Re: What *are* they smoking?

From: Richard A Steenbergen (no email)
Date: Mon Sep 15 2003 - 19:15:29 EDT


On Tue, Sep 16, 2003 at 12:56:57AM +0200, Niels Bakker wrote:
>
> A wildcard A record in the net TLD.
>
> $ host does.really-not-exist.net
> does.really-not-exist.net has address 64.94.110.11
>
> $ host 64.94.110.11
> 11.110.94.64.IN-ADDR.ARPA domain name pointer sitefinder-idn.verisign.com
>
> It even responds on port 25 (says 550 on every RCPT TO). Gah.

I would say time to null route this horribly inappropriate scam, but it
looks like a few cable modem providers have already done so, and I am no
longer seeing it in the .com zone (but I still see it under .net).

-- 
Richard A Steenbergen <>       http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)







Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD