BestPrac.Org

Stop Spam : Best Practice in Email
Spam Prevention and Eradication


Principles of Best Practice -
Web / Email to Fax Services:

Summary

Web/Email to Fax Services have the potential of providing anonymity in communications and even retaliatory abuse against complainants.

Such services should take all ethical and technical measures possible to prevent and deter spammers from utilising and abusing such services.

Ref # Principle or Proposed Principle
W2F001  Web/Email-to-Fax Services should maintain an adequately and competently staffed abuse desk on a 24 hour, 365 day per year basis. The contact details for the abuse desk should be readily and easily accessible on the website of the Web/Email-to-Fax Service Provider, be included on all faxes sent, and also listed with the Network Abuse Clearinghouse at http://abuse.net
W2F002  Upon receipt of an evidence-based abuse report, the abuse desk of the Web/Email-to-Fax Service should investigate the complaint and take action within two (2) hours. If the complaint is valid, the email address and the originating IP Number of the offender should be barred immediately. If the complaint cannot be properly investigated within two (2) hours, the email address and originating IP Number of the alleged offender should be temporarily barred while the investigation continues. All complainants should be sent a reply stating the outcome of the investigation and the action taken.
W2F003  The cover sheet of all faxes sent via web/email-to-fax services should, in addition to the requirements of W2F001, include the confirmed email address, the originating IP Number, the rDNS and timestamp details of the sender.
W2F004  Web/Email-to-Fax Service Providers should ensure that the email address quoted by the sender of faxes via their service is valid, and that it does belong to the sender, prior to despatch of the email. This confirmation should be done in a manner similar to that used by confirmed-opt-in (sometimes referred to as 'double-opt-in') email subscription services, by sending an email to the email address quoted by the sender asking for a reply to confirm the faxing instructions, prior to the fax being sent.
W2F005  Web/Email-to-Fax Service Providers should not allow themselves to be used as defacto anonymous services, and should protect themselves from being so used by only permitting access where the user's originating IP is unmistakeable. Technologies to recognise when users are using non-transparent proxies, and to block access accordingly, should be implemented.
W2F006  Web/Email-to-Fax Service Providers should enable technology to prevent automated account registrations, ensuring that accounts opened can only possibly be humanly applied for or operated.
W2F007  Web/Email-to-Fax Service Providers should, where there may be any question as to the identity of the sender (such as with non-paying free advertising supported services, for example), place strict limits on the number of messages that may be transmitted in a given time frame. (For the sake of recommendation and example, say, 10 per 24 hour period.)
W2F008 
W2F009 
W2F010 
W2F011 
W2F012