Port 25 - Blacklash

Valdis.Kletnieks at vt.edu Valdis.Kletnieks at vt.edu
Wed Apr 27 16:45:31 UTC 2005


On Wed, 27 Apr 2005 14:31:42 +0530, Suresh Ramasubramanian said:

> But with smtp auth, the infected user is stamped in the email headers,
> and all over my MTA logs, when a bot that hijacks his PC starts
> spamming.

Of course, the same ISPs that will use the ID in the email headers are,
by and large, the same ones that already know how to match the IP in the
headers to their radius/tacacs/etc logs....
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 226 bytes
Desc: not available
URL: <http://mailman.nanog.org/pipermail/nanog/attachments/20050427/6b585f54/attachment.sig>


More information about the NANOG mailing list