UUNet contact for security spambot?
Suresh Ramasubramanian
suresh at outblaze.com
Mon Jan 5 16:51:18 UTC 2004
Jay Hennigan [1/5/2004 10:14 PM] :
> Mail comes from "secmbox3 at uu.net" with a return path of "eagleeye at uu.net".
I'm getting these too, because whoever it is has been a bit too clever
for his own good.
Like - the ARIN contact for a netblock is foo at email.com, where email.com
is a freemail service that we run.
This genius at uunet takes the foo at email.com, determines that email.com
admins can be best reached at postmaster at email.com, and sends us reports
about an IP that we have zero control over.
Totally dumb, of course ... but luckily not at the sort of volume that
is generated by zone alarm type GWF [1] software.
srs
[1] Goober With Firewall
--
srs (postmaster|suresh)@outblaze.com // gpg : EDEDEFB9
manager, outblaze.com security and antispam operations
More information about the NANOG
mailing list