>I received the following message from one of my subscribers.  Anyone have
>an idea how we can get this person off of the list and/or find out  how to
>get in touch with this [log in to unmask]

okay...  did just a little checking as far as I could.... would really need to
see the full header of the message to ensure that tophosting.com wasn't just
being used as a jump-off point for the mail.... especially considering it is
not a valid address there...

a DIG on the site gives the following information:

; <<>> DiG 8.1 <<>> ns tophosting.com
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 4
;; QUERY SECTION:
;;      tophosting.com, type = NS, class = IN

;; ANSWER SECTION:
tophosting.com.         22h45m24s IN NS  ns2.web229.net.
tophosting.com.         22h45m24s IN NS  ns1.dirtbike.net.
tophosting.com.         22h45m24s IN NS  ns2.dirtbike.net.
tophosting.com.         22h45m24s IN NS  ns1.web229.net.

;; ADDITIONAL SECTION:
ns2.web229.net.         1d23h25m14s IN A  209.207.135.133
ns1.dirtbike.net.       1d23h57m16s IN A  207.226.179.120
ns2.dirtbike.net.       1d23h57m16s IN A  209.207.135.134
ns1.web229.net.         1d23h25m14s IN A  207.226.179.111

;; Total query time: 14 msec
;; FROM: spock to SERVER: default -- 127.0.0.1
;; WHEN: Thu Dec  3 09:41:14 1998
;; MSG SIZE  sent: 32  rcvd: 187

This shows that the machines which serve as a nameserver for tophosting.com
are:
ns1.web229.net  207.226.179.111
ns2.web229.net  209.207.135.133

the two dirtbike.net address are NON-AUTHORITATIVE and their IP's suggest that
they are simply a NTA (network translation address) or just another machine on
that particular subnet, so we can ignore them for the moment....

web229.net is a web hosting site which is acting as the name server for
tophosting.com

now you have a choice of what to do here.... but firstly, realise that both
these sites probably have nothing to do with the unwanted e-mail apart from
providing the platform for the mail to go through..

you can contact  web229.net with the following e-mail addresses:
[log in to unmask]

http://www.tophosting.com/ takes you to an index listing.... which includes
numerous site maps... you really need to get at the header of those messages to
isolate which particular site this mail is coming in from.... if from any of
them at all... other than that you can probably get mail through to them under
either of the following addresses:

[log in to unmask]
[log in to unmask]

just explain the problem.... include some of the messages (with their
headers)... and politely ask if they have a policy dealing with spamming or
unsolicited e-mail that you can follow in order to stop the mail....
unless of course their  site is simply being used as a MULE which is where
someone is using an open SMTP port to re-route e-mail through to you... in
which case they really need to take some action at their end....

let me know if you need any other info....


Debra