[119680] in North American Network Operators' Group
Re: I got a live one! - Spam source
daemon@ATHENA.MIT.EDU (John Peach)
Wed Nov 25 19:17:44 2009
Date: Wed, 25 Nov 2009 19:16:53 -0500
From: John Peach <john-nanog@johnpeach.com>
In-reply-to: <bb0e440a0911251546i4fc94359x78a331508704ed66@mail.gmail.com>
To: nanog@nanog.org
Reply-To: nanog@nanog.org
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
On Thu, 26 Nov 2009 05:16:15 +0530
Suresh Ramasubramanian <ops.lists@gmail.com> wrote:
> On Wed, Nov 25, 2009 at 10:55 PM, Michael Peddemors
> <michael@linuxmagic.com> wrote:
> >>
> >> Could you elaborate on what constitutes correct swip information?
> >>
> >
> > Sure, you just opened the door to my opinions on this :)
> >
>
> Dysfunctional rwhois servers sounds more like general brokenness than
> malice. The other interesting (!) characteristic of thie sort of bulk
> mailer discussed in this thread is that the netblock is most likely
> swipped / rwhois'd to a brand new shell company LLC, headquartered in
> what looks like a UPS store maildrop.
>
In the instances he quoted, I prefer, at best, a wish not to know about
what is spewing from their address space.
--
John