Re: What *are* they smoking?

From: Matthew S. Hallacy (no email)
Date: Mon Sep 15 2003 - 19:45:08 EDT


On Tue, Sep 16, 2003 at 01:18:26AM +0200, Jeroen Massar wrote:
>
> Even worse of this is that you can't verify domain names under .net
> any more for 'existence' as every .net domain suddenly has a A record
> and then can be used for spamming...
>
> From: Spammer <i at spam dot using dot verisign dot eventhoughthisdomaindoesntexist dot net>
> To: You <>
>
> Thank you Verisign! Now we need to check for existence of an MX
> and then just break a couple of RFC's in the process :(

Checking for NS or SOA record(s) is sufficient, neither are being returned,
only A records.

Of course, you could just block anything that resolves to netsol.

-- 
Matthew S. Hallacy                            FUBAR, LART, BOFH Certified
http://www.poptix.net                           GPG public key 0x01938203









Hosted Email Solutions

Invaluement Anti-Spam DNSBLs



Powered By FreeBSD   Powered By FreeBSD