postmaster.hostalia.com

Email policies of HOSTALIA
Abuse Reporting Format
The Abuse Reporting Format (ARF) is intended to standarize, until now with a draft, Feedback Loop emails. These emails are warnings about an ilegal use (in this case, spam sending) of an IP that are sent to the owner of the network of that IP. ARF has the purpose of create a common format for these advices.

Abuse Reporting Format (ARF) document repository, can be found in http://www.shaftek.org/publications/drafts/abuse-report/, where you can read it's specification.

Hostalia will send Feedback Loops in this format from April 22h, 2009. Owners of the IPs listed on rbl.dns-servicios.com, our blacklist, will be advised using ARF. An example of these messages, where X.X.X.X is the origin IP:


Return-Path: no-reply@hostalia.com
MIME-Version: 1.0
Content-Transfer-Encoding: binary
Content-Type: multipart/report; boundary="_----------=_1240384939122670"; report-type="feedback-report"
X-Mailer: MIME::Lite 3.024 (F2.76; T1.27; A2.04; B3.07_01; Q3.07)
Date: Wed, 22 Apr 2009 09:22:19 +0200
Subject: Abuse Report for IP X.X.X.X: Buscar y Comprar la Mejor en Pastillas
To: abuse@domain.com
From: Postmaster Hostalia

This is a multi-part message in MIME format.

--_----------=_1240384939122670
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: text/plain

Dear Abuse Team,

You are receiving this e-mail because this account is the whois contact of X.X.X.X.

This report is in Abuse Feedback Reporting Format; to see more about this (ARF), please read:

http://www.mipassoc.org/arf/

Your IP has been added to our blacklist, RBL.DNS-SERVICIOS.COM, because we've received spam message from it.
You can see an evidence attached.

Please, review the status of the server or workstation with this IP to avoid sending spam.

Don't answer this e-mail, it's an automatic notification system.
If you want to remove your IP from our blacklist (once the problem has been resolved), go to:

http://rbl.dns-servicios.com/

Regards,

--
Postmaster - Hostalia/DNS-Servicios
postmaster@hostalia.com 
http://www.hostalia.com 
http://postmaster.hostalia.com 
http://postmaster.dns-servicios.com 


--_----------=_1240384939122670
Content-Disposition: inline
Content-Transfer-Encoding: 7bit
Content-Type: message/feedback-report

Feedback-Type: abuse
Version: 0.1
Source-IP: X.X.X.X
User-Agent: HOSTALIA ARF-AbuseReporter v0.1
Received-Date: Mon, 20 Apr 2009 21:04:00 +0100


--_----------=_1240384939122670
Content-Disposition: inline
Content-Length: 773
Content-Transfer-Encoding: binary
Content-Type: message/rfc822

Received: from X.X.X.X.domainexample.com (X.X.X.X.domainexample.com [X.X.X.X])
	by relay01.dns-servicios.com (Postfix) with ESMTP id 65CF65EAFF7;
	Mon, 20 Apr 2009 22:03:59 +0200 (CEST)
Received: from [X.X.X.X] by mx1.biz.mail.yahoo.com; Mon, 20 Apr 2009 21:04:00 +0100
Message-ID: <01c9c1fb$86d7a000$dae6a655@trcustomerservice>
From: "Las Pildoras Sin Receta" 
To: x@x
Subject: Buscar y Comprar la Mejor en Pastillas
Date: Mon, 20 Apr 2009 21:04:00 +0100
MIME-Version: 1.0
Content-Type: multipart/alternative;
	boundary="----=_NextPart_000_0007_01C9C1FB.86D7A000"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.3790.1830
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830



--_----------=_1240384939122670--


ARF messages from Hostalia will have the Subject as the original email (the spam message) as the draft says. But we add "Abuse Report for IP X.X.X.X:" text to permit easily search by IP, sort messages...until the ARF is RFC and recipients have updated filters and parsers to permit ARF.


postmaster@hostalia.com