[PLUG-TALK] A question of ISP behaviors

[Rich Shepard]

   Whenever a UCE message lands in my inboxes I find the owner of that IP
address block and forward the message to their 'abuse at ...' address. (Many
ISPs don't have an abuse user.) So, when my forwarded message with the
attached malware is immediately rejected by their mail server because it
contains nasty stuff I have to ask: why didn't they reject it from their
customer in the first place?

   Is is common for outbound mail to bypass all UCE/spam filters at the
hosting ISP? I'm curious why their spam filters catch the spam report but
not the original message.

Rich