What *are* they smoking?
Richard A Steenbergen
ras at e-gerbil.net
Mon Sep 15 23:15:29 UTC 2003
On Tue, Sep 16, 2003 at 12:56:57AM +0200, Niels Bakker wrote:
>
> A wildcard A record in the net TLD.
>
> $ host does.really-not-exist.net
> does.really-not-exist.net has address 64.94.110.11
>
> $ host 64.94.110.11
> 11.110.94.64.IN-ADDR.ARPA domain name pointer sitefinder-idn.verisign.com
>
> It even responds on port 25 (says 550 on every RCPT TO). Gah.
I would say time to null route this horribly inappropriate scam, but it
looks like a few cable modem providers have already done so, and I am no
longer seeing it in the .com zone (but I still see it under .net).
--
Richard A Steenbergen <ras at e-gerbil.net> http://www.e-gerbil.net/ras
GPG Key ID: 0xF8B12CBC (7535 7F59 8204 ED1F CC1C 53AF 4C41 5ECA F8B1 2CBC)
More information about the NANOG
mailing list