Has anyone had any luck in reporting virus sending users to ISP's? For a month now I have been receiving the Klez virus from the same Bellsouth user over an over again. I have sent e-mails to the abuse department at Bellsouth, and I have called and left messages. Still no answer. Now I understand the user probably doesn't even know they have the virus, but I am sure that a month is more than enough time for Bellsouth to notify them and for the user to get it removed. Irritates me.

Cant you Email the sender and ask him to stop or block his ip somehow?

iptables -I INPUT -s <ip.address of Bell South User> -j DROP

You have a better chance of being struck by lightning today than you do of getting a major ISP to do anything with regard to customers infected with viruses. Add that rule and you won't hear from them again.

abuse@bellsouth.com doesnt block that spammer huh?

is the email spoofed? if not i guess u found a isp that doesnt mind spammers

Sometimes I am amazed. A member of the Bellsouth Internet Security Department (or something like that) just called me to discuss the e-mails I have been receiving. He said he would look into the issue and get it resolved. Apparently the rather stern voicemail I left this morning helped.

Yeah, the e-mail address from the user was spoofed by the virus. The header tells the story though. Unfortunately, I don't have control over the mail server for this e-mail account. Maybe I can talk to the hosting service about routing the mail though my mail server so I can have some control.

Lol. That's a first.