The BondedSender Program (BSP) con.

I don’t know how this happened, but for some reason the antispam community seem to have walked right into quicksand. Why?   Well, consider this: If you existed to come up with ways to stop spam, you would think that implementing a way to establish trust relationships with sender would guarantee* that they wouldn’t send you spam.

* – No there are no guarantees.

Well recently a configuration option within SpamAssassin caused me alarm since it was occurring more frequently in spams that were getting through to me. Looking into the RCVD_IN_BSP_TRUSTED score I found that spamassassin gave it a -4.3 weighting which unless the email is particularly spammy, it means the net score for that email will result it it being classified as non-spam.  Trouble is – this is spam, so why is spamassassin being so nice to it?

Looking it up, I ended up at The Bonded Sender Program .org (this is the Internet friendly face) which "turns the spam problem upside down by identifying legitimate email traffic".  Oh?  Further reading shows that the BSP has a corporate side that companies pay the BSP (read: IronPort, who also happen to own and run SpamCop) so their emails get positively flagged as non-spam.

Am I the only one spotting the delicious conflict of interest?
1. Spamassassin catches spam
2. Users report spam to SpamCop
3. SpamCop blocks spammer.
4. Spammer has less success because their servers are blacklisted

Now SpamCop, aka IronPort, aka BSP goes to spammer "Pay us a wodge of cash and we can make sure a) you don’t get flagged as spam, and b) your servers can’t get blacklisted". Sounds like a sweet deal.  Why wouldn’t any spammer go for it?

In any other industry this would be blackmail. e.g. Mafia: "Pay us your insurance so you can be sure you or your shop doesn’t meet with an unfortunate accident".

Now the BSP apparently takes abuse of their system very seriously.  I beg to differ.   I reported an instance of abuse, to which the initial reply sounded positive, but that same customer is still spamming away.  I shall post some example spams that BSP claim isn’t spam as comments.

So, anyone reading this.  If you use Spamassassin, add this to your user_prefs:

Companies or Email senders – if you hit this page whilst researching about using the BSP, then please don’t.  It is a dirty way to get your message across – if anything it will make people like myself even more vehemently outspoken against you and your products.

BSP/SpamCop/IronPort – if you want to regain some credibility, perhaps you will take your abuse reports seriously and actually kill off those customers who do use you as a ticket to get spam through.

This is my personal opinion based on my experience of spam emails I have received via the Bonded Sender Program.

One Reply to “The BondedSender Program (BSP) con.”

  1. Return-Path: <>
    Received: from (
      by with SMTP; 13 Apr 2005 23:00:09 -0000
    Received: by (PowerMTA(TM) v3.0r7) id hbmi0k0676ol; Wed, 1
    3 Apr 2005 18:58:16 -0400 (envelope-from <>)
    From: "" <>
    To: "Paul" <>
    Subject: Test and keep Do-It-Yourself Products
    Date: Wed, 13 Apr 2005 18:58:12 -0400
    Message-ID: <>
    MIME-Version: 1.0
    Content-Type: multipart/alternative;
    X-Spam-Checker-Version: SpamAssassin 3.0.1 (2004-10-22) on
    X-Spam-Status: No, score=0.3 required=4.0 tests=AWL,BAYES_00,DCC_CHECK,
            autolearn=unavailable version=3.0.1

    Content-type: text/plain; charset=iso-8859-1
    Content-Transfer-Encoding: 8bit

    Dear Paul,

    Visit for great offers like today’s feature offer below.

    Handyman Club of America
    No Risk Free Trial Membership

    Test and Keep Free Do-It-Yourself Products

    Become a Handyman Club of America Member, and Official
    Product Tester, and you’ll be eligible to test and keep
    great do-it-yourself products.Once you’ve activated your
    membership be sure to fill out your Product Test Profile
    Form and get in line to receive your first test product

    Click here for a complete list of benefits, a Free trial
    Membership and a complimentary issue of HANDY Magazine.


    This service is just one more way that delivers
    savings and convenience.

    Enjoy! Your friends at

    —-Important Subscription Information—-

    We take your privacy very seriously and it is’s policy
    never to send unwanted email messages. To view our privacy policy,
    click or paste the following link:

    To cancel your subscription, click or paste this link:


    Copyright 2005 All Rights Reserved.
    One Targeting Centre
    Windsor, CT 06095

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.