner blocks – http://security.rr.com/amIBlockedByRR. Reports if a particular IP address is currently being blocked from sending mail to Road Runner.
5. Spamhaus blocks – http://www.spamhaus.org/. Reports if an IP is currently listed on any of the Spamhaus lists.
6. Sendmail Reputation – http://sendmail.com/sm/resources/tools/ip_reputation/. Reports reputation of an IP address as measured by Sendmail.
7. Trusted Source – http://www.trustedsource.org/. Provided by McAfee.
8. Commtouch – http://www.commtouch.com/check-ip-reputation/. Provided by Commtouch.
9. Barracuda Central – http://www.barracudacentral.org/lookups/. Provided by Barracuda, shows what IP addresses or domain names are currently blocked.
10. SNDS – http://postmaster.live.com/snds/. Provided by Microsoft / Hotmail / Live.com. Will show IP addresses that are currently blocked by Microsoft.

Spamhaus has announced their new domain block list (DBL). The DBL is a list of domains that have been found in spam.

The DBL is managed as a “zero false-positive” list, safe to use by production mail systems to reject emails that are flagged by it. The DBL includes URIs (domains/hostnames) which are used in spam including phishing, fraud/”419″ or domains sending or hosting malware/viruses.

[...]DBL has a monitored automated self-service removal system.

There are more changes over at AOL. Annalivia has announced she is leaving AOL.  Anna has done an immense amount of work with senders over the years and her departure is definitely going to leave a hole. Drop by her website and wish her luck.

What this means to you: escalation paths and such are still being worked out, but the India Postmaster team and I have spent a lot of time working together in the last couple months; they’ll take care of you. The AOL postmaster website and reputation tool should also be useful. I’ll provide any further information as I get it.

Via Al Iverson, there’s a new informational source at anonwhois.org. This provides a list of domains registered behind privacy protection services.

Recently at MAAWG I had the opportunity to listen to a talk by Joseph Menn author of Fatal System Error: The Hunt for the New Crime Lords Who are Bringing Down the Internet. He was a very engaging and entertaining speaker who really seemed to understand the interplay between organized crime and spammers.

This is something broken at AOL’s end, and the guys with the magic fingers that keep the system running are working to fix it. Right now there doesn’t seem to be an ETA on a fix, though.

Even if you are a sender who is able to stop the retries, you may see some congestion and delays when sending to AOL for the time being. Senders who don’t get the message, or who are unable to stop their MTAs from retrying 4xx mail will continue to attempt delivery of these messages until their servers time out. This may cause congestion for everyone and a noticeable  slowdown on the AOL MTAs.

AOL blog post on the issue

HT: Annalivia

Spammers and scammers are attempting to steal money from people attempting to donate money to those in earthquake devastated Haiti. A number of places, including CNN and CAUCE, are warning people who want to donate online to do so through trustworthy links. Don’t click on links in unsolicited emails nor on random websites.

AOL laid off most of their postmaster team. This is going to have a significant impact on sender support provided by AOL. The background chatter I’m hearing indicates that there is likely to be response delays of days to weeks for support tickets.

Pivotal Veracity was acquired by Unica, a marketing software company. Industry buzz says that PV will be run as a subsidiary and maintain their independent customer base.

Spamhaus launched a new website, which includes a link for a domain based URI blocklist. There’s not much information available about this new blocklist, but it’s likely to function similar to SURBL and URIBL.

The lethic botnet was penetrated and disabled. Dark Market, one of the large credit card number trading sites, was taken down and the proprietor arrested.

While I don’t have any firm data, I expect that this is going to significantly affect the support that senders see from AOL. I know many of us have held up AOL as the poster child for how ISPs should interact with senders. That era is drawing to a close.

These layoffs come as AOL has migrated to a new mail system and a lot of senders are seeing new and different error messages. I do believe the folks handling the mail system and the migration are still there and are feverishly working to resolve problems caused by the migration. Right now things are in flux and senders should probably expect delays in getting support from AOL for delivery problems.

UPDATE: Matt Vernhout has a list of suggestions for how to deal with AOL delivery issues.