Companies can fight unsolicited e-mail on the cheap, but should also donate time and assets to the cause UCE (UNSOLICITED commercial e-mail) is expensive. It eats bandwidth, hogs disk space on mail servers, and wastes employees’ time. The problem is magnified for users on dial-up connections and wireless devices — they have to wait for UCE to download before they can delete it. Often, users are forced to abandon long-standing e-mail addresses after their inboxes are overrun with junk. Internet and e-mail service providers are deploying large-scale filtering solutions, including Brightmail, so they can offer UCE-free mail as an option to their subscribers. Brightmail and its like are expensive because they require constant research to stay ahead of spammers’ tricks. Similarly, subscriptions to the MAPS (Mail Abuse Prevention System) databases, a service that helps corporate e-mail administrators blacklist (refuse connections from) IP addresses suspected of disseminating UCE, are costly. Fortunately, there are free and low-cost alternatives, but they require more diligence and involvement. There are several free blacklist databases. They use the same query mechanism as MAPS, so e-mail server software that can use MAPS to block UCE can point to one or more of the free alternatives. The problem with the free blacklists is that they come and go; it’s hard to find ISPs that will donate the gobs of bandwidth these servers need. The databases are maintained by volunteers and funded by donations, so they’re also easy prey for any UCE pusher that files a lawsuit. Joe Jared’s Osirusoft ( https://relays.osirusoft.com ) has become a clearinghouse for open relay databases. Open relays are often used by spammers to hide the true origin of their messages. The Distributed Sender Boycott List ( https://www.dsbl.org ) lists UCE origin sites submitted by trusted reporters, and SpamCop ( https://www.spamcop.net ) sells affordable commercial services but permits free access to its blacklist. The free blacklists rely on reports from UCE victims. Every company should appoint an administrator who submits complaints to ISPs and, when an ISP doesn’t respond, sends a report to blacklist services. SpamCop offers a free UCE complaint forwarding service that hides the complainant’s address. Companies should also support anti-spam groups with donations of cash, bandwidth, or equipment, or by contributing to the legal funds of blacklist operators that get hauled to court. The blacklists aren’t just used by e-mail servers. Desktop spam blockers such as High Mountain Software’s $24.95 SpamEater Pro ( https://www.spameaterpro.com ) and McAfee’s $39.95 SpamKiller ( https://www.mcafee.com ) periodically clean users’ mailboxes of UCE. These products can use the aforementioned blacklist databases, but they identify most junk mail by checking every message’s content against a set of rules. Both products automate UCE complaints, and SpamEater Pro routes complaints through SpamCop. It takes knowledge and time to track and blacklist spammers, but the detective work can be fun and the cause is worth the effort. Software Development